Privacy Policy

1. Who we are

OpsDeck ("we", "us", "our") is a software-as-a-service platform that transforms process descriptions into structured Standard Operating Procedures (SOPs). This policy explains how we collect, use, store, and protect your information when you use our website and services at opsdeck-delta.vercel.app.

2. Information we collect

Account information

When you sign up, we collect your full name, email address, and a password. This data is stored in our authentication provider (Supabase) and used to identify you and secure your account.

Process descriptions and SOP data

When you use OpsDeck to generate SOPs, we store the process descriptions you provide (the "raw input") and the structured SOP output. This content belongs to you. We do not sell, share, or use your SOP content for any purpose other than providing the service to you.

Payment information

Payments are processed by Stripe. We do not store your credit card number, CVC, or full card details on our servers. Stripe handles payment data in compliance with PCI-DSS standards. We receive and store your Stripe customer ID and subscription status to manage your plan.

Usage data

We track how many SOPs you generate per month and your total SOP count to enforce plan limits. We use Vercel Analytics to collect anonymous, cookie-free page view data and web performance metrics. This data cannot identify individual users.

3. How we use your information

• To provide, maintain, and improve the OpsDeck service
• To authenticate you and secure your account
• To process payments and manage your subscription
• To enforce usage limits based on your plan
• To send transactional emails (account confirmation, password reset)
• To monitor service performance and fix issues

We do not send marketing emails unless you explicitly opt in. We do not sell your personal information to third parties.

4. AI processing

When you generate an SOP, your process description is sent to Anthropic's Claude API for processing. Anthropic processes this data to generate the SOP output and does not use your inputs to train their models. Please refer to Anthropic's privacy policy for details on their data handling practices.

5. Third-party services

We use the following third-party services to operate OpsDeck:

• Supabase — authentication and database hosting
• Anthropic (Claude API) — AI-powered SOP generation
• Stripe — payment processing and subscription management
• Vercel — application hosting and anonymous analytics

Each provider processes data in accordance with their own privacy policies and applicable data protection regulations.

6. Data retention

Your account data and SOPs are retained for as long as your account is active. If you delete your account, we will delete your personal data and SOP content within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes).

7. Data security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and row-level security policies on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and data
• Export your SOP data (via PDF export)
• Withdraw consent for data processing (by closing your account)

To exercise any of these rights, contact us at the email listed on our Contact page.

9. Cookies

OpsDeck uses essential cookies only — authentication session cookies required for the service to function. We do not use advertising or tracking cookies. Vercel Analytics is cookie-free.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on the service. Your continued use of OpsDeck after changes constitutes acceptance of the updated policy.