Effective 2026-08-14
Privacy Policy
Opsillion Inc. ("Opsillion," "we," "us," or "our") operates the TrueOps platform, a SaaS analytics and operations management platform for multi-site, field-based, and distributed team operations. This Privacy Policy explains what information we collect, how we use it, how we share it, and what rights you have with respect to your information.
This policy applies to the TrueOps platform, including the TrueCost dashboard and TrueWatch analytics engine, and to our website at opsillion.com.
1. What Information We Collect
Account Information
When you create a TrueOps account, we collect your name, work email address, and company or organization name. This information is provided by you at signup and managed through our authentication provider, Clerk Inc.
Usage Data
We collect information about how you use the TrueOps platform, including which features you access, session duration, and browser type and version. This data is used to improve the platform and diagnose technical issues.
Operational Data
The TrueOps platform connects to third-party systems — primarily LiveIQ, operated by Restaurant 365 — using credentials that you provide to us. Through this connection, we retrieve and process your operational data, including labor records, scheduling data, sales summaries, and dispatch records. This data belongs to you. We access it only to deliver the services you have contracted for.
Employee Data
As part of delivering labor analytics and scheduling services, TrueOps processes personal data belonging to your employees — including names, work schedules, clock records, and labor metrics — as retrieved from your LiveIQ account. We process this data solely on your behalf, acting as a data processor under your instructions. Our obligations with respect to employee personal data are governed by our Data Processing Agreement (DPA), which is incorporated into our Master Service Agreement with you.
If you are an employee whose personal data is processed through TrueOps, please contact your employer to exercise your rights with respect to that data.
Payment Data
Billing for TrueOps subscriptions is handled through Stripe Inc. When you enter payment information, Stripe processes and stores your full card details. Opsillion retains only the last four digits of your card number, the card brand, and the billing address, as provided by Stripe after a successful transaction. Opsillion does not store full credit card numbers.
Mobile Phone Numbers and SMS Consent
If your organization uses Opsillion's text message notifications, we collect the mobile phone number of each person designated to receive them, together with a consent record containing the date and time consent was given, the identity of the administrator who recorded it, and the exact consent wording presented at that time. We also retain the content of messages we send, the content of replies we receive (including any photos or other media attached to a reply), and delivery status information returned by our messaging provider.
Mobile phone numbers are provided by an authorized administrator of your organization after the recipient has given prior express written consent. We never purchase, rent, append, or otherwise obtain mobile phone numbers from third-party lists.
2. How We Use Your Information
We use the information we collect to:
- Deliver the TrueOps platform services — including ingesting your operational data, running analytics, generating reports, and making them available through the TrueCost dashboard.
- Provide AI-powered analytics and recommendations — using third-party AI services to analyze patterns in your operational data and generate recommendations for reducing labor waste, controlling discounting, and improving dispatch and scheduling efficiency. Before your data is sent to any AI service, Opsillion removes or replaces personal identifiers (employee names are replaced with anonymous identifiers). The categories of data included in AI-powered analysis and the AI providers we use are described in Section 3.
- Provide customer support — responding to questions, diagnosing technical issues, and communicating about your account.
- Send account and billing communications — invoices, payment confirmations, subscription renewal reminders, and security notifications related to your account.
- Improve our services — using anonymized and aggregated data derived from platform usage (data that cannot be linked back to you or any of your employees) to understand platform performance and identify improvements. Opsillion does not use identified individual-level operational or employee data for product development purposes outside of the AI-powered analytics described in Section 3.
- Ensure security and prevent fraud — monitoring for unauthorized access, suspicious activity, and technical anomalies that could affect the integrity of the platform or your data.
3. Artificial Intelligence Processing
How We Use AI
Opsillion uses third-party artificial intelligence services as part of delivering the TrueOps platform. AI tools assist in analyzing operational patterns, identifying anomalies, and generating recommendations to reduce financial leakage across labor, discounting, inventory, and dispatch operations. AI-assisted processing is a core component of the platform's analytics capabilities.
