Privacy Policy

This Privacy Policy applies to the public website at opendebt.ai and to the text messages described in the SMS section below. It does not describe other processing performed within an OpenDebt customer deployment, which is governed by the applicable customer agreement and deployment documentation.

OpenDebt is operated by Whispa Operations Pty Ltd. We do not sell website visitor information or use advertising trackers on this website.

Before you choose, PostHog does not capture website events. If you decline analytics, PostHog records limited cookieless measurements such as page views and selected interactions. It creates a temporary, daily-changing identifier on its servers using the request’s IP address, user agent and hostname. PostHog strips the source IP before storing the event and does not store a visitor identifier in your browser.

If you accept analytics, PostHog can store a first-party identifier so we can understand return visits and can record a privacy-masked replay of how the public pages were used. You can change your choice at any time.

Depending on your choice, website analytics may include:

• pages viewed, referring page and campaign parameters;
• browser, device category and website performance information;
• interactions such as booking clicks, audio demonstration plays and career-application clicks; and
• privacy-masked session replay after analytics has been accepted.

We do not intentionally send names, email addresses, telephone numbers, debt information or account information to PostHog. Text entered into form fields is masked, and sensitive URL parameters are redacted before analytics events are sent.

We use website analytics to:

• understand which pages and outreach campaigns are useful;
• find broken interactions and confusing journeys;
• measure interest in demonstrations and careers; and
• improve the clarity and performance of the website.

We use PostHog for website analytics and session replay. Our PostHog project uses PostHog’s United States cloud region, so website analytics may be processed in the United States. You can read the PostHog privacy notice.

Booking links take you to Calendly, and career-application links open your email application. Those services handle information under their own privacy terms once you leave this website.

Your analytics choice is saved in browser storage so the website can remember it. If you accept analytics, PostHog also uses first-party browser storage to connect visits. If you decline, PostHog does not store an analytics identifier in your browser.

If you arrive through a link that carries campaign parameters, they are kept in your browser for that tab only, so a booking you make after moving to another page still tells us which link brought you here. They describe the link, not you, and they are removed when you close the tab.

We retain website analytics only while it remains useful for the purposes above, subject to the retention settings applied to our PostHog project. We restrict access to people who need it and use reasonable technical and organisational safeguards. No method of processing is completely secure.

Whispa Operations Pty Ltd, doing business as OpenDebt, sends account notifications by text on behalf of the creditor that holds your account, only after you agree to receive them on a recorded phone call. The messages confirm a payment arrangement you agreed on that call and carry a secure payment link. The Terms & Conditions describe the program, message frequency and how to opt out.

For this program we collect and use:

• the mobile number on your account, used only to send the messages you asked for;
• your consent, the date and time you gave it and the call recording and transcript in which you gave it, kept as the record of your opt-in;
• the content of each message sent and its delivery status, kept with your account record; and
• any STOP or HELP reply, used to honour your choice and to respond.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Messages are delivered through a telecommunications provider acting on our instructions, which is not permitted to use your information for its own purposes. We keep SMS records for as long as the related account record is retained, and we restrict access to people who need it.

You may ask about website information associated with you, request a correction or deletion, or raise a privacy concern by contacting us. Some requests may require us to verify your identity.