PRIVACY POLICY
OPOLIS, INC.
PRIVACY POLICY
Last Updated: June 4, 2026
Employment Commons LCA is a Colorado public benefit limited cooperative association. Opolis, Inc., a Delaware corporation, serves as the designated Trustee of Employment Commons LCA and administers all operations, services, technology, and affairs on its behalf. In its capacity as Trustee, Opolis, Inc. is the data controller and custodian of all personal information collected in connection with the platform and services described in this Privacy Policy. This document is presented by Opolis, Inc. in its capacity as Trustee.
INTRODUCTION This Privacy Policy applies to Opolis, Inc., a Delaware corporation, including its affiliates and assigns (“Opolis,” “we,” “us,” or “our”). Registered Address: Opolis, Inc. 1580 N. Logan St., Ste 660, #93720 Denver, CO 80203
Opolis provides administrative and operational services that support employment, payroll, insurance, and related shared services for organizations and their members and/or employees.
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access or use Opolis websites, products, services, and platforms (collectively, the “Services”).
By using the Services, you acknowledge that your personal information may be collected, processed, stored, and transferred within the United States as described in this Privacy Policy.
This Privacy Policy is incorporated by reference into our Terms of Service available at https://opolis.co/terms-of-service. Where data protection laws grant you specific rights (including under the GDPR, CPA, or CCPA/CPRA), this Privacy Policy controls to the extent of any conflict.
INFORMATION WE COLLECT
Personal Information You Provide We may collect personal information that you voluntarily provide, including:
First and last name
Email address
Phone number
Date of birth
Mailing address (street, city, state, ZIP code)
Depending on the Services you use, we may also collect:
Social Security number or tax identification number
Bank account information for payroll or payments
Employment history, compensation, and tax information
Benefits enrollment information, including health information
Immigration and work authorization documentation
Disability or accommodation information (where applicable)
Other information required to provide Services or comply with legal obligations
Sensitive Personal Information Where required by law, we collect and process sensitive personal information only with your affirmative, opt-in consent or another lawful basis, including for:
Payroll and tax administration
Benefits administration
Employment law compliance
You may withdraw consent at any time by contacting support@opolis.co, subject to legal or contractual limitations.
Information Collected Automatically When you use the Services, we may automatically collect:
IP address
Browser type and operating system
Device identifiers
Access times and referring URLs
Pages viewed and interactions
Cookies and similar tracking technologies
This information is used for security, analytics, service improvement, and functionality.
LEGAL BASES FOR PROCESSING (GDPR) Where the GDPR applies, we process personal data based on one or more of the following legal grounds:
Performance of a contract
Compliance with legal obligations
Legitimate business interests (balanced against individual rights)
Your consent
USE OF PERSONAL INFORMATION We use personal information to:
Provide and operate the Services
Process payroll, benefits, and payments
Verify identity and eligibility
Communicate with you about your account or Services
Comply with legal and regulatory requirements
Improve our products and Services
Prevent fraud and ensure security
Marketing communications are sent only where permitted by law, and you may opt out at any time.
COOKIES AND TRACKING TECHNOLOGIES We may use cookies and similar technologies to support functionality, analytics, and user experience. Where required by law, we obtain consent for non-essential cookies. You can manage cookie preferences through your browser or device settings.
SHARING OF INFORMATION We may share personal information:
With affiliates and service providers who perform services on our behalf
With payment processors (e.g., Dwolla, Stripe, Plaid, or other providers disclosed at onboarding)
As required by law, regulation, or legal process
In connection with a merger, acquisition, or asset sale
With your consent
We do not sell personal information for monetary consideration.
INTERNATIONAL DATA TRANSFERS Personal information is processed and stored in the United States. Where required, international transfers are safeguarded using Standard Contractual Clauses or other lawful transfer mechanisms recognized under applicable data protection laws.
DATA RETENTION We retain personal information only for as long as necessary to:
Provide the Services
Comply with legal, tax, and employment obligations
Resolve disputes and enforce agreements
Unless otherwise required by law, personal information is retained for up to seven (7) years following account closure.
BLOCKCHAIN AND ONCHAIN DATA Some services involve recording data on public blockchain networks, including wallet addresses and token transactions ("Onchain Data"). Onchain Data is not collected or controlled by Opolis, Inc. and is outside the scope of this Privacy Policy. Due to the immutable nature of blockchain technology, Onchain Data cannot be modified or deleted, and privacy rights requiring deletion do not apply to such data.
SECURITY We implement administrative, technical, and physical safeguards designed to protect personal information, including:
Role-based access controls and multi-factor authentication
Encrypted data transmission using SSL/TLS
Secure, non-public data storage with regular backups and defined retention limits
Network protections such as firewalls, monitoring, and threat prevention
Ongoing system updates, access reviews, and incident response procedures
We continuously evaluate and improve our security practices to protect personal data from unauthorized access, use, or disclosure. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
YOUR PRIVACY RIGHTS
Colorado Privacy Act (CPA) Colorado residents have the right to:
Access personal data
Correct inaccuracies
Delete personal data
Obtain a portable copy
Opt out of targeted advertising, profiling, or certain data processing
Appeal Rights: If we deny a request, you may appeal by emailing support@opolis.co with “Colorado Privacy Appeal” in the subject line. We will respond within 45 days.
California Privacy Rights (CCPA / CPRA) California residents have the right to:
Know what personal information we collect and use
Request deletion or correction
Opt out of the sale or sharing of personal information
Limit use of sensitive personal information
Be free from discrimination for exercising rights
Requests may be submitted to support@opolis.co.
GDPR Rights (EEA/UK Residents) Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing by contacting support@opolis.co.
CHILDREN’S PRIVACY The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18, except where required to administer benefits for dependents.
THIRD-PARTY LINKS The Services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.
CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice before taking effect.
CONTACT US If you have questions or wish to exercise your privacy rights, contact us at: Email: support@opolis.co Mail: Opolis, Inc. Attn: Data Privacy 1580 N. Logan St., Ste 660, #93720 Denver, CO 80203
© 2026 OPOLIS, INC.