Last updated · 12 July 2026
Privacy Policy
This policy explains what data Opract collects, why, and what your rights are. We aim to collect as little as possible.
Who we are
Opract ("we", "our", "us") provides a subscription technical operations service to recruitment agencies. The website is opract.com. For any privacy question, contact us at the contact link.
What we collect
When you visit the website: basic technical information — your IP address, browser, operating system, referring URL, pages viewed, and interaction events — collected through our privacy-respecting analytics. We do not use tracking cookies for advertising.
When you book a discovery call: your name, email, agency name, and anything you tell us in the booking form or the call itself. This is used only to prepare for and follow up on the call.
When you become a client: business details required to deliver the service and to invoice you — plus any data your team gives us access to (e.g. your candidate database) to build the tools we agree to build. Client data is covered by our separate service agreement.
What we do NOT collect on the website: we do not sell your data, do not run advertising trackers, and do not use dark-pattern consent flows.
Why we collect it
- To operate and improve the website (which pages are read, where visitors come from).
- To answer inquiries and prepare for discovery calls.
- To deliver and support the service to paying clients.
- To meet our legal and accounting obligations.
Third-party services we use
We use a small, deliberate set of third parties. Each has its own privacy policy:
- Hosting — the website is served by a static hosting provider.
- Analytics — privacy-respecting web analytics (no personal identifiers, no cross-site tracking).
- Booking / calendar — used when you book a discovery call. Only the fields you fill in are shared.
We keep this set of providers deliberately small. If you'd like the specific processors we use for your engagement, ask us and we'll share them.
Where your data lives
Data is stored on servers hosted by our providers, and — for client engagements — configured to sit in the region we agree with the client (typically US-region hosting for US clients). We use industry-standard security controls.
How long we keep it
- Website analytics — aggregated, retained no longer than necessary to understand trends.
- Inquiry / discovery-call data — kept while there is a live conversation, then deleted on request.
- Client data — kept for the life of the engagement, plus the retention period required for legal / tax reasons. On request, we return or delete client data at the end of an engagement, in line with the service agreement.
Your rights
Depending on where you live (e.g. under GDPR in the EU/UK, or CCPA in California) you may have the right to:
- Ask what personal data we hold about you.
- Ask us to correct or delete your data.
- Object to certain processing, or ask us to restrict it.
- Request a copy of your data in a portable format.
To exercise any of these rights, use the contact link above. We will respond within 30 days.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will change and — for material changes — we will notify anyone with an active engagement directly.