Privacy Policy
Updated October 12, 2026
This policy covers information provided to OpportunityStep through our website, report intake, and customer support. It applies to saved intake information even while paid orders are not open.
What we collect
We collect the contact details and business information you submit, including intake answers, selected report tier, optional business metrics, and support messages. Previously submitted mobile numbers and SMS consent records may remain in existing records; the current intake does not request them. Order records can include payment status and references, report files, delivery events, and support history. Technical records used to operate and protect the service can include request information, timestamps, and error or security logs.
Please avoid providing customer lists, patient information, account passwords, full payment card numbers, or unrelated sensitive information. Only share business information you are authorized to provide.
How we use information
We use information to save your intake, process and support orders, research your business, prepare reports, deliver communications, troubleshoot problems, prevent abuse, and maintain necessary business records. Optional business metrics help tailor recommendations. We do not use your private business information in public samples or case studies without permission.
Service providers and sharing
When used for your order, our providers process information needed for their roles: OpenAI supports AI-assisted research and report generation; Stripe processes payments; Resend delivers email; and Sites and Cloudflare support website hosting and storage. Information may be processed in the United States or other locations where these providers operate.
Customer contact fields are excluded from the research brief, but business details and information you enter in free-text answers may be included. Do not put private personal information into those answers. Payment card details are collected by the payment provider, not stored in OpportunityStep’s order database. Our email provider processes recipient details, message contents, and delivery information as needed to deliver communications. Historical messaging records may remain with Twilio, but new order communications use email.
We do not sell customer information or share it with unrelated parties for their marketing. We may disclose information when required by law or as necessary to protect the service and address fraud or security incidents. Provider processing is also subject to their applicable terms and privacy practices.
Email communication and prior text preferences
Order updates, reports, and support are handled by email. Text updates and new SMS enrollment are paused. Prior text preferences do not activate messages in the current service. If texts are offered later, we will provide updated terms and request a separate opt-in.
We do not sell or share previously collected mobile numbers or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. Existing preferences and message records remain subject to the storage and request practices below.
Storage and security
We retain information as needed to provide reports, resolve support requests, operate and secure the service, and maintain necessary business records. We do not currently promise automatic deletion after a fixed number of days. Provider records and backups may have separate retention periods. Access controls restrict customer records and reports to authorized access, but no online service can guarantee absolute security.
Your choices and requests
Optional intake fields can be left blank. To request access, correction, or deletion, email support@opportunitystep.com or use our contact form. We may need to verify your identity before acting. We will explain any records that must be retained for legal, accounting, security, or unresolved-order reasons. We will handle requests in accordance with applicable law. A prior text opt-out does not cancel an order or essential email communications.
Cookies and tracking
An essential cookie lets your browser view its most recent order without a customer login and expires after 30 days. Other essential authentication or security mechanisms may be used by the hosting service. The website does not currently include advertising tracking cookies. It does not change its behavior in response to browser Do Not Track signals.
Who the service is for
OpportunityStep is a business research service for adults, not a service directed to children. If you believe a child has submitted personal information, contact us so we can review and address it.
Updates and contact
We will post changes here and update the date above. Where required, we will provide additional notice or obtain consent before materially changing how we use information already collected. For privacy questions, contact support@opportunitystep.com.