Privacy Policy

Operio ("we", "us", or "our") operates the operio.work platform and related services. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. By using Operio, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, and password when you register.
• Business documents — files you upload to Operio's knowledge base (PDFs, Word documents, text files). These are stored securely and used only to power your AI workers.
• Usage data — pages visited, features used, and interactions with the platform.
• Communication data — messages exchanged between your AI workers and end-users on connected platforms (WhatsApp, email, etc.).
• Billing information — payment details processed securely through our payment provider. We do not store full card numbers.
• Technical data — IP address, browser type, device identifiers, and server logs.

2. How We Use Your Information

• To provide and operate the Operio platform, including deploying AI workers and processing your documents.
• To personalise your experience and improve the quality of AI responses.
• To send transactional emails (account confirmations, billing receipts, service alerts).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data or your business documents to third parties.

3. Data Storage and Security

Your documents and data are stored on managed servers within your chosen region. We use encryption in transit (TLS) and at rest. Each customer's data is logically isolated — cross-tenant access is not possible by design.

AI workers operate entirely within your managed node. Document embeddings are stored in your private pgvector database and are not shared with or accessible by other customers.

4. Third-Party Services

Operio uses the following third-party services to deliver the platform:

• Anthropic Claude API — used for document embeddings and AI inference. Inputs are processed per Anthropic's data handling policies.
• DigitalOcean — infrastructure provider for managed nodes.
• Tailscale — secure networking between Operio's central plane and your managed node.
• Stripe (or equivalent) — payment processing.
• WhatsApp Business API / Telegram / Discord — messaging platforms you connect to Operio. Data flows through these platforms according to their own privacy policies.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain data for 30 days to allow recovery, then permanently delete it. You may request immediate deletion at any time by contacting us.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Export your data in a portable format.

To exercise any of these rights, contact us at the address below.

7. Cookies

We use essential cookies to maintain your session and preferences. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

8. Children's Privacy

Operio is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice at least 14 days before they take effect.