Privacy Notice

This Privacy Notice explains how Croft Crafts, LLC ("Croft Crafts," "we," "us," or "our") collects, uses, discloses, retains, and protects information in connection with OpportunityOps Social Outreach, including its public website, authenticated business workspaces, campaign tools, connected-service integrations, billing features, support channels, and related services (collectively, the "Service"). It also explains choices available to account holders and other individuals whose personal information we process.

OpportunityOps is designed primarily for business users. A customer workspace may contain information about the customer's business, personnel, clients, prospects, audiences, or other people. For account administration, billing, security, support, and operation of the Service, we determine why and how certain information is processed. For Customer Content that a business customer submits and directs us to process, publish, or transmit, we generally process that information to provide the requested Service functions on the customer's instructions. If you are an individual whose information was placed in OpportunityOps by one of our business customers, that customer may be the appropriate first contact for a request concerning its Customer Content.

We receive information directly from you and other authorized workspace users; automatically from your use of the Service and its security or session mechanisms; from connected social networks and other services you authorize; from payment, authentication, hosting, storage, AI, email, and infrastructure providers that support the Service; and from public or customer-directed sources when a feature is expressly used to retrieve or analyze that information.

When you connect a social network or other external service, OpportunityOps may store connection metadata and protected authorization material needed to maintain the connection and perform actions you request. When you approve or instruct a publication, we transmit the approved content and required metadata to the selected provider. That provider then processes the information under its own terms and privacy practices. Disconnecting or deleting OpportunityOps does not necessarily delete content, analytics, messages, or account records already held by the third-party provider. Provider-held information must be managed through that provider's controls where OpportunityOps cannot control it.

Stripe processes checkout, payment methods, recurring subscription charges, invoices, receipts, and the customer billing portal. OpportunityOps receives and stores billing-state information needed to administer access, such as Stripe customer and subscription identifiers, billing email, plan or price identifier, payment status, invoice identifier, trial dates, billing-period dates, and cancellation state. OpportunityOps is not intended to receive or store complete payment-card numbers or card security codes.

The Service uses cookies and similar browser storage that are reasonably necessary for authentication, session continuity, security, preferences, registration continuity, and application functionality. For example, authenticated sessions use provider-backed session cookies, and limited same-browser registration state may be stored temporarily to help complete account setup. OpportunityOps does not currently use third-party advertising cookies to build cross-site behavioral advertising profiles. Browser or provider settings may allow you to control some storage, but disabling essential storage can prevent authentication or other Service functions from working.

OpportunityOps does not sell personal information for money and is not designed to use personal information for third-party cross-context behavioral advertising. We do not treat the customer-directed transmission of content to a connected platform, or the use of a processor to provide the Service, as a sale of personal information by OpportunityOps. If our practices materially change in a way that creates an opt-out or consent right under applicable law, we will update this notice and provide the required choice before applying that change where the law requires it.

We retain information for as long as reasonably necessary for the purposes described in this notice, including maintaining an active workspace, preserving customer work and publishing evidence, administering subscriptions, securing the Service, resolving failures or disputes, and meeting legal obligations. Retention varies by record type. When an account is deleted, the deletion workflow is designed to erase applicable workspace records and stored customer files and to remove unshared authentication accounts, while preserving only limited material that is reasonably necessary to complete or prove deletion, prevent fraud, protect security, resolve disputes, or satisfy law. Temporary deletion-verification records are subject to retention controls and scheduled purging. Third parties may retain information independently under their own policies.

We use administrative and technical measures intended to protect information against unauthorized access, use, alteration, or disclosure. These include authenticated workspace access, authorization checks, restricted service credentials, protected storage for provider credentials, private storage for applicable customer media, validation controls, operational logging, and deletion controls. Provider access tokens, API keys, and other secrets are excluded from ordinary customer exports. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us promptly.

The workspace owner may initiate permanent account deletion through supported account tools. The deletion workflow is designed to address applicable workspace records, stored customer files, billing-customer cleanup, stored provider credentials, and unshared authentication accounts. A deletion may temporarily remain pending if an external or internal cleanup step cannot safely complete and must be retried. OpportunityOps may preserve a minimal deletion-verification record until its retention period expires. Deletion from OpportunityOps does not erase copies already published to or independently retained by connected platforms or other third parties.

OpportunityOps is operated from the United States. If you access the Service from another country, information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. Those jurisdictions may have different data-protection laws from your location. Where applicable law requires a particular transfer mechanism or safeguard, we will use a legally recognized mechanism appropriate to the processing.

The Service is intended for business users who are at least 18 years old and is not directed to children. We do not knowingly create OpportunityOps accounts for children under 18. Customers should not intentionally submit children's personal information unless they are legally authorized to do so and the Service feature is appropriate for that processing. If you believe a child's information has been submitted improperly, contact us so we can review the request.

We may update this Privacy Notice as the Service, providers, law, or our data practices change. The effective date above identifies the current version. We will post updated terms here and provide additional notice or obtain consent when applicable law requires it for a material change. A revised notice does not retroactively authorize a materially different use of previously collected information when the law requires new consent.

Questions, security reports, or privacy requests may be sent to support@opportunityops.net. Please include enough information for us to understand the request, but do not send passwords, full payment-card numbers, API keys, or other account secrets by email.