Privacy Policy

Overview

OperasAI ("we", "us", "our") provides an AI-powered business operating system that connects to the tools a business already uses and helps run, grow and automate it. This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

We collect the following categories of information:

• Account information: your name, email address, business name, and password (stored encrypted), provided when you sign up.
• Business data: sales, orders, invoices, customers, products, projects, tickets and any other records you create or upload inside OperasAI.
• Integration data: when you connect a third-party service (Gmail, Outlook, Google Drive, Google Analytics, Shopify, WooCommerce, Stripe, PayPal, Facebook, Instagram, WhatsApp, TikTok Shop), we receive and store an access token or API credential that lets us read data from that service on your behalf, within the scope you authorized.
• Usage data: how you interact with OperasAI, including pages visited and actions taken, used to improve the product and for the Audit Log feature.

How we use your information

We use the information we collect to:

• Provide, operate and maintain OperasAI's features, including the AI assistant.
• Power AI Chat's answers by reading your business data and connected integrations when you ask it to.
• Send you service-related communications, such as password resets or security alerts.
• Monitor and improve the reliability, security and performance of the product.
• Comply with legal obligations.

Third-party integrations

When you connect a third-party service, OperasAI only requests the access that service's permission model allows you to scope (for example, read-only access to your inbox or store orders). We never receive your actual password for Gmail, Outlook, Google Drive or Google Analytics, since those use a secure OAuth sign-in. You can disconnect any integration at any time from Settings, which revokes OperasAI's access to that service going forward.

Data security

Your data is encrypted in transit and at rest. Access tokens and API credentials for connected integrations are stored encrypted and are never exposed in the OperasAI interface after they're saved. Every create and delete action is recorded in your account's Audit Log.

Data retention

We retain your data for as long as your account is active. If you cancel your account, your data stays accessible for 30 days in case you change your mind, and is permanently deleted after that on request.

Your rights

Depending on where you're located, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights directly from Settings, or by contacting us.

Children's privacy

OperasAI is a business tool and is not directed at, or intended for use by, anyone under the age of 16.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know by email or through a notice inside the product before the changes take effect.

Contact us

If you have questions about this policy or how your data is handled, reach out through our Help Center.