1. Who we are

Oportunities (“Oportunities,” “we,” “us”) is operated by Anycast Technologies Private Limited, an Indian company (GSTIN 06AARCA1577E1ZL), registered at WeWork DLF Two Horizon Centre, 5th Floor, DLF Phase 5, Sector 43, Golf Course Road, Gurugram, Haryana 122002, India. We are the data controller for the personal data described in this policy.

2. What data we access

We access only what the agent needs to find opportunities and send the pitches you approve. You grant each connection explicitly, and you can disconnect any of them at any time.

Google — Gmail & Calendar

When you connect Google, we request exactly three scopes — and nothing broader:

We do not request the full-access https://mail.google.com/ scope. Because of this, the agent technically cannot permanently delete your email, and cannot do anything beyond read, label, and send.

Instagram (optional)

If you connect Instagram, we access — through the official Meta Graph API, with separate Meta consent — your own profile, your own media and captions, and your own audience insights. We use this only to understand your niche, audience, and existing brand mentions. We never access other people’s content, your follower list, or anyone’s private data, and we never scrape Instagram.

Account & usage data

Your name, email, profile details you enter, subscription status (via the app stores / RevenueCat), and behavioral product analytics (which screens you use, which pitches you approve). Analytics are behavioral only — they never contain the content of your emails.

3. Google user data & Limited Use

In plain language, that means:

• We use Google user data only to provide and improve the user-facing features you signed up for (finding signals and sending the pitches you approve).
• We do not use Gmail or Calendar data for advertising of any kind.
• We do not sell or transfer Google user data to third parties, except as needed to provide the service (the subprocessors in §7), to comply with law, or as part of a merger you are notified of.
• No human at Oportunities reads your email content — see §5. We do not allow humans to read Google user data unless we have your affirmative consent for a specific message, it is necessary for security/abuse investigation or to comply with law, or the data has been aggregated and anonymised.

4. How we use your data

• Find signals — the agent reads your inbox and calendar to detect upcoming plans, recurring habits, and wishes that brands would want to sponsor.
• Match brands — it matches those signals to brands with the budget and the right contact, and scores the fit.
• Write pitches in your voice — it drafts outreach that sounds like you, informed by your past sent mail.
• Send what you approve — nothing is ever sent until you approve it. The agent then sends from your Gmail and follows up at most once.
• Track results — it classifies brand replies so you can see when an opportunity is created.
• Run your account — authentication, subscriptions, support, and security.

We never use your data to train shared AI models, to build advertising profiles, or for any purpose unrelated to running Oportunities for you.

5. No human reads your mail

The only narrow exceptions are: where you give us explicit permission for a specific item (for example, you send us a message while getting support); where it is strictly necessary to investigate abuse or a security incident, or to comply with applicable law; or where the data has been aggregated/anonymised so it is no longer about you. We never browse inboxes for any other reason.

6. AI processing & zero retention

Oportunities uses AI models to read signals, classify replies, and write pitches. We send only what is needed for each step to our AI providers, under contracts that require zero data retention — the provider does not retain your content after returning the result. We do not store raw email or document content on our own systems either; we keep only the derived, structured intelligence the agent needs (for example: “travels to Goa in July,” “works with skincare brands”), never the underlying message text.

7. Subprocessors

We use the vetted service providers below to run Oportunities. Each is bound by a data-processing agreement, and any provider that could process Google user data does so under zero-retention terms.

We will update this list before introducing any new subprocessor that processes personal data.

8. Retention & deletion

• While you’re active — we keep your derived signal data and account data to run the service.
• If you cancel — we immediately stop all outreach and revoke your Google tokens. We retain your derived data for 90 days so you can resume where you left off if you come back, and then permanently delete it. During those 90 days the data is not used for any matching or outreach.
• If you delete your account — see how to delete your account & data. We purge your data within 90 days.
• Disconnecting Google revokes our access immediately. You can also remove our access anytime at myaccount.google.com/permissions.
• Pitches the agent has already sent live in your own Gmail Sent folder and are unaffected by deletion on our side.

9. Your rights & controls

Subject to applicable law (including India’s DPDP Act and the GDPR where it applies), you can access, correct, export, or delete your personal data, and withdraw consent at any time.

• Disconnect Gmail / Instagram — anytime from the app.
• Delete your account & data — in-app (Settings → Danger Zone → Delete account) or via the web at oportunities.ai/support#delete.
• Export your data — email [email protected]; we respond within 30 days.

To exercise any right, contact us at [email protected]. Our Grievance Officer (for India DPDP requests) is reachable at [email protected].

10. Security

Connections use OAuth — we never see or store your Google password. Access tokens are encrypted at rest in a dedicated, isolated token vault. Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and our use of Google user data has been or will be assessed under Google’s CASA security review for sensitive scopes.

11. Age requirement

Oportunities is for creators 18 and older. We do not knowingly collect data from anyone under 18; if we learn an account belongs to a minor, we delete it.

12. Changes

If we make a material change to this policy, we will update the date above and notify you in the app or by email before it takes effect.

13. Contact

Questions or requests: [email protected].
Grievance Officer (India DPDP): [email protected].
Anycast Technologies Private Limited, WeWork DLF Two Horizon Centre, 5th Floor, DLF Phase 5, Sector 43, Golf Course Road, Gurugram, Haryana 122002, India.