Legal & trust

Privacy Policy

How OppRise collects, uses and protects your data, including Google, Meta, TikTok, LinkedIn and Microsoft connections.

Last updated: 10 November 2026

Contact support

1. About this policy

This Privacy Policy explains how OppRise ("OppRise", "we", "us") collects, uses, stores and protects information when you visit opprise.io, use the app at https://app.opprise.io, or connect a third-party account. Questions can be sent to [email protected].

2. Information we collect

  • Account information: name, email address, sign-in details, profile image and preferences.
  • Business and workspace information: Brand details, goals, audiences, products, brand voice, projects, tasks, comments, files, briefs and generated drafts.
  • Connected-platform information: the data needed for the features you choose, from the accounts and assets you select.
  • Billing information: plan, billing status, invoices and credit usage. Card details are handled by the payment provider and are not stored by OppRise.
  • Technical information: IP address, browser, device, pages requested and diagnostic logs used to secure and run the service.

3. Connected data sources

You choose which sources to connect. OppRise can connect to:

  • Google: Analytics, Search Console, Ads, Tag Manager, YouTube, Business Profile and Calendar.
  • Meta: Facebook Pages, Instagram accounts, ad accounts and pixels.
  • TikTok: TikTok accounts and TikTok Ads.
  • LinkedIn: profile, posting, Company Pages and ad accounts.
  • Microsoft: Microsoft Advertising, Teams and Outlook.
  • Bing Webmaster Tools.

4. Google

If you connect Google, OppRise may request the following scopes for the features you use:

  • openid and email to identify the connected account;
  • analytics.readonly to show Google Analytics reporting;
  • webmasters.readonly to show Search Console performance;
  • adwords to read Google Ads accounts and performance and to create campaigns you approve, which are always created paused;
  • calendar.events and calendar.events.freebusy to create meetings you request and check busy times. OppRise does not read event titles or descriptions;
  • tagmanager.readonly to review Tag Manager setup. OppRise never edits or publishes tags;
  • youtube.readonly and youtube.upload to show channel data and upload videos you approve. Uploads always start as Private;
  • business.manage to manage the Business Profile locations you select.

OppRise's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoke access at any time: https://myaccount.google.com/connections

5. LinkedIn

If you connect LinkedIn, OppRise uses your basic profile and permission to post content you approve. Access to Company Pages and ad accounts is used once approved by LinkedIn. Campaigns are always created paused. OppRise follows the LinkedIn API Terms of Use.

Revoke access: https://www.linkedin.com/psettings/permitted-services

6. Meta and TikTok

OppRise only accesses the Pages, Instagram accounts, ad accounts and pixels you select. Ads created through OppRise are always created paused. We do not sell this data, use it for advertising, or use it to train AI models.

7. Microsoft, Bing and Zoom

If you connect Microsoft, OppRise requests these delegated Microsoft Graph permissions: User.Read, Calendars.Read, Calendars.ReadWrite, OnlineMeetings.ReadWrite, openid, email, profile and offline_access. Microsoft Advertising uses the msads.manage scope. Bing Webmaster Tools uses an API key that you provide.

8. How we use information

We use information to provide and secure OppRise, find and explain marketing opportunities, generate drafts you request, show reporting, manage projects and meetings, carry out actions you explicitly approve, handle billing and support, and meet legal obligations.

We do not sell your data, we do not use it for advertising, and we do not use it to train general AI models.

9. Security

Access tokens are encrypted, stored on the server only and never sent to the browser. Access inside OppRise is controlled by Brand membership and roles.

10. Retention and deletion

  • If a trial ends and no one in the Brand signs in for 14 days, OppRise automatically disconnects all integrations, deletes stored access tokens and emails the Brand owner.
  • When you request deletion, we delete your data within 30 days.
  • Backups expire within 35 days.

See the Data Deletion Instructions for step-by-step guidance.

11. Ad campaigns after disconnecting

Disconnecting an integration does not pause live campaigns. They remain active in the ad platform at your expense until their end date or until you pause them there.

12. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Email [email protected] and we will respond within a reasonable time.

13. Cookies

OppRise uses essential storage for sign-in, security and core features. The marketing website also uses optional analytics and advertising technologies subject to visitor choices. See our Cookie Policy.

14. Children

OppRise is for people aged 18 and over. We do not knowingly collect information from children.

15. Changes

We may update this policy. The date at the top of the page shows the latest version. We will notify account owners of material changes.

16. Contact

Privacy questions and requests: [email protected].

Marketing website measurement

On opprise.io, Google Analytics measures website visits. LinkedIn Insight Tag, Meta Pixel, TikTok Pixel and Microsoft Advertising UET may receive page addresses, referrers, IP addresses, browser/device information, timestamps, cookie identifiers and permitted conversion actions. These platforms use this information to measure advertising performance, attribute conversions, optimise campaigns and support advertising audiences. Google Tag Manager manages additional tags, which must follow these same visitor choices.

In regions requiring permission, optional technologies remain blocked until accepted. If location cannot be determined, permission is required. Elsewhere, regional defaults apply unless you refuse. Global Privacy Control overrides advertising acceptance. Use Cookie settings at the bottom of any website page to reject optional technologies or change your choices; withdrawal stops future tracking. Previously blocked actions are not replayed after acceptance. Choice records are stored in your browser with purpose choices, notice version, time and region. We do not send form email addresses, names, message text or submitted website addresses as conversion parameters, and this setup does not upload customer matching lists.

The regional banner and these controls apply to the marketing website; the separate application requires its own equivalent controls. These technologies may process data internationally under each platform's privacy terms.