What Data Is Included in AI Requests
When generating AI-powered analysis or recommendations, Opsillion may include samples of your operational data in requests sent to third-party AI services. This may include:
- Aggregated labor metrics (hours worked, scheduled vs. actual labor, overtime rates, labor cost percentages)
- Sales performance data (sales by period, void rates, discount rates, cancellation rates)
- Dispatch and task completion records (completion rates, exception patterns)
- Scheduling efficiency metrics
Before any data is submitted to an AI service, Opsillion applies the following minimization practices:
- Employee names are not included. Names are replaced with anonymous identifiers
(e.g.,
employee_7391) before any data is submitted to an AI service. - Individual wage rates are not included. Only aggregated labor cost percentages are used.
- Patron/consumer data is not included. TrueOps does not accept or process individual restaurant customer transaction records.
- LiveIQ-proprietary derived scores are not included. Opsillion uses the underlying raw operational metrics (labor hours, sales dollars, void counts) in AI analysis — not the scoring, grading, or percentile-ranking outputs generated by third-party platforms.
AI Providers
The AI service providers Opsillion currently uses for analytics processing are listed in Exhibit A of our Data Processing Agreement as sub-processors. The current primary provider is Anthropic PBC (Claude). Opsillion will provide 30 days' advance notice before adding any new AI provider that will process your operational data, in accordance with the DPA.
AI Provider Data Retention and Training Policies
Opsillion uses AI providers through their business API tiers. The providers Opsillion currently uses operate under policies that do not use business API customer data to train their models. However, Opsillion cannot audit or guarantee these policies in perpetuity, and third-party providers may update their policies over time. Opsillion will notify you of any material change to an AI provider's data handling policies as soon as Opsillion becomes aware of such a change.
Your Right to Opt Out of AI Processing
You may request that your operational data not be included in AI-powered analytics and recommendation features by contacting privacy@opsillion.com. Opting out does not affect your access to the TrueOps platform, but certain AI-generated recommendation and anomaly detection features will not be available for your account.
4. Data We Do Not Accept or Process
Opsillion's platform is designed to process operational and workforce data for multi-site, field-based, and distributed team operations. We do not accept, store, or process the following categories of data:
| Prohibited Category | Examples |
|---|---|
| Government-issued identification numbers | Social Security Numbers, passport numbers, driver's license numbers |
| Protected health information (PHI) | Medical records, health conditions, insurance information, workers' compensation diagnoses |
| Biometric identifiers | Fingerprints, facial recognition geometry, iris scans, voiceprints |
| Full financial account numbers | Full credit card numbers, bank account and routing numbers |
| Individual patron / consumer transaction records | Individual restaurant customer names, loyalty profiles, individual purchase histories |
| Data relating to individuals under age 13 | Any personal data of children under 13, per COPPA |
| Genetic data | Genetic test results or genome data |
| Immigration or work authorization status | Visa status, work authorization documentation |
If you believe that any of the above categories of data have been inadvertently introduced into your TrueOps account, contact us immediately at privacy@opsillion.com. We will delete the data promptly and notify you of the outcome.
Customers are responsible for ensuring that data they provide access to through third-party system credentials (including LiveIQ) does not include the above prohibited categories. See Section 5 of the Terms of Service for customer obligations regarding prohibited data.
5. How We Share Your Information
We do not sell your personal information. We do not share your personal information with third parties for advertising or marketing purposes.
We share information only in the following circumstances. The first item below addresses mobile information specifically, including what we do not share:
Mobile Information and Text Messaging
Mobile phone numbers and SMS consent information are collected solely to deliver operational notifications you have asked to receive. We do not sell, rent, or share mobile phone numbers or SMS consent information with third parties or affiliates for their own marketing or promotional purposes. No mobile information is shared with any third party for any purpose other than the delivery of the messages you have consented to receive, which requires transmitting your number to our messaging provider, Twilio Inc.
Message and data rates may apply. Message frequency varies. Reply HELP for help or STOP to cancel at any time.
Sub-Processors
We use a limited set of third-party service providers (sub-processors) that process data on our behalf as part of delivering the TrueOps platform. These providers include infrastructure and hosting providers, our authentication provider, our payment processor, our error monitoring service, our email delivery service, and the AI service providers described in Section 3 above. These providers are contractually bound to handle data only as directed by us. A complete list of sub-processors is provided in Exhibit A of our Data Processing Agreement.
