Legal

Privacy Policy

This policy explains how OpsWing handles personal data when you use our website, application, and connected services.

Last updated: September 15, 2026

1. Who we are

OpsWing is a business back-office platform that helps organizations manage work across email, documents, customer relationships, projects, tasks, planning, and financial administration. OpsWing is available at https://opswing.nl.

Questions about this policy or the handling of personal data can be sent to info@opswing.nl.

2. Data OpsWing may process

The information OpsWing processes depends on the features and integrations selected by you or your organization. It may include:

  • Account information, including your name and email address
  • Company information and organization settings
  • Customer and contact data
  • Emails connected through Gmail or Microsoft 365
  • Projects, tasks, and planning or calendar information
  • Quotes, invoices, expenses, and related financial administration
  • Documents and files uploaded by you
  • Usage, security, device, log, and technical information needed to operate and protect the service

OpsWing processes only the information reasonably required to provide, secure, and support the functionality selected by the user or the user's organization.

3. Google Workspace and Google User Data

Connecting Google Calendar is optional. Access begins only after a user explicitly authorizes OpsWing through Google's authorization process.

When connected, OpsWing reads the list of calendars available to the connected user so that the user can choose which calendar to synchronize. OpsWing may then read events from the selected calendar. For two-way synchronization with OpsWing Planning, OpsWing may create, update, and delete events in that selected calendar when needed to reflect planning changes.

Calendar information is used to keep OpsWing Planning and the user's selected Google Calendar synchronized. It is not used for advertising. Users can disconnect Google Calendar from OpsWing at any time as described below.

Connecting Gmail is optional. When authorized, OpsWing may read messages and thread information to provide AI Inbox features and may send messages only when the user requests a feature that requires sending, such as an approved reply or quote email.

4. Google API Limited Use

OpsWing's use and transfer of information received from Google Workspace APIs adheres to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

5. AI Processing and Anthropic

OpsWing uses Anthropic's commercial Claude API for AI-assisted product features. OpsWing sends only the data reasonably required to provide the feature requested by the user or the user's organization.

Depending on the feature used, this data may include:

  • Gmail message subjects, bodies, thread content, and relevant sender or recipient context for email analysis and reply drafting
  • Summaries, classifications, and other information derived from authorized Gmail messages
  • Google Calendar event titles, times, and scheduling context, including derived planning information
  • Relevant authorized or derived information used by Ask OpsWing, Proactive Intelligence, and quote or project generation

This data is used for inference only to provide the requesting user's feature. OpsWing does not use Google Workspace data for generalized model training or fine-tuning.

Anthropic states that inputs and outputs submitted through its commercial API are not used to train its models by default unless the customer opts in. OpsWing has not opted into Anthropic model training or the Development Partner Program, and product feedback sharing is disabled.

Zero Data Retention is not enabled. Under Anthropic's standard commercial API retention, inputs and outputs may be retained for up to 30 days. Longer retention may apply where required by law, for trust, safety, abuse prevention, or policy enforcement, when a different written retention arrangement applies, or when feedback is deliberately submitted; OpsWing does not deliberately submit Google Workspace data as product feedback.

OpsWing's primary application hosting and data storage are in the European Union. Third-party subprocessors, including Anthropic, may process data internationally where required to provide their services.

OpsWing does not sell Google Workspace user data or make it available to Anthropic for advertising or generalized model improvement.

6. How data is used

OpsWing may use information for the following purposes:

  • Providing the OpsWing features requested by you or your organization
  • Connecting and synchronizing services you choose to enable
  • Generating AI-assisted drafts, summaries, analyses, and recommendations
  • Supporting project, task, planning, customer, and financial administration
  • Responding to support requests and communicating about the service
  • Preventing fraud, misuse, and security incidents
  • Maintaining, troubleshooting, and improving the reliability of OpsWing

AI-assisted features operate within the permissions of the user and the connected organization context. They are intended to assist users; the user or organization remains responsible for reviewing outputs and deciding how to use them.

7. Sharing of data

OpsWing does not sell personal information or Google user data. Information may be shared with service providers or subprocessors only where reasonably required to deliver, secure, maintain, or support OpsWing. These providers may support services such as hosting, authentication, email and API connectivity, and AI infrastructure.

Such access is limited to the relevant purpose and is subject to appropriate contractual, technical, and organizational safeguards. Information may also be disclosed when required by applicable law or when reasonably necessary to protect users, OpsWing, or the integrity of the service.

8. Tokens and credentials

OAuth access and refresh credentials for connected integrations are stored server-side. They are not intentionally exposed to the browser or to other OpsWing customers. Credentials are used only to provide and maintain the integration that the user has authorized.

Users can revoke access by disconnecting an integration in OpsWing and, for Google services, through their Google Account settings. Credentials must no longer be used to access Google data after the connection is disconnected or authorization is revoked.

9. Data security

OpsWing uses reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. These measures include:

  • Authenticated access to customer workspaces
  • Tenant isolation between organizations
  • Authorization controls and access based on user permissions
  • Secure server-side storage for integration credentials
  • HTTPS and encrypted transport for data in transit
  • Access to information limited according to a user's role and permissions

No online service can guarantee absolute security. OpsWing reviews and improves its safeguards as the service and relevant risks evolve.

10. Data retention

OpsWing keeps information only for as long as reasonably necessary to provide the service, comply with legal obligations, maintain legitimate business records, and resolve disputes or security issues. Retention periods may differ by data type, account status, contractual requirements, and applicable law.

When information is no longer needed for these purposes, it is deleted or otherwise handled in accordance with applicable requirements and operational safeguards.

11. Deletion and disconnecting Google

A user can disconnect Google Calendar from the integration settings in OpsWing. Google authorization can also be revoked from the user's Google Account settings. Disconnecting or revoking access stops future synchronization once the change takes effect.

Existing records in OpsWing may be retained when reasonably necessary for legal or operational purposes, such as maintaining business records, resolving disputes, or protecting service security. Google access credentials should no longer be used to access Google data after disconnection or revocation.

To request deletion of personal data, contact info@opswing.nl. We may need to verify the request and consider any applicable legal or contractual retention requirements.

12. User rights

Depending on where you are located and the circumstances of the processing, you may have privacy rights that include:

  • Access to personal data held about you
  • Correction of inaccurate or incomplete personal data
  • Deletion of personal data where applicable
  • Restriction of certain processing where applicable
  • Objection to certain processing where applicable
  • Data portability where applicable

To exercise a right or ask a privacy question, contact info@opswing.nl. Some requests may be subject to identity verification, legal exceptions, or the role of the organization that provides your OpsWing account.

13. Cookies and technical data

OpsWing may use cookies, browser storage, and similar technical mechanisms that are necessary to keep users signed in, remember essential settings, protect sessions, and operate the website and application. The service may also process technical logs needed for security, troubleshooting, performance, and reliability.

14. Changes to this Privacy Policy

OpsWing may update this Privacy Policy when the service, legal requirements, or data practices change. The current version, including its last-updated date, will remain available on this page.