Privacy Policy

Updated: 2026-10-27 · v1.0

Who is responsible

OPSoft Inc provides Helpteo and is responsible for account, service-security and support data. When a business uses Helpteo to talk to its customers, that business determines the purposes of its chat data; we process it to provide the service on its instructions. Contact details appear below. Choosing another interface language does not by itself transfer an existing contract to another operator. The Russian service terms identify a separate Russian operator.

Data and purposes

We process account name, email, password hash, workspace memberships, language preferences, website/channel settings, conversations, internal notes and conversation events. We process IP addresses, request metadata and session identifiers for delivery, authentication, abuse prevention and diagnostics. Typing signals contain no draft text and are not stored in conversation history. We do not request contacts, precise location, camera or microphone access for the current chat service.

Mobile notifications

With your device permission, Google Firebase Cloud Messaging and Apple Push Notification service deliver operator notifications. We store the device registration token linked to your signed-in session. Notification delivery includes conversation and workspace identifiers, visitor display name and project name; the customer message body is not included. You can disable notifications in device settings. Signing out removes this device registration. Mobile session credentials are kept in the device secure storage to preserve sign-in across restarts and app updates.

Visitor context

When a visitor opens the website chat, we store the current page and title, first landing page, referrer when supplied by the browser, UTM campaign parameters, first and recent request IP addresses, browser/device information, language and reported time zone. We retain the page associated with each customer message. URL credentials, fragments and unrecognized query parameters are removed before storage. Country and city are estimated locally using DB-IP City Lite; no visitor IP lookup request is sent to a geolocation API and no GPS permission is requested. Location may reflect a VPN, proxy or network gateway. Authorized workspace members can view this context. It is retained with the conversation and deleted with it.

Off-hours contact and reply links

When a workspace is outside its configured working hours, the chat asks the visitor for a name and email address before accepting a message. We store them with the conversation. After the first public operator reply to a new visitor message, Host67 sends one localized email containing a private, signed chat link that expires after 30 days. Internal notes are never emailed. The link credential is placed after the URL fragment marker so it is not included in ordinary HTTP access logs. The connected website remains responsible for its visitor notice and lawful basis.

Legal grounds and choices

We process information to perform our service agreement, protect the service and meet legal duties. Where consent is required, it must be obtained before the relevant processing and can be withdrawn. For EEA/UK users these grounds correspond, as applicable, to contract, legitimate interests, legal obligation and consent. The website owner is responsible for providing visitors with its own notices and a valid basis for collecting their messages.

Providers and international processing

Infrastructure providers host the service and backups; Host67 delivers account emails. OPSoft Inc provides the international service. Production infrastructure is currently in Europe and email/service operations may involve the United States. Data may therefore be processed outside your country. Where applicable law requires additional transfer safeguards, those safeguards must be arranged before the relevant transfer. We do not claim a particular certification or adequacy status. A data-processing agreement and current provider details can be requested from support. Paddle is not active yet; if used for a purchase, it will process checkout, payment, tax and transaction data under its own privacy notice.

Storage and retention

Account and workspace data remain while needed to provide the service, unless deleted earlier. Account deletion immediately removes the live account, credentials, sessions and messages attributable to it. Sole-owned workspaces are deleted after explicit confirmation. Other users’ workspaces and their customer messages remain under their control; historic content not attributable to an account may remain, with its displayed author name removed. Contact support for personal data in shared content. Access-restricted backups normally expire within 15 days; security logs within 30 days. Transactional email records are removed after 30 days or earlier on account deletion. Providers may retain delivery/security records under their own retention duties; we coordinate relevant erasure requests. Records legally required for disputes, security or tax are restricted to the necessary scope and period.

Cookies, security and your rights

The marketing website uses no advertising or analytics trackers. The operator app uses a secure HttpOnly session cookie and local language preferences. The chat widget uses local session storage to restore the visitor conversation. These are functional technologies. HTTPS protects transport; passwords are hashed; access is limited by workspace. This is not end-to-end encryption. Depending on applicable law, you may request access, correction, portability, restriction, objection or erasure and complain to your data-protection authority. We verify identity proportionately and respond within applicable legal deadlines. We do not sell personal data or share it for cross-context behavioral advertising.

Children and updates

Operator accounts are intended for adults acting for a business. Do not deliberately submit children’s sensitive data or unnecessary sensitive information. If you believe such data was collected improperly, contact us. We publish material policy changes here with an updated date; we will provide additional notice where required.

Delete account · Paddle Privacy ↗

Contact

OPSoft Inc
30 N Gould St, Ste R, Sheridan, WY 82801, United States
support@opsoftinc.com · +1 302 499 33 02