Privacy Policy

OpzaCo ("OpzaCo," "we," "us") provides a maintenance-tracking platform for property managers and the workers they invite, accessible at https://opzaco.com. This policy describes what information we collect, how we use it, who we share it with, and the choices you have.

• Account information: name, email address, phone number, role (owner, supervisor, worker), preferred language, and the organization you belong to.
• Service log content: the text responses, ratings, dates, times, photos, and notes you submit when completing a maintenance form, plus the asset and property the log is attached to.
• Authentication metadata: sign-in timestamps, the device that signed in, and verification events. Authentication itself is operated by Clerk.
• Technical logs: IP address, user-agent, request paths, and server timestamps in the ordinary course of running a web application.
• Product analytics: aggregated, pseudonymous events about which pages and features you use, captured via PostHog. We do not collect keystrokes or form contents through analytics.

• To operate the platform: render pages, save service logs, render history.
• To authenticate you: verify sign-ins via email magic links, phone one-time passcodes, or passkeys.
• To send you transactional SMS: a one-time welcome message containing a sign-in link when your manager invites you, and a one-time passcode when you sign in. We do not send marketing or promotional SMS.
• To send you transactional email: account notifications such as overdue maintenance reminders and service-log digests, only when configured by your organization.
• To improve the product: aggregate analytics about which features are used. We do not sell, rent, or trade analytics data.
• To support optional AI features (the asset-template wizard) when you choose to use them.

We use the following third parties to operate OpzaCo. Each receives only the data needed to perform its function on our behalf, and is bound by its own privacy obligations.

• Clerk — authentication, sign-in, session management.
• Twilio — SMS delivery (welcome message and one-time passcodes).
• Resend — transactional email delivery.
• Neon — managed Postgres database where account, asset, and service-log data are stored.
• Vercel — hosting, edge network, and platform observability.
• Vercel Blob — storage for service-log photos.
• Anthropic — large-language-model inference for optional AI features. Inputs are sent only when the feature is invoked.
• PostHog — product analytics.

We do not sell your personal information. We do not share it with advertisers or data brokers.

By providing your mobile number to your manager for use with OpzaCo, you consent to receive transactional SMS related to your account: a one-time welcome message containing a sign-in link, and one-time passcodes when you sign in.

• Frequency: low — typically only when a manager invites you, and when you sign in.
• Marketing: we do not send marketing, promotional, or recurring informational SMS.
• Opt out: reply STOP to any OpzaCo SMS to stop receiving messages. You can also ask your manager to remove your account, which permanently stops all messages.
• Help: reply HELP for assistance.
• Carrier charges: message and data rates may apply.

Photos uploaded as part of a service log are stored on Vercel Blob and are visible to workers and managers within your organization. Photos are retained for one year by default; your manager may extend retention on a per-log basis for ongoing issues.

• Service logs and asset records: retained while your account is active so historical maintenance history remains useful.
• Photos: one year by default.
• Account information: retained until your manager removes you from the organization, at which point your account and personal information are deleted.

• You can ask your manager to remove your account at any time. We will delete your personal information, retaining only the de-identified shape of past service logs needed for the organization's history.
• You can request a copy of your personal information by contacting us at the address below.
• You can opt out of SMS at any time by replying STOP.

OpzaCo is not intended for use by anyone under 16. We do not knowingly collect personal information from children.

We may update this policy. When we do, we will post the revised version here and update the “Last updated” date at the top.

Questions, requests, or concerns? Email hello@opzaco.com.