Privacy Policy
Last updated: July 30, 2026
1. Introduction
Operion (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data when you use our Service.
2. Information We Collect
We collect the following types of information:
- Account information: Your name, email address, and authentication credentials when you create an account or sign in via Google or Microsoft.
- Organization data: Information you input into the Service, including entity details, tasks, projects, documents, contacts, calendar events, and communications.
- Usage data: Anonymous analytics about how you interact with the Service, such as pages visited and features used. This data does not include the content of your organization data.
- Payment information: We do not directly collect or store payment card details. All payments are processed securely by Stripe, our third-party payment processor. We receive only payment status and transaction metadata.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Generate AI-driven briefings, suggestions, and insights from your organization data
- Authenticate your identity and secure your account
- Process payments and manage subscriptions
- Send service-related communications (e.g., billing notifications, feature updates)
- Comply with legal obligations and enforce our Terms of Service
4. Data Sharing
We do not sell, rent, or share your personal data or organization data with third parties for their own marketing or commercial purposes. We may share data only in the following circumstances:
- Service providers: We use trusted third-party services for infrastructure (hosting), payments (Stripe), AI processing (OpenAI), and email delivery. These providers process data solely on our behalf and are contractually bound to protect it.
- Legal requirements: We may disclose information if required by law, court order, or governmental regulation.
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
5. AI Data Processing
Operion uses AI models (including OpenAI) to generate briefings, task suggestions, and insights from your organization data. Your data is sent to AI providers solely for the purpose of generating these outputs. We have data processing agreements in place with our AI providers. Your data is not used to train or improve the AI providers' general-purpose models.
6. Data Storage and Security
Your data is stored on secure servers with industry-standard encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Access to your organization data is restricted to authorized users within your organization based on role-based permissions.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, we will delete your organization data within 30 days. Certain information may be retained longer as required by law or for legitimate business purposes (e.g., payment records for tax purposes).
8. Your Rights
You have the right to:
- Access: View the personal data we hold about you. You can access your organization data at any time through the Service dashboard.
- Export: Download your organization data in a structured, machine-readable format (JSON). Use the export function available in your account settings.
- Correct: Update or correct inaccurate personal data through your profile settings.
- Delete: Request deletion of your account and associated data. Contact us at the email below to initiate deletion.
- Opt-out: Unsubscribe from marketing communications at any time using the unsubscribe link in our emails.
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. You can configure your browser to reject cookies, but this may prevent you from using certain features of the Service.
10. Third-Party Integrations
You may choose to connect third-party services (Google, Microsoft) to the Service. When you do, we access only the data and permissions you explicitly authorize. You may revoke these connections at any time through your account settings or through the third-party service's permissions page.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at hello@operion.ai.