Privacy Policy

1. Who we are

Opsicom Holdings Pty Ltd (ACN 700 742 409) (“Opsicom”, “we”, “us”, “our”) operates the Opsicom platform accessible at opsicom.com and opsicom.app. Our registered office is in New South Wales, Australia.

Queries about this policy should be directed to privacy@opsicom.com.

2. Information we collect

We collect personal information only where reasonably necessary to provide the Opsicom platform. This includes:

3. How we use your information

We use personal information to:

• -Provide, operate and improve the Opsicom platform
• -Authenticate your identity and maintain account security
• -Process payments and manage subscriptions
• -Send transactional emails (receipts, password resets, service notices)
• -Send product updates and marketing communications (you may opt out at any time)
• -Respond to support requests
• -Comply with legal obligations
• -Detect and prevent fraud or unauthorised access
• -Conduct internal analytics to understand how the platform is used

4. Disclosure to third parties

We do not sell, rent or trade your personal information. We may disclose it to:

• -Service providers who assist us in operating the platform (cloud infrastructure, payment processing, email delivery, analytics), each bound by confidentiality obligations
• -Third-party integrations you authorise (Xero, Google Calendar, Meta, social publishing platforms)
• -Law enforcement or regulators where required by law or court order
• -A successor entity in the event of a merger, acquisition or sale of assets

Some service providers are located outside Australia. Where we transfer personal information overseas, we take reasonable steps to ensure that the recipient handles it in a manner consistent with the Australian Privacy Principles.

5. Google user data

If you connect a Google account to Opsicom (for example, Google Calendar sync), we access Google user data only through Google's OAuth consent flow and only with the permissions you approve. Specifically:

• -We access your list of calendars and the times of events on the calendars you select, to display availability and prevent double bookings inside Opsicom
• -If you grant write access, we can create and update Opsicom booking events on the calendar you nominate
• -We do not read, store or display event details from your calendars beyond what is needed for availability (busy times), unless you explicitly enable it for a calendar

Opsicom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or where required by law.

You can disconnect your Google account from Opsicom at any time in your calendar settings, or revoke Opsicom's access from your Google account permissions. On disconnection we delete the stored tokens and synced availability data for that connection.

6. Data security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or disclosure. These include encryption in transit (TLS), encryption at rest, access controls and regular security reviews.

No method of transmission over the internet is entirely secure. While we take reasonable precautions, we cannot guarantee absolute security and are not liable for breaches beyond our reasonable control.

7. Data retention

We retain personal information for as long as your account is active or as necessary to provide our services. On account termination, we will delete or anonymise your personal information within 90 days, except where we are required to retain it longer by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

8. Your rights

Under the Australian Privacy Principles, you have the right to:

• -Access the personal information we hold about you
• -Request correction of inaccurate, incomplete or out-of-date information
• -Request deletion of your personal information, subject to legal obligations
• -Opt out of marketing communications at any time
• -Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have mishandled your information

To exercise these rights, contact us at privacy@opsicom.com. We will respond within 30 days.

9. Cookies

We use essential cookies required for the platform to function, and analytics cookies to understand usage patterns. We do not use advertising or tracking cookies for third-party advertising purposes. You can control cookie preferences through your browser settings.

10. Children

Opsicom is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Continued use of Opsicom after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions, requests or complaints, contact us at: