Privacy Policy

Effective Date: April 6, 2026

1. Introduction

Opsgrip LLC ("OpsGrip," "we," "us," or "our") operates the OpsGrip platform, an IT operations management tool with artificial intelligence deeply integrated throughout its features. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.

By using OpsGrip, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, job title, department, and role
• Company information: company name, industry, size, website, address, and phone
• Operational data: task details, project information, site documentation, equipment records, knowledge base articles, on-call schedules, trip details, team member profiles, IT request form submissions, vendor and contract information, and budget entries
• Documents: files you upload including job descriptions, certificates, trip receipts, and inventory attachments
• Communications: messages you send to us via email or support channels
• Conversations with OGI: questions, commands, and discussions you have with OGI through the Command Bar, Ask OGI, conversational onboarding, and other OGI interfaces
• Budget and KPI data: budget entries, KPI threshold configurations, and financial data entered in Leadership Intelligence
• Decision context: decisions expressed during OGI conversations that are captured in the Decision Log

2.2 Automatically Collected Information

• Usage data: pages visited, features used, timestamps, and interaction patterns — collected via Mixpanel
• Session recordings: mouse movements, clicks, scrolls, and page interactions — collected via Hotjar (Contentsquare) for product improvement. Session recordings do not capture passwords or sensitive form fields.
• Device information: browser type, operating system, and screen resolution
• Log data: IP address, access times, and referring URLs
• Error data: application errors, stack traces, and browser context — collected via Sentry for reliability monitoring
• Cookies and similar technologies for session management and analytics

2.3 AI-Generated and AI-Extracted Information

OpsGrip's AI system (OGI) generates and extracts the following types of information, all stored within your organization's account:

• AI-generated content: Executive reports, insights, summaries, onboarding plans, staffing analyses, risk assessments, budget projections, vendor recommendations, strategic plans, KB article drafts, email drafts, and pattern detection alerts
• Extracted organizational knowledge: Factual information OGI extracts from your conversations, task completions, and data changes — such as vendor experiences, process details, team insights, and infrastructure patterns
• Conversation summaries: After each OGI conversation, the exchange is summarized and tagged with topics for future retrieval
• Team expertise profiles: OGI automatically generates expertise profiles for each team member based on their activity, updated weekly
• Detected patterns: OGI analyzes your operational data on daily, weekly, and monthly schedules to identify trends, anomalies, and opportunities
• Departure knowledge summaries: When a team member is removed, OGI generates a knowledge transfer document capturing their expertise
• Decision log entries: Decisions identified during OGI conversations are captured with context, participants, and timestamps

3. How We Use Your Information

• To provide, maintain, and improve the OpsGrip platform
• To generate AI-powered insights, reports, suggestions, and content specific to your operations
• To store and retrieve OGI conversation history for continuity across sessions
• To extract and maintain organizational knowledge that improves OGI's responses over time
• To build team expertise profiles for workload analysis, knowledge continuity, and new hire onboarding
• To detect patterns and trends in your operational data and surface proactive alerts
• To capture decisions for historical context and better future recommendations
• To generate departure knowledge summaries and new hire briefings
• To personalize your experience based on your role, responsibilities, and past interactions
• To send operational notifications, alerts, and digest emails you have opted into
• To provide customer support and respond to your requests
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

4. How We Store and Protect Your Data

Your data is stored securely using Supabase, a hosted PostgreSQL database platform with enterprise-grade security. All data is encrypted in transit using TLS and at rest using AES-256 encryption. We implement row-level security policies to ensure users can only access data belonging to their organization. File uploads are stored in secure cloud storage buckets with access controls.

4.1 Organization Data Isolation

Every piece of data in OpsGrip — including operational records, OGI's organizational knowledge, conversation history, detected patterns, team expertise profiles, and decision logs — is isolated by organization. This isolation is enforced at the database level through row-level security policies, not just application logic. Your organization's OGI instance has no access to any other organization's data.

5. Artificial Intelligence and Your Data

5.1 How AI Processes Your Data

OpsGrip sends relevant portions of your operational data to our AI provider (Anthropic) in real time to generate insights, responses, and content. This data is processed to generate your response and is not retained by the AI provider after processing. Additionally, OpsGrip processes AI responses to extract organizational knowledge, which is stored in OGI's knowledge graph within your OpsGrip account.

5.2 No Training on Your Data

Your data is never used to train, fine-tune, or improve any AI models. Our AI provider (Anthropic) has confirmed that data sent through their API is not used for model training. Your operational data remains yours.

5.3 What OGI Stores and Why

OGI stores the following within your organization's account:

• Full conversation messages — so you can review past exchanges and OGI can recall context. Retained until you delete them.
• Conversation summaries and topics — for efficient search and retrieval. Retained until you delete them.
• Organizational knowledge facts — so OGI can provide historically-aware, personalized responses. Retained until you edit, delete, or clear OGI's memory.
• Team expertise profiles — for workload analysis, knowledge continuity, and new hire briefings. Updated weekly while active; preserved after departure.
• Detected patterns — to surface proactive alerts and feed Leadership Intelligence insights. Retained until acknowledged and dismissed.
• Decision log entries — for historical context and better future recommendations. Retained until you delete them.
• Departure knowledge summaries — to preserve institutional knowledge when team members leave. Retained indefinitely until an admin deletes them.

