Privacy Policy

Information you submit: when you complete an ops assessment we collect your name, work email, company, industry, the workflow you want help with, your budget range, and any notes you add.

How you found us: if you arrive from an advertisement, the advertising click identifier and campaign details in the link are submitted along with the form so we can tell which campaigns produce genuine enquiries. This is sent only when you submit the form. It is not stored in your browser and is not read if you never submit.

Information we access to operate the service: once you are a client and have authorised access, we handle the email, documents, calendar entries, and records inside the systems you connect. The scope is agreed in writing before setup.

Billing information: subscriptions are processed by Stripe. Stripe collects and stores your payment details directly. We receive the subscription status, plan, and billing contact, not your full card number.

To respond to your enquiry, assess fit, and prepare a proposal.

To configure, run, monitor, and improve the service you have purchased.

To bill you, meet tax and accounting obligations, and keep records required by law.

We do not sell personal information, and we do not use your business data to train publicly available AI models.

We process personal information with your consent, or where processing is necessary to perform our contract with you or to meet a legal obligation.

You may withdraw consent at any time, subject to legal and contractual limits. Withdrawing consent for processing that is essential to the service may mean we can no longer provide it.

We use a small number of processors to run the service. These currently include Vercel (hosting), Supabase (database), Stripe (payments), Resend (transactional email), and the AI model providers used to operate your workflows.

Some of these providers process data outside Canada, including in the United States. Where that is the case, the information may be subject to the laws of that jurisdiction. We use providers that offer contractual protections for international transfers.

A current list of subprocessors is available on request.

Ops assessment submissions are kept for up to 24 months so we can follow up, then deleted unless you become a client.

Client workspace data is kept for the life of the engagement. On termination you may request an export; we then delete or anonymise the data within 90 days, except where we must retain records for legal, tax, or accounting purposes.

Access to client systems is permissioned, logged, and limited to the people and processes that need it.

Actions taken on your behalf are recorded in an audit trail, and outbound communications require human approval unless you instruct otherwise in writing.

No system is perfectly secure. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the relevant authorities as required by law.

You may request access to the personal information we hold about you, ask us to correct it, ask for it to be deleted, or ask for a copy in a portable format.

You may also ask us to stop using it for a particular purpose. We respond to requests within 30 days.

To exercise any of these rights, email privacy@opsagent.ca. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

This site does not set advertising or tracking cookies, and runs no third-party analytics or advertising scripts. Our host records standard server request logs for security and reliability purposes.

Advertising campaign measurement is done from the campaign details you submit with the form, not from cookies or browser tracking. See "How you found us" above.

If we add analytics or advertising tags in future, we will update this policy and put appropriate consent controls in place before they go live.