Legal
Privacy Policy
This Privacy Policy explains how Opeus ("we", "us", "our") collects, uses, discloses, and protects your personal information when you use our AI receptionist service, our website, and related communications. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
- Account & business details — your name, email address, phone number, business name, industry, location/service area, trading hours, services, and the greeting and voice settings you configure.
- Payment information — billing is processed by our payment provider (Stripe). We do not store your full card number; we receive limited billing metadata (e.g. plan, status, last-four) to manage your subscription.
- Call information — when our AI answers calls to your Opeus number, we process call metadata (caller number, time, duration), call recordings, and transcripts, and generate summaries, so we can deliver and improve the service.
- Calendar information — if you connect your Google Calendar, your primary calendar's email address and timezone, your free/busy availability, and the booking events we create for you (see section 5).
- Usage information — how you use the product (e.g. minutes used, calls handled, onboarding progress) and technical data such as device/browser and log data.
- Communications & email engagement — messages you send us, and engagement data about the emails we send you (see section 3).
2. How we use your information
- To provide, operate, and support the AI receptionist service.
- To set up and manage your account, subscription, and billing.
- To send you service and lifecycle emails (e.g. welcome, setup, usage, and account notices) and, where permitted, product updates.
- To measure engagement and improve our product, communications, and support.
- To maintain security, prevent misuse, and meet our legal obligations.
3. Email open & click tracking
Our emails may include analytics that tell us whether a message was delivered,opened, and whether links were clicked. Open tracking uses a small (invisible) tracking pixel that loads when your email client displays images; click tracking works by routing links through a redirect so we can record the click before sending you to the destination. We use this to understand engagement and improve our communications.
You can limit open tracking by disabling automatic image loading in your email client, and you can opt out of non-essential (commercial) emails at any time using the unsubscribe link in those emails or your account notification settings. Some transactional messages (e.g. billing or account notices) are required to operate the service.
4. Who we share information with
We do not sell your personal information. We share it with service providers who help us run the service, under contracts that require them to protect it and use it only for the services they provide to us, including:
- Stripe — payments and subscription billing.
- Telnyx / Twilio — telephone numbers, call connectivity, and related communications.
- Resend — email delivery and engagement events.
- Amazon Web Services (AWS) — cloud hosting and storage, and AI processing (via Amazon Bedrock).
- Anthropic — AI models that power the receptionist and summaries.
- Google — business-listing data used to help set up your account; Google Calendar if you choose to connect it (see section 5); and Google Analytics where enabled.
- PostHog - website analytics, plus product analytics where separately enabled.
We may also disclose information where required by law, to protect our rights or safety, or in connection with a business transfer.
5. Google Calendar integration
If you choose to connect your Google Calendar, we ask for your permission through Google's consent screen and access your calendar only to operate your AI receptionist:
- Availability (read) — we read free/busy information so the receptionist can offer appointment times when you are available.
- Bookings (write) — we create calendar events when the receptionist books an appointment for a caller.
- Calendar details — we read your primary calendar's identifier (its email address) and timezone so bookings land in the right calendar at the right local time.
This uses Google's calendar.events and calendar.readonly API scopes. The OAuth tokens Google issues to us are encrypted at rest and used only server-side to provide the features above. We do not sell Google user data and do not use it for advertising, and we do not allow humans to read it except with your consent, for security or abuse investigations, to support you at your request, or where required by law. Opeus's use and transfer of information received from Google APIs to any other app will adhere to theGoogle API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google Calendar at any time from Settings → Integrations in the portal — we delete the stored tokens when you disconnect — or revoke Opeus's access in your Google Account permissions. Disconnecting stops availability checks and new bookings; events already created remain in your calendar.
6. Overseas disclosure
Some of our service providers are located, or store data, outside Australia (including in the United States). Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the APPs.
7. Data retention
We keep personal information for as long as needed to provide the service and to meet our legal and business obligations, after which we delete or de-identify it.
8. Security
We take reasonable technical and organisational measures to protect personal information from misuse, loss, and unauthorised access, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your information.
9. Your rights
You may request access to, or correction of, the personal information we hold about you, and you may opt out of commercial emails at any time. To make a request or raise a privacy concern, contact us at hello@opeus.ai. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
10. Cookies & website analytics
We use website analytics, including PostHog and Google Analytics where configured, to understand visits, page views, and device and browser information. Product analytics are enabled only per surface. We configure our analytics tags so page views do not send email addresses, phone numbers, form field contents, query strings, URL fragments, or internal object identifiers. These providers may use cookies or similar browser storage. We do not use analytics cookies for third-party advertising. Our contact form is handled by Formspree, which processes the details you submit so we can respond to your enquiry. We may use essential cookies required for the site to function.
11. Children
Our service is intended for businesses and is not directed at individuals under 18.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above.
13. Contact us
Opeus (ABN 58 695 586 835) — hello@opeus.ai.