Privacy policy

Who we are

Opitor is an AI-native operating system for small companies, where every person gets their own AI chief of staff. It has two parts: the website at opitor.com and the product at app.opitor.com and mail.opitor.com, including the Opitor apps for iOS and Android.

Opitor is operated by CapSolar Co., Ltd. (บริษัท แค็ปโซล่าร์ จำกัด), a company registered in Thailand under number 0105566207625, at 429/44 Sukhonthasawat Road, Lat Phrao, Lat Phrao, Bangkok 10230, Thailand. In this policy “we” means CapSolar Co., Ltd. We are the data controller for the personal data described here. You can reach us at hello@opitor.com.

What the website collects

The website uses Google Analytics 4 (measurement ID G-YN0FY45H02) to count visits. In the EU, EEA, UK, Switzerland and the other regions on our consent list, analytics storage is denied by default, so Google Analytics does not set analytics cookies there. Elsewhere it may set first-party cookies such as _ga and _ga_YN0FY45H02. Google Analytics does not store your IP address; it derives an approximate location from it and drops it. Analytics data is kept for 14 months.

If you join the waitlist, the email address you enter is sent to a Google Form. Only the Opitor team can see the responses, and we use them only to contact you about access to Opitor. We delete your address when you ask us to.

What the product collects

Your account. Your username, your name, an email address you give us for sign-in and recovery, and your password, stored only as a salted scrypt hash. If you sign in with Google, we also store your Google account identifier and the email address and name Google shares with us. We do not store your Google profile photo.

What you put into Opitor. Messages and group conversations, todos and their deadlines, calendar entries, files you upload, email you send and receive with an Opitor mailbox, company goals, and the memories your chief of staff keeps. This content belongs to you or to your organization. People in your organization see only what its sharing rules let them see; administrators manage accounts and settings but cannot read other people’s private conversations.

Your vault and your cloud computer. If you use your chief of staff to work on websites for you, Opitor gives you a cloud computer of your own (one per person, never shared) and a vault. The vault can hold website sign-ins (site, username, password), contact details (name, phone, email, address) and payment cards (card number, expiry date, cardholder name, billing address). We never store a card’s security code; you enter it each time you confirm a payment. The cloud computer keeps the sign-in state of the websites you use, so you do not have to sign in every time.

Usage and security records. Sign-in sessions, audit records of changes, and records of AI requests (which model, how many tokens, the cost and whether it succeeded). AI request records do not contain the text of your prompts or the model’s answers.

Data we receive from Google

Opitor uses Google data in two separate ways. Signing in with Google does not give us access to your Gmail.

Sign in with Google. When you choose “Continue with Google”, we request only the openid, email and profile permissions. We use them to identify you and to create or sign in to your Opitor account. We keep your Google account identifier, email address and name. We do not keep the access token Google returns.

Connecting your Gmail. In Settings → Personal connections you can choose to connect your personal Gmail account to your personal Opitor workspace. This asks Google for the read-only Gmail permission (https://www.googleapis.com/auth/gmail.readonly). We use it only to show you your own recent Gmail messages inside Opitor. Specifically:

Limited Use. Opitor’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How the AI uses your data

Your chief of staff uses large language models from third-party providers to read the content you give it access to and to draft answers, summaries and suggestions. These requests go through OpenRouter with zero-data-retention routing and provider data collection turned off, so the model providers that serve them do not keep your content or use it for training.

Two features work differently, and we list them so you can decide whether to use them:

Working on websites for you. When you ask your chief of staff to do something on a website, it operates a browser on your own cloud computer. Screenshots and the text of the pages it visits are sent to the AI model, through the same zero-data-retention routing. Passwords, verification codes, card numbers, security codes and your vault contact details are never sent to the model: they are encrypted in your browser and decrypted only inside your own cloud computer, at the moment they are filled into the page. Anything that would change something, send something or spend money, including every single payment, waits until you confirm it on a card in Opitor. Page content is treated as information, never as instructions.

Your AWS account. If you connect an AWS account, you create a role in it that only Opitor can use, with the permissions you choose. Opitor stores no AWS password or long-term key; for each task it requests temporary credentials that expire within an hour. Only you can use the connection, and you can remove it at any time by deleting the role.

What the chief of staff writes is a draft. It does not send email or messages on your behalf; you decide what to send.

Who else processes your data

We use these service providers to run Opitor:

The product does not use third-party product analytics.

We do not sell personal data and do not share it for advertising. We disclose data to authorities only when the law requires it.

Sending data across borders

Opitor’s servers are in Singapore and its mail storage is in the United States, so your data is transferred to those countries wherever you are. Where the law requires a safeguard for these transfers, including under Thailand’s Personal Data Protection Act and the GDPR, we rely on our providers’ data processing terms, including standard contractual clauses where they offer them.

Why we use your data

We use your data to provide Opitor to you and your organization under our terms of service, to keep it secure and prevent abuse, to meet our legal obligations, and, for website analytics, because we have a legitimate interest in knowing how the site is used. Connecting Gmail is always your choice, and you can withdraw it at any time by disconnecting.

How long we keep it

We keep your account and content while your account is open. When you disconnect Gmail, the stored Google tokens are deleted at once. Vault entries stay until you delete them. When your account is deleted, your cloud computer and its disk are deleted, your vault entries are deleted and your vault key is scheduled for destruction, after which the encrypted entries can never be decrypted again. When you ask us to delete your account, we delete it and its content within 30 days, except where the law requires us to keep something. If your organization still depends on your account, for example because you are its only administrator, we first ask the organization to take over. If it has not done so in time, we still delete your content within 30 days, but keep your sign-in, your role in that organization and the shared work it still needs from you, and delete the account once the handover is done. Messages you sent to other people stay in their conversations, shown as from a deleted user. Backups are kept only on our AWS infrastructure and for no more than 30 days, so deleted data is gone from them within 30 days after that.

Your rights

You can ask us for a copy of your data, to correct it, to delete it or your whole account, to move it to another service, or to stop or restrict a particular use of it. Write to hello@opitor.com from the email address on your account. We answer within 30 days. You can also complain to Thailand’s Personal Data Protection Committee, or, if you are in the EU, EEA or UK, to your local data protection authority.

Security

Connections to Opitor use HTTPS. Passwords are hashed, and stored mailbox and Google credentials are encrypted. Vault entries are encrypted in your browser with a key that belongs to you alone; Opitor’s servers store only the encrypted form and cannot decrypt it, and only your own cloud computer can. Organization administrators and Opitor staff cannot see vault contents in the product. People at Opitor with full control of our AWS account could in principle change who may use a key; any such change is logged and raises an alert. Each person’s and each organization’s content is separated on the server, and access is checked on every request.

Children

Opitor is built for people at work. You must be at least 18, or the age of majority where you live if that is higher, to use it.

Changes to this policy

When we change this policy we update the date shown on this page. If a change affects how we use data you have already given us, we tell account holders by email or in the product before it takes effect.

Contact

CapSolar Co., Ltd., 429/44 Sukhonthasawat Road, Lat Phrao, Lat Phrao, Bangkok 10230, Thailand. hello@opitor.com.

Updated 2026-11-12