Legal

OPV is provided by Mahara Labs (16276334 Canada Inc.). These terms govern your use alongside your business's agreed service order. Prices, setup work and subscription commitments are those expressly agreed in that order; accepting this screen does not create an undisclosed charge. You confirm that you are authorized to use this account and connect the business systems you select. You are responsible for your instructions, lawful use, the accuracy of information you provide, and obtaining any permissions or notices required for information about customers, staff or other people. Your acceptance does not supply another person's consent where it is required. You authorize OPV to process your instructions and perform actions through the enabled capabilities, accounts and devices disclosed during setup. Those actions may include reading information, editing records, sending communications and running tasks in the background when enabled. Existing access controls continue to apply. Connecting a system does not authorize access to another client's systems or grant rights you do not possess. AI can misunderstand instructions, produce inaccurate information or take an incorrect action. Results are not guaranteed to be flawless. Give clear instructions and review outcomes appropriate to your business. OPV's Stop control requests cancellation; actions already completed, communications already sent and information already transmitted cannot necessarily be undone. We display unresolved cancellation where confirmation is unavailable. You must not use OPV unlawfully, infringe others' rights, evade another service's access restrictions or compromise security. Keep your credentials secure and promptly report suspected misuse through your OPV support contact. We may suspend access where needed to address misuse or a security incident, and will explain the reason when practicable. You retain rights to your business information. You permit us and the disclosed service providers to process it to deliver and support your configured service. No ownership transfer or permission for cross-client training is granted by these terms. You can disconnect services or withdraw automation authorization in Settings. Withdrawal stops new authorized processing; it does not erase completed actions or automatically delete stored records. Account closure, data requests and any agreed cancellation or refund arrangements can be requested through your OPV support contact. We remain responsible for our own obligations, including applicable privacy and security duties. These terms do not exclude rights or liabilities that cannot lawfully be excluded, and do not make every loss your responsibility. We may revise these terms; material changes are presented for acceptance before the changed behavior is enabled.

Mahara Labs (16276334 Canada Inc.) processes account and connection information, instructions, conversations, uploaded files, task results and operational logs to provide OPV. Enabled computer, phone and browser capabilities can process screen content, application records and task recordings. Voice features process audio as described by their device permission prompts. Only connect systems and provide information you are authorized to use. We use this information to authenticate access, carry out requested or configured tasks, maintain private memory and reusable procedures, troubleshoot failures and protect the service. The setup disclosure identifies configured connections and external AI recipients. When external AI is authorized, relevant prompts, context, files, screen observations or task results may be transmitted to those recipients for processing, including supporting inference such as summaries. Provider processing may occur outside Canada and is subject to that provider's service terms and applicable laws. Do not assume an external provider has zero retention or that OPV controls its entire infrastructure. Client learning stays scoped to the client's environment and existing user access rules. This authorization does not permit us to publish private procedures, share client data with other clients or use it for shared model training. Credentials are managed through OPV's credential stores and connected providers' authorization flows; the consent receipt does not contain passwords or tokens. Conversations, files, memories and task records remain in the client environment until removed under the relevant deletion controls or agreed retention arrangements. Disconnecting an account does not erase previously imported records. Backups and necessary security or contractual records can persist under the deployment's retention arrangements and applicable obligations. Contact your OPV support contact for the applicable backup schedule, access, correction, export, deletion or privacy questions; we do not promise immediate erasure from every backup or external provider. You can review or withdraw authorization and disconnect accounts in Settings. Declining external AI disables external AI processing; locally available features can remain usable. Required device and provider permissions can also be revoked in their own settings. We obtain renewed acceptance before materially changing the disclosed processing. Optional marketing and cross-client training are not authorized by this setup.

These terms apply when Mahara Labs processes personal information in your business data to deliver OPV. Your business determines the purposes of its business use and is responsible for its lawful instructions and required notices or permissions. Mahara Labs processes that data to deliver the configured service on those instructions, subject to applicable law. We separately manage account administration, security and contractual records for our service obligations. Processing may include collection from connected systems, retrieval, analysis, task execution, communication, storage and private procedural learning. Data subjects may include your staff, customers and contacts. Data categories depend on the connections and information you supply and can include identifiers, correspondence, business records, files and screen or voice content. We limit access to those who need it to deliver and support the service, maintain tenant isolation and appropriate security measures, and require confidentiality for authorized access. The external AI recipients disclosed at setup and other service providers necessary to host, secure or deliver the configured service may process information on our behalf. New processing outside the accepted disclosure must not begin before the required renewed authorization. We will assist with reasonably scoped requests concerning access, correction, deletion and other applicable privacy obligations; report confirmed incidents affecting your data without undue delay with available information; and cooperate with reasonable requests for information about our processing and safeguards. Contact your OPV support contact for these requests. On termination or an authorized deletion request, we will arrange return or deletion of business data subject to agreed retention, backup operation and legal obligations. Retained data remains protected. These terms do not authorize cross-client training or sharing, promise immunity from liability, or replace obligations that applicable law places directly on either party.