Privacy Policy

Oprevo is a customer relationship management product operated by Vectrel AI. In this document, Oprevo, we, and us refer to that operator, and you refers to the person using the product or the organization on whose behalf it is used.

Oprevo is in active development. Some surfaces of the product are prototypes that keep their data in your own browser and never send it to us; those surfaces are labelled as prototypes where they appear.

Account information. When you create an account we collect the name and email address you supply, and a hashed representation of your password. If you sign in through a third-party identity provider we collect the account identifier, name, and email address that provider releases to us.

Workspace content. Oprevo stores the customer records you or your colleagues enter: leads, contacts, accounts, opportunities, cases, tasks, and the notes and activity attached to them. That content belongs to your organization and we process it to provide the product.

Operational records. Every change made through Oprevo is recorded with the identity of the actor, the time, and the nature of the change, because an audit trail is part of what the product is for. We also keep server logs containing request metadata such as timestamps, correlation identifiers, and response codes.

We use the information above to operate the product, to authenticate you, to keep one organization's data separate from another's, to investigate faults and abuse, to enforce usage limits, and to communicate with you about the service.

We do not sell personal information. We do not use workspace content to train machine-learning models for anyone other than the organization that owns it, and we will not begin doing so without a separate, explicit agreement.

If you connect a Google or Microsoft account, Oprevo requests only the scopes needed for the feature you are enabling, and it asks for them at the moment you enable it rather than in advance.

Data obtained through Google APIs is used and transferred in accordance with the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer that data to third parties except as needed to provide the feature you enabled, and we do not use it for advertising. You can disconnect a connected account at any time, and doing so revokes our access going forward.

Oprevo runs on infrastructure operated by third parties, including a hosting provider for the application, a managed database provider for storage, and an email provider for system messages. Each processes data only on our instructions and only to the extent needed to run the service.

We keep workspace content for as long as the workspace exists. When a workspace is deleted, its content is scheduled for deletion, and audit records may be retained for a limited period where we are required to keep them or where they are needed to resolve a dispute.

You may ask us to delete your personal information by writing to the address below. Where the information belongs to an organization's workspace rather than to you personally, we will refer the request to that organization.

Data is encrypted in transit. Access to one organization's data by another is prevented in the database itself rather than only in the application, and every mutation passes through a single governed path that records who made it.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify affected parties as required by applicable law.

Oprevo is currently operated from infrastructure located in the United States. If you use the product from elsewhere, your information is transferred to and processed there.

Oprevo is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16.

We will update this document as the product changes, and the date at the top will change with it. Material changes will be announced in the product before they take effect.

Questions about this policy can be sent to privacy@oprevo.io.