Privacy Policy

1. Introduction

At OpsPilot365 (operated by Medha Cloud), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

• Name and email address from your Microsoft 365 account
• Organization name and details
• Billing information (for paid subscriptions)

Usage Information

• Service usage patterns and feature interactions
• Log data including IP addresses and browser information
• Actions performed within the platform

Microsoft 365 Data

• User and group information from connected tenants
• Device and compliance data
• Security and audit information

3. How We Use Your Information

• To provide and maintain our service
• To process transactions and send related information
• To send administrative information and updates
• To respond to inquiries and offer support
• To improve our service and develop new features
• To detect, prevent, and address technical issues

4. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and audit logging
• SOC 2 Type II and ISO 27001 compliance

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account termination, we will delete your data within 90 days, unless legally required to retain it longer.

6. Third-Party Services

We use select third-party services to operate our platform:

• Microsoft Azure (infrastructure and authentication)
• Stripe (payment processing)
• Analytics providers (anonymized usage data)

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability

8. GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements. We act as a data processor for your Microsoft 365 data and as a data controller for account and usage information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@opspilot365.com.