Privacy, explained clearly.

1. Scope

This Privacy Policy applies to the THINKBISON OpportunityOS website, private client portal, owner administration tools, and related onboarding and support communications (collectively, the “Service”).

2. Information we collect

Identity and secure access

We may collect an approved email address, name, organization, role, account status, and authentication events. Security records may include timestamps, device or browser information, session information, and hashed network identifiers used for abuse prevention and audit logging.

Organization and workspace information

We may collect the information a client or THINKBISON provides to configure and use a workspace, including industry, territory, service types, qualification preferences, accounts, contacts, opportunities, tasks, notes, activity history, and pipeline status.

Opportunity intelligence and public-source information

The Service may retain publicly available event information, source names, source URLs, publication or update dates, locations, supporting evidence, and clearly labeled system inferences. We do not intentionally invent unavailable contact details, projects, contracts, values, permits, or other source facts.

Transaction information

Stripe processes checkout and subscription payments. THINKBISON may receive transaction identifiers, customer contact details, subscription status, amount, and billing status, but does not receive or store your complete payment-card number.

3. How we use information

• Authenticate approved users and maintain secure sessions.
• Configure and operate organization-specific workspaces.
• Detect, review, organize, and deliver owner-approved opportunity intelligence.
• Provide pipeline, task, note, reporting, and activity-history features.
• Process payments, maintain subscriptions, and respond to support or billing issues.
• Protect the Service, prevent abuse, troubleshoot failures, and preserve audit records.
• Comply with legal obligations and enforce the Terms of Service.

4. Service providers and disclosures

We share only the information reasonably needed for service providers to perform work on our behalf. Current categories include payment processing through Stripe, transactional email delivery through Resend, and cloud hosting, database, security, and domain infrastructure providers.

We may also disclose information when required by law, to protect rights or system safety, or as part of a business transfer. We do not sell personal information or automatically send raw owner intelligence to clients.

5. Cookies and sessions

OpportunityOS uses necessary cookies or comparable storage to authenticate users, maintain secure sessions, and protect requests. The current Service does not rely on advertising cookies. If our practices materially change, we will update this policy and provide any choices required by law.

6. Organization isolation and security

Client records are scoped to their organization. Client users are not intended to access another customer’s records, owner-only Live Intelligence, or internal review information that has not been deliberately shared. We use access controls, secure one-time codes, expiring sessions, rate limits, audit events, and server-side secrets to reduce risk.

No online system can promise absolute security. Clients should protect approved email accounts, never forward verification codes, and promptly report suspected unauthorized access through their onboarding or support channel.

7. Retention and deletion

We retain information for as long as reasonably necessary to provide the Service, maintain security and audit history, resolve disputes, enforce agreements, and meet legal or accounting requirements. When information is no longer needed, we may delete or de-identify it.

Authorized users may request access, correction, export, or deletion through the same verified communication channel used for onboarding or support. Some records may be retained when required for security, billing, legal, or operational reasons.

8. Choices and communications

Clients may update workspace information in the Service where controls are available, request a correction through support, or cancel recurring service as described in the Cancellation & Refund Policy. Access-code emails are transactional security messages and are sent only when a code is requested for an approved account.

9. Business use and children

OpportunityOS is a business service and is not directed to children under 18. We do not knowingly collect personal information from children through the Service.

10. Changes and contact

We may update this policy as the Service evolves. Material changes will be reflected by a new effective date and, when appropriate, an in-product or direct notice.

For a privacy request, use the verified sales, onboarding, or support conversation associated with your organization and include your organization name and approved account email. Never include a verification code or payment-card number.