Privacy Policy
Version 1.0 — Effective May 11, 2026
This Privacy Policy describes how Opwise.ai, Inc. (“we,” “us,” or “our”) collects, uses, and protects information when you use the Opwise.ai, Inc. platform (“Service”). By using the Service, you agree to the practices described here.
1. Information We Collect
At Signup
When you create an account, we collect:
- Email address — provided through WorkOS AuthKit (our identity provider).
- Workspace name and URL slug — the name and short identifier you choose for your workspace.
- Industry hint — the manufacturing category you select (e.g., automotive, aerospace, medical device). Used to configure sensible defaults.
- Source IP address — recorded at the time your signup session is created.
- User agent — your browser or client identifier, recorded with your signup session.
- WorkOS user ID — a durable identifier assigned by WorkOS AuthKit on account creation.
During Use
When you use the Service, we collect usage data including actions taken, records created, and access logs. This data is used to operate the Service, maintain the audit trail, and improve product quality.
2. How We Use Your Information
We use the information we collect to:
- Create and operate your workspace.
- Send account and service-related communications (trial reminders, provisioning notifications, billing events).
- Maintain the tamper-evident audit trail required by regulated-industry standards (IATF 16949, AS9100, 21 CFR Part 11).
- Detect and prevent abuse, fraud, and unauthorized access.
- Improve and develop the Service.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
3. Cookies
The Service sets only strictly necessary cookies. No tracking or advertising cookies are used. The cookies we set are:
| Cookie | Purpose | Lifetime |
|---|---|---|
opwise_session | Authenticates your session to your workspace after login. | Session (expires on close) or up to 7 days if “remember me” is selected. |
opwise_signup_intent | Carries your signup state token across the identity provider round-trip. | 15 minutes. |
opwise_post_logout_slug | Remembers your workspace after logout so the login page can pre-fill. | 30 days. |
platform_session | Authenticates platform-admin access (internal staff only). | Session. |
Because all cookies are strictly necessary for the Service to function, no consent banner is required under ePrivacy Directive Recital 66 and equivalent national laws. You can delete these cookies at any time through your browser settings, but doing so will log you out.
4. Sub-Processors
We use the following third-party service providers to operate the Service:
| Provider | Role | Data location |
|---|---|---|
| WorkOS | Identity and authentication (SSO, AuthKit, SCIM) | United States |
| Amazon Web Services (AWS) | Cloud infrastructure, database, and storage | United States |
| Postmark | Transactional email delivery | United States |
| Twilio | SMS notifications | United States |
| Anthropic / OpenAI | AI-assisted features (when enabled) | United States |
All sub-processors are bound by data processing agreements consistent with applicable privacy law.
5. Data Location
All data is stored and processed in the United States.
6. Data Retention
We retain your data for as long as your account is active. After account termination:
- Your workspace data is held in read-only state for 30 days.
- After an administrative review, your workspace may be permanently deleted.
- Platform-level records (audit logs, account metadata) are retained for a minimum of 7 years following deletion, as required by applicable regulated-industry standards.
7. Your Rights
Depending on where you are located, you may have rights to access, correct, delete, or export your personal data. You may also have the right to object to or restrict certain processing, or to withdraw consent where processing is based on consent.
To exercise your rights, contact us at sales@opwise.ai. We will respond within 30 days.
California residents (CCPA): We do not sell or share your personal information as defined under the California Consumer Privacy Act. For inquiries about your California privacy rights, contact sales@opwise.ai.
EU/UK residents (GDPR): Our legal basis for processing your data is (a) contract performance — processing necessary to provide the Service you requested; and (b) legitimate interests — operating a secure and reliable platform. For questions about international data transfers or to exercise your rights under GDPR Articles 15–22, contact sales@opwise.ai.
8. Security
We implement technical and organizational measures to protect your data, including encryption at rest and in transit, access controls, and tamper-evident audit logging. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service. The “Effective” date at the top of this page shows when the most recent version took effect.
10. Contact
Questions or concerns about this Privacy Policy? Contact us at sales@opwise.ai.