1. Security designed around control
OppRise brings sensitive marketing, creative and project work together. Our security approach focuses on workspace separation, limited access, protected connections and clear human approval.
2. Workspace access
Workspace access is role-based. Owners and administrators manage members and permissions. Guest access is view-only and can be limited to selected workstreams or boards. Database access rules are used to keep workspace information separated.
3. Connected accounts
Google, Microsoft, Zoom, LinkedIn, Meta, TikTok and other supported connections use provider-authorised sign-in flows. Connection credentials are stored on the server and are not exposed to the browser. Users can disconnect providers from OppRise settings.
4. Approval first
OppRise can analyse, recommend and prepare. Approval-controlled workflows require a person to approve publishing, sending or spending. New ad campaigns created through supported campaign workflows start paused. Sensitive actions and approvals are recorded where the product supports audit history.
5. Calendar privacy
Availability checks for Google Calendar and Outlook use busy time blocks. OppRise does not use those checks to read event titles, descriptions or attendee lists.
6. Data protection
Connections to OppRise use HTTPS. Hosting providers encrypt stored data at rest. Access is restricted according to role and service need. We use logging, validation, rate controls and review processes appropriate to the service.
7. AI processing
AI features send the minimum context reasonably needed for the requested output. Workspace content and connected Google user data are not used by OppRise to train general-purpose AI models. Generated content always requires human review.
8. Incident reporting
Report a suspected security or privacy issue to [email protected] or +61 402 018 828. Include enough information to reproduce the issue, but do not send passwords, access tokens or unnecessary personal information.