Privacy Policy

About you (the account holder):

• Name, email address, phone number, business name and industry
• Password (stored as a salted hash — we never store it in plain text)
• Payment details (processed by Stripe; we never see full card numbers)
• Usage activity: searches run, leads viewed, emails and messages sent, features used
• Device and browser information, IP address
• Gmail and Google Calendar access, only if you choose to connect them (OAuth, encrypted at rest)

About the prospects you search for and contact:

• Business name, industry, location, and public contact details (email, phone, website)
• Stored in your account only — other Opilyt customers cannot see your data (Row Level Security)

About field operations:

• Employee names, roles, work assignments, schedules, checklist activity, and status updates
• Customer and service-location details, including addresses, access instructions, and service notes
• Work evidence uploaded by authorized users, including photos, videos, comments, timestamps, and issue reports
• Conversation history between managers and field personnel attached to a specific job

• To operate the Service: run searches, score leads, generate and send outreach, track your pipeline
• To schedule, assign, document, review, and communicate about field work
• To bill your subscription
• To improve the product and fix bugs
• To detect fraud and keep the platform secure
• To respond when you contact support
• To meet tax, accounting, and other legal obligations

We share the minimum data necessary with the vendors that run Opilyt:

• Stripe — payment processing
• Supabase — database hosting and authentication (encrypted at rest)
• Resend — outbound email delivery
• Google APIs — Calendar and Gmail integration, only if you connect them
• Anthropic (Claude API) — lead scoring and email drafting; your data is not used to train Anthropic's models
• Nexus Intelligence — lead enrichment and contact discovery
• Vercel — application hosting and server logs

We do not sell your data or your prospects' data to data brokers.

• Account data: kept while you're subscribed, deleted within 30 days of cancellation
• Prospect/lead data: yours — kept while your account is active, deleted within 30 days of cancellation
• Operational records and work evidence: kept while your account is active and deleted within 30 days of cancellation, except where law or an active dispute requires longer retention
• Server logs: kept 30 days
• Billing records: kept 7 years (tax requirement)

Wherever you're located, you can ask us to:

• Show you what data we have about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data (CSV)

If you're in the EU/UK, California, or Canada, you have additional rights under GDPR, CCPA, or PIPEDA respectively — including the right to opt out of the sale or sharing of personal information. Opilyt does not sell personal information.

• All traffic encrypted in transit (TLS)
• Data encrypted at rest
• Passwords hashed, never stored in plain text
• Access to your data limited to you and authorized Opilyt staff

Opilyt uses Claude (Anthropic) to score leads and draft outreach emails and messages. Scores and drafts are recommendations — you review and approve every message before it sends. Your data is not used to train third-party AI models.

We use cookies to keep you logged in and remember your preferences, plus limited analytics to understand product usage. You can disable non-essential cookies in your browser settings.

If we make material changes to this policy, we'll notify you by email or in-app before they take effect.

Questions about this policy or your data:

eleazar@opilyt.com

EO Ventures LLC · Lake Wylie, South Carolina, USA