Legal Requirements
We may disclose your information if required to do so by law, court order, or government request. Where permitted by law, we will notify you before making such a disclosure.
Business Transfers
If Opsillion is acquired by or merged with another company, your information may be transferred to the acquiring entity. Any acquirer is required to honor the privacy commitments in this policy. We will notify you by email before your information is transferred and becomes subject to a different privacy policy.
6. Data Retention
We retain your information for the following periods:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of active account, plus 1 year after account closure |
| Operational analytics data | 2 years from the date the data was processed |
| Raw data export files | 90 days from the date of ingestion |
| Audit event logs | 7 years (required for financial and compliance records) |
| Payment records | As required by applicable law (typically 7 years) |
| Usage data | 1 year |
When you close your account or your subscription is terminated, we will delete your operational and employee data within 30 days, as described in our Data Processing Agreement. You may request an export of your data during this 30-day window before deletion occurs.
7. Data Security
We protect your information using industry-standard security practices, including:
- Encryption of data at rest using AES-256-GCM with key management through AWS Key Management Service (KMS)
- Encryption of all data in transit using TLS 1.2 or higher
- Role-based access controls that restrict data access to authorized personnel and to the account that owns the data
- Audit logging of significant system events
No security measure is perfect. If you believe your account has been compromised, contact us immediately at support@opsillion.com.
8. Your Rights
You have the following rights with respect to your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request a machine-readable export of your personal data.
- Objection: Object to processing of your personal information in certain circumstances.
- Opt out of AI processing: Request that your operational data not be included in AI-powered analytics features, as described in Section 3.
To exercise these rights, contact us at privacy@opsillion.com. We will respond within 30 days. Note that some rights may be limited where we have a legitimate legal basis for processing or where fulfilling the request would conflict with our obligations to others.
Text Message Opt-Out
You may stop receiving text messages from Opsillion at any time by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT to any message we send. We will send one confirmation message and then send you no further messages. You may resubscribe by replying START. Reply HELP to any message, or email support@opsillion.com, for assistance. Opting out of text messages does not close your Opsillion account or affect your access to the platform.
9. Colorado Consumer Data Protection Act (CDPA)
If you are a resident of Colorado, you have the following rights under the Colorado Consumer Data Protection Act:
- Right to know: You may request to know what personal data we process about you and why.
- Right to access: You may request a copy of the personal data we hold about you.
- Right to correct: You may request correction of inaccurate personal data.
- Right to delete: You may request deletion of personal data we hold about you.
- Right to data portability: You may request your personal data in a portable format.
- Right to opt out of sale: You may opt out of the sale of your personal data. We do not sell personal data.
To submit a request under the Colorado CDPA, contact privacy@opsillion.com. We will respond within 45 days, with the possibility of a 45-day extension where reasonably necessary.
10. California Consumer Privacy Act (CCPA)
If you are a resident of California, you have the following rights under the California Consumer Privacy Act:
- Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to delete: You may request deletion of personal information we have collected from you.
- Right to correct: You may request correction of inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising.
To submit a CCPA request, contact privacy@opsillion.com. We will respond within 45 days.
We do not discriminate against you for exercising any of these rights.
11. Children's Privacy
The TrueOps platform is a business-to-business service not directed at individuals under the age of 13. We do not knowingly collect personal information from individuals under 13. If you believe we have inadvertently collected such information, contact us at privacy@opsillion.com and we will delete it promptly.
12. Changes to This Policy
If we make material changes to this Privacy Policy, we will notify account holders by email at least 30 days before the changes take effect, and we will update the effective date on this document. Your continued use of the TrueOps platform after the effective date constitutes acceptance of the updated policy.
For non-material changes (such as clarifications or corrections that do not affect how we use your data), we will update the document and the effective date without prior notice.
13. Contact Us
For privacy-related questions, rights requests, or concerns:
Email: privacy@opsillion.com
We will respond to privacy inquiries within 30 days.