5.4 AI-Generated Content Accuracy

AI-generated content is designed to assist your team, not replace professional judgment. AI outputs — including executive reports, staffing recommendations, budget projections, risk assessments, and strategic advice — may contain inaccuracies and should be reviewed by a qualified team member before being acted upon.

5.5 Controlling AI Features

You can control AI features at any time through Settings → OGI → AI Controls. OpsGrip provides granular controls: OGI Conversations, OGI Memory & Learning, OGI Content Generation, Leadership Intelligence AI, and OGI Proactive Alerts. A master toggle disables all AI capabilities at once. Core platform functionality continues to work normally without AI. Disabling AI features does not delete any previously stored knowledge, conversations, patterns, or profiles.

5.6 Visibility Within Your Organization

Admins can view all OGI conversations across all team members, all stored knowledge, all team expertise profiles, and the full decision log through the Memory Management interface in Settings. Individual team members can view their own OGI conversation history. OGI's responses may draw on knowledge extracted from any team member's interactions within the same organization.

6. Third-Party Services

We use the following third-party services to operate the OpsGrip platform. We carefully select providers that meet our security and privacy standards.

Core Infrastructure

• Supabase: Database hosting, authentication, real-time subscriptions, and file storage
• Vercel: Application hosting, serverless functions, and web analytics

AI Processing

• Anthropic: AI processing for OGI features including insights, content generation, knowledge extraction, and pattern analysis. Data sent to Anthropic is processed in real time and is not stored or used for model training.

Payment Processing

• Stripe: Subscription billing, payment processing, invoicing, and customer billing portal. Stripe processes your payment information in accordance with PCI DSS standards. OpsGrip does not store your credit card details.

Email Delivery

• Resend: Transactional email delivery for team invitations, password resets, task notifications, and on-call alerts.

Analytics & Monitoring

• Mixpanel: Product analytics to understand feature usage, onboarding completion rates, and user engagement patterns.
• Hotjar (Contentsquare): Session replay and heatmap analytics to identify usability issues. Hotjar automatically excludes sensitive form fields from recordings.
• Sentry: Error monitoring and crash reporting to identify and fix bugs.
• LogSnag: Real-time event tracking for operational monitoring of the platform.
• Vercel Analytics: Web traffic analytics including page views and Core Web Vitals performance metrics.

Maps & Location

• Mapbox: Map rendering and address geocoding for Sites and Trip Ops features.

Security

• Arcjet: API rate limiting and bot protection on public-facing endpoints.

We do not sell your data to any third party. We do not share your data with advertisers. Each third-party service receives only the minimum data necessary to perform its function.

7. Your Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Export: Request an export of your data in a portable format
• View OGI's knowledge: Browse all facts OGI has learned about your organization through the Memory Management interface in Settings
• Edit OGI's knowledge: Correct or update any knowledge facts OGI has stored
• Delete OGI's knowledge: Delete specific knowledge facts, conversation history, or clear OGI's entire memory
• Export OGI's knowledge: Download your organization's full knowledge base as JSON or CSV
• Control AI features: Enable or disable specific AI capabilities through granular controls in Settings
• Opt out of AI entirely: Disable all AI features through the master toggle in Settings

To exercise any of these rights, use the in-app tools in Settings or contact us at support@opsgrip.com.

8. Data Retention

• Account data: Retained while your account is active. Deleted upon account termination.
• Operational data: Retained while your account is active. Deleted upon account termination.
• OGI conversations: Retained until you delete them through the Memory Management interface or terminate your account.
• OGI organizational knowledge: Retained until you edit, delete, or clear it, or terminate your account.
• Detected patterns: Retained until dismissed or superseded by new analysis, or until account termination.
• Team expertise profiles: Retained while the team member is active and after departure. Deleted upon account termination.
• Decision log entries: Retained until you delete them or terminate your account.

Upon account termination, all data — including all OGI memory — is permanently deleted.

9. International Data Transfers

Your data may be processed in the United States where our servers, payment processor, AI providers, and analytics services are located. Our infrastructure providers (Supabase, Vercel, Stripe, Anthropic, Resend, Sentry, Mixpanel, Hotjar, Mapbox) maintain data processing facilities primarily in the United States. By using OpsGrip, you consent to the transfer of your data to the United States.

10. Children's Privacy

OpsGrip is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes — particularly to AI data handling, OGI's memory capabilities, or the scope of data collection — we will notify you by posting the updated policy, changing the effective date, and where appropriate, requiring re-acceptance within the application. Your continued use of OpsGrip after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Opsgrip LLC
Email: support@opsgrip.com