Opara Back to home

Privacy Policy

Last updated: July 10, 2026

Opara (“Opara,” “we,” “us,” or “our”) is an AI-powered business operations assistant for solopreneurs. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using Opara, you agree to the practices described here.

Information We Collect

Account information

When you sign up, we create an account using the identity information provided by your OAuth provider (Google or Microsoft). This typically includes your name, email address, and profile image. Opara does not store passwords — authentication is handled entirely by your provider.

Connected integration data

Opara only works when you connect the tools that run your business. With your explicit authorization, we access:

  • Email (Gmail / Outlook): We read the message threads that Opara originated on your behalf so we can track replies, and we send messages as you from your authorized account. We do not read your entire mailbox — access is limited to threads Opara started or that you explicitly bring into Opara.
  • Calendar (Google Calendar / Microsoft Graph): Read-only access to your availability so Opara can suggest times and generate booking links. Opara does not create, edit, or delete calendar events.
  • Payments (Stripe): Payment status for the invoices you manage in Opara (paid, pending, overdue) so the assistant can draft follow-ups and reflect your cash position. We do not store full card numbers; card data is handled by Stripe.

Content you create

This includes clients, prospects, projects, proposals, invoices, notes, and the drafts Opara prepares for your review. You remain in control of this content and can edit or delete it at any time.

Usage and technical data

We collect basic operational data such as log events, device and browser type, and interaction events needed to run the service, secure it, and improve reliability.

How We Use Your Information

We use the information above to:

  • Run the assistant — triaging your inbox, invoices, and proposals.
  • Draft outbound messages (invoice follow-ups, proposal nudges, replies) for your approval. Nothing is sent without your explicit action.
  • Generate your daily and weekly briefs that summarize the state of your business.
  • Learn your writing voice over time to make drafts sound like you.
  • Maintain security, prevent abuse, and provide support.

We never sell your personal data. We do not use the contents of your email or calendar for advertising.

AI Processing and Subprocessors

To provide drafting, brief generation, and voice learning, relevant content is sent to third-party AI providers for processing. We rely on the following categories of subprocessors:

  • AI providers (OpenAI and/or Anthropic): Generate drafts, briefs, and summaries from the content you authorize.
  • Stripe: Payment status and billing.
  • Google and Microsoft: Authentication (OAuth) and the email and calendar integrations you connect.
  • Hosting and database infrastructure: Cloud hosting and our PostgreSQL database, which store your account and content data.

We enter into agreements with these providers that require appropriate confidentiality and security safeguards.

Data Retention

We retain your account and content data for as long as your account is active. When you delete specific records (a client, project, invoice, or draft), they are removed from our active systems. When you delete your account, we delete or de-identify your personal data within a commercially reasonable period, except where we are required to retain certain records to comply with legal obligations or resolve disputes.

Your Rights and Choices

  • Access: You can view the data associated with your account directly in the app.
  • Export: You can request an export of your data.
  • Deletion: You can delete your account from within Opara’s account settings, which removes your associated data as described above.
  • Disconnect integrations: You can disconnect your email, calendar, or Stripe account at any time. Disconnecting email stops Opara from reading or sending on your behalf.

Depending on your location, you may have additional rights under laws such as the GDPR or CCPA. Contact us to exercise any of these rights.

Cookies and Sessions

Opara uses strictly necessary cookies to keep you signed in and to secure your session. Sessions are rolling and expire after a period of inactivity. We do not use third-party advertising cookies.

Security

We take security seriously. Integration tokens are encrypted at rest and all traffic is protected in transit with TLS. For more detail, see our Security page.

Children’s Privacy

Opara is intended for use by adults operating a business and is not directed to children under 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@opara-ai.com.