Privacy Policy

Version 1.0 · Effective 2026-07-10

Privacy Policy

Version 1.0 — Effective 10 July 2026

1. Scope

This Privacy Policy explains how OpsCorp processes personal data in connection with the OpsCorp platform, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and its rules. It applies to (a) personal data of tenant users (admins, technicians) that OpsCorp processes as a data fiduciary for account and platform operation, and (b) personal data that tenants ("Data Principal" relationships between a tenant and its own customers) upload as Customer Data, where OpsCorp acts as a data processor on the tenant's instructions.

2. Personal Data We Collect

  • Account data: name, email, phone number, role, employer/tenant details.
  • Usage data: login timestamps, IP address, device/browser information, in-app activity logs.
  • Customer Data you upload: names, contact details, service addresses, job history, and other information tenants record about their own customers and technicians in the course of using the Service.
  • Support data: information you provide when contacting support.

3. Purpose and Lawful Basis of Processing

We process personal data to: provide and maintain the Service; authenticate users and enforce tenant isolation; send transactional notifications (job assignments, AMC reminders, invoices); provide customer support; maintain security and audit logs; and comply with legal obligations. Processing is based on your consent (collected at account creation and on material policy updates), performance of the contract between you and OpsCorp, and legitimate business purposes such as security and fraud prevention.

4. Consent

Where the DPDP Act requires consent, we obtain it through a clear affirmative action — including the consent checkboxes presented when your tenant is created and whenever a material version change to this Policy requires re-acceptance. You may withdraw consent at any time by contacting us, subject to the effect withdrawal may have on your ability to use the Service.

5. Data Sharing

We do not sell personal data. We may share personal data with: sub-processors who host or support our infrastructure (e.g., cloud database and storage providers), strictly under contractual confidentiality and security obligations; professional advisors; and authorities where required by law or a valid legal process.

6. Cross-Border Transfer

Where personal data is processed or stored outside India by our infrastructure providers, we take reasonable steps to ensure an equivalent level of protection, consistent with the DPDP Act's requirements for transfers to permitted jurisdictions.

7. Data Retention

Personal data is retained in accordance with our Data Retention Policy — generally for as long as your tenant remains active, plus a defined period thereafter to satisfy legal, accounting, and dispute-resolution requirements, after which it is deleted or anonymised.

8. Your Rights

Subject to the DPDP Act, you may have the right to: access the personal data we hold about you; request correction or erasure; withdraw consent; nominate another individual to exercise your rights in the event of death or incapacity; and register a grievance. Requests can be made using the contact details in the Contact & Legal Information page. We will respond within the timelines required by applicable law.

9. Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit, role-based access control, tenant-level data isolation enforced at the database layer, and audit logging of sensitive operations. No system is completely secure, and we encourage prompt reporting of any suspected vulnerability.

10. Children's Data

OpsCorp is a B2B platform not directed at children and we do not knowingly collect personal data relating to children through the Service.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and DPDP Act, a Grievance Officer / Data Protection contact is designated to address privacy complaints. Contact details are listed on the Contact & Legal Information page.

12. Changes to This Policy

Material changes that affect how we process personal data will be published as a new version and, where required, you will be asked to re-consent before continuing to use the Service.