Last updated: October 30, 2026
We collect information you provide directly to us, including name, email address, phone number, and property details. We also collect usage data and cookies as described in our Cookie Policy.
We use your information to provide and improve our services, process bookings, communicate with you, and comply with legal obligations. We do not sell your personal information to third parties.
We implement appropriate technical and organizational measures to protect your personal data. Data is stored securely and access is restricted to authorized personnel only.
Under GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. Contact us to exercise these rights.
We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can manage cookie preferences through your browser settings.
We use trusted third-party services for authentication (Clerk), payment processing, and analytics. These services have their own privacy policies and data handling practices.
When a business connects its social accounts to Opsable, we receive access tokens from those platforms and, depending on what the business switches on, we read: the Pages and accounts it manages; comments, messages and mentions on its own posts (shown in its Opsable inbox); performance figures for posts it published (reach, views, engagement); answers submitted to its own lead-ad and lead-gen forms; and daily spend for the ad accounts it chooses. We use this only to provide those features to that business. It is visible only to that business's team, stored encrypted where it is a token, never sold, and never used for advertising. Disconnecting an account stops access immediately and removes its tokens; seeData deletion to have the related data erased.
Businesses can add Opsable's website snippet to their own websites. It records pages viewed, where the visit came from and, where the visitor has agreed to cookies (visitors in the EU, UK and Switzerland are asked first), a visitor ID. A visitor is only linked to a name when they fill in a form or arrive from that business's own email. Businesses can also look for public posts (for example on Reddit or in RSS feeds) from people asking for services they offer. In both cases the business is the controller of that information and Opsable processes it on its behalf.
When you talk to Ask Opsable, the audio is sent to our speech provider (ElevenLabs) to be turned into text. We use the text to answer your request; Opsable doesn't keep the recording. The microphone is only used while you are speaking to Ask Opsable.
If you allow notifications in a browser or in the Opsable iPhone app, we store a notification token for that device so we can send you alerts (for example a new lead or a booking change). It is removed when you turn notifications off, when the device stops accepting notifications, or when you delete your account. In the iPhone app, the camera and photos are used only when you choose to attach a photo or file, and your location only at the moment you clock on or off, if your employer requires it.
If you turn on "Read notifications aloud" in the Opsable phone app, the text of each notification is sent with it (through Apple's or Google's push service, as for any notification) and your phone turns it into speech with its own voice. No audio is made or kept by Opsable or sent to a speech provider for this.
Workplace clock-on checks (only if your employer turns them on): Opsable notes whether you clock on from your workplace's internet connection, and while you're clocked on the app checks in every few minutes so you can be clocked off after you leave. If your employer uses the face check, it runs on your phone or the workplace tablet and only a numeric code made from your face is stored, encrypted, after you agree to a notice. No photo or video is kept. The code is used only to check your clock-ons and is deleted when you delete it yourself (My shifts), when your employer resets it, or when you leave that business.
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time.
Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16.
We may update this privacy policy from time to time. We will notify you of any material changes via email or through the platform.
For privacy-related questions or to exercise your rights, contact our Data Protection Officer at privacy@opsable.io.