Privacy Policy

This Privacy Policy explains how OPSoft Inc. (“OPSoft,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use DecisionPing, our websites, administration application, APIs, MCP server, bots, and related services (collectively, the “Service”).

1. Who we are and our role

OPSoft Inc. operates DecisionPing from 30 N Gould St, Ste R, Sheridan, WY 82801, United States. For account, website, billing, support, and service-operations data, OPSoft generally acts as the controller or business that determines why and how information is processed.

When a customer submits decision requests, messages, metadata, or responses on behalf of its users or other individuals (“Customer Content”), OPSoft generally processes that content as a service provider or processor for the customer. The customer is responsible for its own notices, permissions, and lawful instructions. Requests concerning Customer Content may need to be directed to the relevant customer or workspace owner.

2. Scope

This Policy applies to the Service and communications with us. It does not govern third-party products, websites, AI agents, MCP clients, Telegram, WWChat, or other services that have their own privacy policies.

3. Information we collect

Information you provide

• Account and organization data, such as name, email address, password hash, workspace, project, and role information.
• Customer Content, including request titles, messages, choices, free-text fields, metadata, responses, agent prompts and outputs, command information, uploaded images and documents, and lifecycle timestamps.
• Channel data, including connected provider, chat identifier, display name, pairing status, and delivery or response records.
• Support and communications data, including messages and information you choose to provide when contacting us.
• Transaction, wallet top-up, and balance information for paid features such as cloud chats. Payment card details are collected and processed directly by our payment providers — Paddle.com Market Ltd (our Merchant of Record for web payments) and the Apple App Store or Google Play for in-app purchases — rather than by OPSoft. We receive confirmation of a completed purchase and the amount, not your full card number.

Information collected automatically

• Device and network data, such as IP address, browser or client type, operating system, request headers, and approximate location derived from IP address.
• Usage and diagnostic data, such as timestamps, endpoints used, response codes, crash data, delivery attempts, and security events.
• Essential cookies or similar storage used to authenticate sessions, maintain security, and remember necessary settings. We do not currently use third-party advertising cookies.

Information from other sources

We may receive information from workspace administrators, connected messaging providers, MCP clients, AI agents, infrastructure and security providers, and other integrations you direct us to use.

4. How and why we use information

• Provide, operate, maintain, and improve the Service.
• Authenticate users and API clients; create and manage workspaces, projects, credentials, and connected channels.
• Route requests to humans, record explicit responses, and return structured results to authorized clients.
• Monitor reliability, debug failures, prevent duplicate delivery, secure the Service, and investigate abuse.
• Provide support, send service notices, and communicate about material changes.
• Comply with law, enforce our agreements, and protect the rights, safety, and property of users, OPSoft, and others.
• Create aggregated or de-identified information that cannot reasonably identify an individual.

5. Legal bases for EEA, UK, and Swiss users

Where applicable, we process personal data based on:

• Contract: to provide the Service you or your organization requested.
• Legitimate interests: to secure, operate, support, and improve the Service, balanced against your rights.
• Legal obligations: to comply with applicable law and valid legal process.
• Consent: where we specifically ask for consent. You may withdraw it at any time without affecting earlier processing.

6. How we disclose information

We may disclose information to:

• Service providers that host infrastructure, store data, deliver communications, process payments, monitor security, or help us provide support, subject to appropriate contractual restrictions.
• Telegram, WWChat, and other channels a workspace owner enables. Those providers process message content and technical data under their own terms.
• OpenAI, Anthropic, or another AI provider selected and configured by you through a connected agent. Depending on the task, the connected agent may send prompts, conversation context, attachments, command output, and relevant project content to that provider. DecisionPing asks for explicit provider-specific permission before starting this transfer from an app chat.
• Workspace owners and authorized members, according to their roles and project access.
• Authorities or other parties when reasonably necessary to comply with law, legal process, protect safety or rights, investigate fraud, or enforce our agreements.
• A buyer, investor, lender, adviser, or successor in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to customary safeguards.
• Other parties at your direction or with your consent.

We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not use Customer Content to train public or third-party generative AI models.

AI providers process information under the account, configuration, terms, privacy notice, and retention controls selected by you. You can withdraw DecisionPing’s provider-specific permission in the app. Withdrawal prevents new app-chat transfers through DecisionPing but does not undo processing that already occurred.

7. International data transfers

OPSoft is based in the United States, and information may be processed in the United States and other countries where we or our providers operate. These countries may have different data-protection laws. Where required, we take measures designed to provide an appropriate level of protection, which may include recognized contractual transfer safeguards such as standard contractual clauses.

8. Data retention

We retain information for as long as reasonably necessary to provide the Service, fulfill the purposes described here, comply with legal obligations, resolve disputes, maintain security and audit records, and enforce agreements. Retention depends on the type of data, account status, workspace configuration, sensitivity, and legal requirements. Data may remain in encrypted backups until the applicable backup cycle completes. We may retain aggregated or de-identified information where permitted by law.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including HTTPS in transit, hashed passwords, hashed project API keys, revocable credentials, access controls, and non-public production databases. No method of storage or transmission is completely secure. Keep credentials confidential and revoke an API key immediately if you believe it has been exposed.

10. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability; to withdraw consent; and to appeal certain decisions. You may also have the right to complain to a data-protection authority. We do not discriminate against anyone for exercising applicable privacy rights.

Submit a request to support@opsoftinc.com. We may verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. Some information may be exempt from a request, and we may retain information where law permits or requires it.

You may also delete an account from Settings in the app or follow the account deletion instructions.

11. Additional notice for California residents

In the preceding 12 months, we may have collected the categories described above: identifiers; customer-record information; commercial information; internet or other electronic activity; approximate geolocation; professional information; and inferences derived from service activity. We collect and disclose these categories for the business purposes described in Sections 4 and 6. We do not sell or share these categories for cross-context behavioral advertising and have no actual knowledge that we sell or share the personal information of consumers under 16.

California residents may request to know, access, correct, or delete personal information and may limit certain uses of sensitive personal information where applicable. DecisionPing does not use sensitive personal information to infer characteristics about consumers.

12. Children

The Service is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

13. Automated decisions

DecisionPing transports agent requests and explicit human responses. OPSoft does not use account personal data to make solely automated decisions that produce legal or similarly significant effects. A customer may build workflows using the Service; that customer is responsible for its workflow and any notices or safeguards required by law.

14. Changes to this Policy

We may update this Policy as the Service and law evolve. We will post the revised version here and change the effective date. If changes are material, we will provide additional notice where required.

15. Contact us