Privacy Policy for OpSync
Applies to the OpSync web application at opsyncservices.com and the OpSync mobile apps.
Last updated: September 3, 2026
Introduction
Welcome to OpSync! Your privacy is important to us. This Privacy Policy explains how OpSync handles your information.
By using OpSync, you agree to this Privacy Policy. If you don't agree, please don't use the app.
Data Storage and Privacy
Data Storage: OpSync stores your data in Supabase, a secure cloud database service. We implement industry-standard security measures to protect your information.
Data Security: All data transmitted between the app and our servers is encrypted using secure protocols.
AI Services and Data Sharing
OpSync uses third-party AI services to power chat, roleplay voice simulations, teachback exercises, memorization training, and Shadow Mode practice sessions:
OpenAI: Used to generate chat responses, power roleplay voice conversations, analyze conversations, and grade user performance in Teachback and Memorization exercises. This may include user messages, voice audio, transcripts, and training responses. OpenAI Privacy Policy.
Google Gemini: Used to power roleplay voice conversations as an alternate AI engine to OpenAI. Voice audio and conversation context are processed to generate spoken responses in real time. Google Privacy Policy.
AssemblyAI: Used to transcribe microphone audio into text during Shadow Mode practice sessions, so performance can be reviewed and graded. AssemblyAI Privacy Policy.
These services are used only to provide app functionality. User data is processed to generate responses and feedback, and is not used for advertising or cross-app tracking.
Third-Party Services
OpSync uses the following third-party services to provide and improve our app:
Supabase: Used for data storage and application services. Your training data, progress, and voice recordings are stored securely. Supabase Privacy Policy.
Mixpanel: Used for product analytics to help us improve app performance and understand user engagement. Mixpanel does not collect contact info, health data, financial info, precise location, or sensitive personal data. Data collected includes general usage metrics like session duration, device type, and app version. Mixpanel Privacy Notice.
Documenso: Used to collect e-signatures on recruiting documents (such as onboarding agreements) that an organization sends to a prospect or employee. Documenso processes the recipient's name, email address, and signature, and may also process other information entered on a specific document — which can include sensitive fields such as date of birth, Social Security number, or address, depending on the document an organization has configured. Documenso Privacy Policy.
We configure these services to minimize data collection and avoid any use for advertising, cross-app tracking, or data enrichment.
Google User Data
OpSync offers an optional Google Calendar integration used by our recruiting features. It is off by default and becomes active only if you choose to connect your Google account.
When you connect, OpSync requests the following access:
Calendar free/busy (calendar.freebusy): Reads only the busy and free time windows on your calendar, so OpSync can show your availability when you schedule a meeting with a recruit. This does not reveal event titles, descriptions, attendees, or locations.
Calendar events (calendar.events): Creates the calendar event when you schedule a meeting from OpSync, so it appears on your calendar and on your invitee's.
Basic profile (openid, email): Identifies which Google account you connected. We show it in the app and use it to confirm it matches your OpSync account.
What we store: only a Google refresh token and the email address of the connected Google account, held against your employee record in our Supabase database. Free/busy windows and calendar events are read from Google live when a screen needs them, shown to you, and never written to our database.
What we never do: we do not sell Google user data, do not transfer it to third parties except as needed to provide the features above, do not use it for advertising, and do not use it to train artificial intelligence or machine learning models.
Limited Use: OpSync's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access: you can disconnect Google Calendar from within OpSync at any time, which revokes the token with Google and deletes it from our database. You can also revoke access directly at myaccount.google.com/permissions.
Permissions
OpSync may request the following permissions to enable core functionality:
Microphone: To record your voice during roleplay training exercises.
These permissions are solely for enabling app functionality and are never used to collect or share your data without your knowledge.
Privacy by Design
OpSync is built with privacy in mind:
We only collect data necessary to provide core functionality.
Analytics data is never shared with advertisers.
Voice recordings are only stored on your iPhone and not in Supabase.
SMS and Text Message Communications
OpSync sends SMS text messages only to users who have opted in to receive them. These messages are account and workflow notifications: alerts about new recruiting prospects, reminders about pending items, and similar updates about activity on your own account or organization. We do not send marketing or promotional text messages.
Opt-in only: We send text messages to a mobile number only after the owner of that number has entered it and given express consent. A phone number added by an administrator on your behalf will not receive text messages until you opt in yourself.
Opt out: Reply STOP to any message to stop receiving texts. You can also turn text notifications off at any time in the app.
Help: Reply HELP to any message, or email [email protected], for assistance.
Frequency and cost: Message frequency varies. Message and data rates may apply.
No mobile information — including your phone number, SMS opt-in data, and consent — will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell this information. Text messaging originator opt-in data and consent are excluded from every category of information we otherwise share, and are not shared with any third party.
Your Rights
You have control over your data:
Request access to your data.
Request deletion of your account and data at any time.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. All changes will be posted within the app with an updated effective date. Continued use of OpSync constitutes acceptance of the updated policy.
Contact Us
Questions or concerns? Reach out at:
Conclusion
Your privacy is our commitment. OpSync was built to help you, not to track you.
Thanks for trusting us.
David Scott Hunt