Legal
Privacy Policy
Last updated: August 19, 2026
We believe privacy is a right, not a feature. Here is exactly what we collect, what we do with it, and what you can do about it.
1. What we collect
When you create an account: Your name and email address. Your password is encrypted before storage and we never see it in plain text.
When you use the platform: Business information you enter, including contacts, transactions, tasks, and notes. We store this to power your intelligence and give you your history.
When you connect integrations: If you connect Google Calendar, we read your calendar events to build your Daily OS. If you connect Google Gmail, we read your sent emails to identify business contacts. We never read personal emails unrelated to your business contacts.
Usage data: Which features you use and how often. This helps us improve the platform. We do not track you across other websites.
Technical data: Your IP address, browser type, and device type. Standard web infrastructure data.
2. What we never do
We never sell your data to anyone. Ever.
We never use your data to train intelligence models for other users.
We never share your data with advertisers.
We never read your emails for any purpose other than finding business contacts at your request.
We never store your payment card details. Stripe handles all payments.
3. How we use your data
To run the platform: your data powers your Proopsys Score, Signal, Daily OS, and Business Flow Dashboard.
To improve the platform: aggregated, anonymized usage patterns help us understand which features work and which do not.
To communicate with you: we send you platform updates, your weekly intelligence report if you subscribe, and security notices. You can opt out of non-essential emails at any time.
To protect you: we monitor for suspicious access and security threats.
4. Where your data lives
Your data is stored on Supabase, hosted on AWS infrastructure in the United States. Data is encrypted in transit using TLS and at rest using AES-256.
5. Your rights
You can:
- Request a complete export of all your data at any time from your account settings.
- Delete your account and all associated data. Deletion is permanent and happens within 30 days.
- Correct any information we hold about you.
- Opt out of non-essential emails.
- Disconnect any integration at any time.
If you are in the EU or UK, you have additional rights under GDPR including the right to object to processing and the right to data portability. Contact us at privacy@proopsys.com.
6. Cookies
We use essential cookies for authentication and security. We use analytics cookies to understand platform usage. You can decline non-essential cookies from the banner at the bottom of the page. We do not use advertising cookies.
7. Third-party services
- Supabase, database and authentication
- Stripe, payment processing
- Resend, email delivery
- OpenRouter, intelligence query routing
- Vercel, hosting
Each has their own privacy policy. We choose partners who meet our privacy standards.
8. Changes
If we make material changes to this policy we will email you at least 14 days before they take effect. Minor clarifications will be updated without notice.
9. Contact
For privacy questions: privacy@proopsys.com
We respond within 48 hours on business days.