Legal

Privacy Policy

Last updated: September 29, 2026

Opeerion (“we”, “us”) makes Opeerion ONE, event management software for production companies. This policy explains what information the ONE application and this website handle, why, and the choices you have. It covers the ONE application (each company’s own workspace, for example yourcompany.opeerion.com), Opeerion’s control service that supports those workspaces, and this website.

Who is responsible for your information

Each ONE workspace belongs to a company that uses ONE (our “customer”). The shows, clients, crew, contacts, documents and other records in a workspace are entered and controlled by that customer. We store and process them on the customer’s behalf and on their instructions. If you are a crew member, client or contact whose details are held in a workspace, the company that runs that workspace is the right first contact for questions about your records. We will help them answer.

Information we handle

• Account information: names, email addresses, roles and sign-in details for the people who use a workspace. Passwords are stored only as secure hashes.
• Workspace content: what customers enter or upload: shows and schedules, clients and contacts, crew profiles, availability, hours and pay rates, quotes, invoices, purchase orders, contracts and signatures, and documents and files.
• Technical information: server logs (IP address, browser type, pages requested and times) kept for security and troubleshooting, and a sign-in session cookie. We do not use advertising or cross-site tracking cookies.
• This website: one.opeerion.com does not use analytics or tracking. Display preferences you choose are kept in your own browser and are not sent to us. Inquiry links open your own email program; the site does not collect or store what you write.

How we use information

We use information only to provide, secure and support ONE: running each workspace, sending the notifications and documents a customer asks ONE to send, keeping backups, preventing abuse, and answering support requests. We do not sell personal information, and we do not use it for advertising.

Connected Google and Microsoft accounts

A workspace administrator can choose to connect a Google or Microsoft account. Each connection asks only for the access its feature needs, and can be disconnected at any time from the workspace’s settings or from your Google or Microsoft account.

• Send notifications from your mailbox (Gmail or Microsoft 365 / Outlook): permission to send email as the connected account (Google’s gmail.send scope, Microsoft’s Mail.Send). Google also provides the account’s email address. Microsoft’s User.Read permission provides basic profile information so ONE can identify and display the connected mailbox. The connection also lets ONE obtain fresh access tokens without asking you to sign in for every message. We use this connection only to identify the mailbox and send the notifications and documents the workspace sends, such as signing links, crew portal links and reminders. These mail connections do not grant permission to read, search, list, change or delete messages in the mailbox.
• Copy documents to Google Drive or Microsoft OneDrive: Google’s drive.file permission allows access to files ONE creates and files you explicitly open with or share with ONE. Microsoft’s Files.ReadWrite permission allows the app to read, create, update and delete the signed-in user’s files; for personal Microsoft accounts, it also covers files shared with that user. These permissions describe the access the providers grant. ONE uses the connection only to save copies of the workspace’s own documents to the connected drive.

The long-lived sign-in token for a connection is stored encrypted on Opeerion’s control service, never in the workspace itself. It is used only to get short-lived access when ONE needs to send a message or save a file. ONE does not store the contents of your mailbox or drive.

Google API Services: Opeerion ONE’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, we do not use it to develop, improve or train generalized artificial intelligence or machine-learning models, and no person at Opeerion reads it unless you ask us to for support, it is required for security or by law, or it has been aggregated and anonymized.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Service providers

We use a small number of providers to run ONE. They process information only to provide their service to us:

• Hosting: DreamHost (web servers and databases).
• File storage: Amazon Web Services (S3), Google Cloud Storage and Microsoft Azure Storage, depending on how a workspace is set up. A customer can also choose their own storage account.
• Email delivery: the customer’s own connected mailbox or mail server where set up, otherwise our hosting provider’s mail servers.
• Optional features: venue and address lookup uses Google Maps Platform. AI-assisted features, where a workspace turns them on, send the text needed for that request to an AI provider (Anthropic or OpenAI, through their standard commercial APIs) to produce the result. For venue research this can include a venue’s name, address, website and public place details from Google Maps Platform. Data received from Gmail or Google Drive is never sent to an AI provider and is never used to train AI or machine-learning models.

We may also disclose information if required by law, or to protect the rights, safety and security of our customers, their users or Opeerion.

Security

Connections use HTTPS. Passwords are hashed, and stored credentials such as mail passwords and connection tokens are encrypted. Access within a workspace is limited by the roles its administrator assigns. No system is perfectly secure, but we work to protect information and will notify affected customers of a breach as required by law.

Keeping and deleting information

We keep workspace content for as long as the customer’s workspace is active. When a workspace closes, we arrange any requested export and deletion with the customer as part of offboarding. We confirm the deletion schedule and any remaining backup retention with the customer. Closing a workspace does not by itself erase all stored files or backups.

Disconnecting a Google or Microsoft account removes its stored connection tokens from Opeerion’s control service. For Google, we also request revocation of the grant; completion depends on Google accepting that request. You can remove ONE’s access directly in your Google or Microsoft account settings. Customers can delete records in their workspace at any time. To ask for your information to be deleted, contact the company that runs your workspace, or us.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to how it is used. Contact us and we will respond, or pass your request to the workspace’s owner where the information is theirs.

Children

ONE is a business tool and is not directed at children under 16. We do not knowingly collect information from them.

Changes

We may update this policy. We will change the date above and, for significant changes, tell customers in the application or by email.

Contact

Questions or requests: support@opeerion.com.