Privacy Policy
1. Overview
This Privacy Policy describes how Operator AI LLC ("Operator", "we", "us") collects, uses, and shares your information when you use our services at operator.fyi.
2. Data we collect
We collect three types of data:
- Account data: Name, email, phone number, password hash, payment method via Stripe.
- Usage data: Pages viewed, searches performed, saved markets, claimed businesses, API requests.
- Public business data: Information about local businesses from public sources, used to build the directory.
3. How we use your data
We use your data to provide and improve the service, send you market reports, process payments, verify your identity, respond to support requests, and analyze aggregated usage patterns to improve Operator.
4. What we never do
Operator does not sell personal data to third parties. We do not share your account data with advertisers or data brokers. We do not use customer conversations (calls handled by Autopilot, chat history, emails) to train models. We do not rent your email address.
5. When we share data
We share data with service providers who help us operate: Stripe for payments, Twilio for SMS verification, Supabase for database hosting, Resend for email delivery, Vercel for hosting. Each provider is contractually required to use data only to provide their service to us. We also disclose data when required by valid legal process.
6. Cookies and tracking
We use essential cookies for authentication and session management. We use privacy-respecting analytics (no personally identifiable information sent to third parties) to understand site usage. We do not run advertising cookies or third-party tracking pixels.
7. Your rights
You have the right to access, correct, export, and delete your personal data. You can exercise these rights at any time from your account settings or by emailing privacy@operator.fyi. We respond to all requests within 30 days.
8. How long we keep data
We retain account and usage data while your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law (for example, tax records for paid subscribers).
9. Security
We encrypt data in transit (TLS 1.3) and at rest (AES-256). Access to production data is restricted to authorized personnel and logged. In the event of a security incident affecting your data, we notify affected users within 72 hours.
10. Children
Operator is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact privacy@operator.fyi and we will delete it.
11. International users
If you are in the European Economic Area, United Kingdom, or California, you have additional rights under GDPR and CCPA. These include the right to know what data we have, the right to data portability, the right to be forgotten, and the right to opt out of the sale of personal information (though we do not sell personal information regardless).
12. Changes to this policy
We may update this Privacy Policy. Material changes will be notified at least 30 days in advance via email to registered users.
13. Contact
Privacy questions: privacy@operator.fyi. Postal: Operator AI LLC, Wyoming. Data Protection Officer: dpo@operator.fyi (for EEA users).