Privacy Policy

1. Who We Are

OBiMS (Opal Business Management System) is a multi-tenant business management platform developed and operated by Opal Systems. References to "we", "us", or "our" throughout this policy refer to Opal Systems.

2. Information We Collect

• Account data — name, email address, and password (hashed) provided at sign-up.
• Business data — company name, address, VAT details, and other information you enter into the system.
• Transaction data — sales, purchases, inventory movements, and financial records you create.
• Usage data — page views, feature interactions, and error logs used to improve the platform.
• Device data — browser type, IP address, and operating system collected automatically.

3. How We Use Your Information

• To provide, maintain, and improve the OBiMS platform.
• To authenticate users and secure tenant databases.
• To send transactional emails (e.g. email verification, password resets).
• To detect and prevent fraud, abuse, or unauthorised access.
• To comply with applicable legal obligations.

4. Data Storage & Security

Each tenant's data is stored in an isolated database. We use industry-standard encryption in transit (TLS) and at rest. Passwords are never stored in plain text — they are hashed using bcrypt. Access to production systems is restricted to authorised personnel only.

5. Data Sharing

We do not sell your personal data. We may share information with trusted third-party service providers (e.g. email delivery, hosting infrastructure) strictly to operate the platform. These providers are contractually bound to handle your data securely and only for the specified purpose.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 30 days unless we are required to retain it by law (e.g. for tax or audit purposes).

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to restrict or object to its processing. To exercise any of these rights, contact us at privacy@obims.app.

8. Cookies

OBiMS uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of OBiMS after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at privacy@obims.app.