Privacy Policy

Opervian is a business process intelligence platform operated by A/C Slashopt Ltd ("we", "us"). For the personal data processed to provide the service, your organization (our customer) is the data controller and we act as its processor; for account and billing data we act as controller. Contact: support@slashopt.eu.

• Account data: your name, email address, and — for password sign-in — a salted password hash. Microsoft sign-in shares your Microsoft account identifier and email with us; we never see your Microsoft password.
• Workspace data: the content your organization puts into Opervian — pipelines, jobs, tasks, comments, documents, and configuration. This data belongs to your organization.
• Billing data: subscription plan, seat count, and Microsoft Marketplace subscription identifiers. Payments are handled entirely by Microsoft; we never receive card details.
• Operational logs: technical logs and an in-product audit trail (who did what, when) retained for security and support.

Solely to provide, secure, and improve the service: authentication, running your workflows, notifications you or your organization configure, SLA analytics, support, and billing. We do not sell personal data and we do not use your workspace data to train AI models.

The optional AI features (job briefs, weekly digests, the AI pipeline builder) send the relevant workspace content to an AI provider to generate a response: Anthropic (Claude) by default, or your organization's own Azure OpenAI deployment when your administrator configures one. AI features are off until a key is configured and can be avoided entirely by not using them.

• Microsoft Azure (EU region) — application hosting, database, and email delivery.
• Your own storage — documents are stored in the storage account your organization connects (Azure Blob, SharePoint, or Google Drive), under your control.
• Anthropic (USA) — only when the Claude-based AI features are used; transfers are safeguarded by standard contractual clauses.
• Integrations your organization enables (Slack, Microsoft Teams, Dynamics 365, Odoo, outbound webhooks) receive only the notification or record data your administrators configure them to receive.

Workspace data is retained while your organization's subscription is active. Administrators can export all organization data (JSON) and permanently delete the organization — including documents, memberships, and configuration — at any time from Settings. Backups age out on a rolling schedule after deletion.

Under the GDPR you may request access, correction, deletion, portability, or restriction of your personal data. For workspace data, contact your organization's administrator (the controller); for account data, contact us at support@slashopt.eu. You may also lodge a complaint with your local supervisory authority.

We use only strictly necessary cookies: an encrypted session cookie for sign-in and small preference cookies (such as your active organization). No advertising or cross-site tracking cookies.

Tenant data is isolated per organization with database row-level security, credentials and integration secrets are encrypted at rest, access is role-based, and administrative actions are recorded in an audit log.

We will post any material changes to this policy here and update the effective date above.