OpsVue Privacy Policy

We collect what we need to run your workspace: the account and business details you give us, the operational data you enter, and limited technical/security data. We do not sell your personal information, and we do notcollect payment card details today. With your permission — set in our cookie banner — we use analytics and advertising-measurement tools to understand how visitors find OpsVue. Your workspace data is isolated from other workspaces.

When you sign up and use OpsVue, you may provide:

• Your name and email address.
• A password — handled by our authentication provider (Supabase). OpsVue does not store your raw password.
• Your workspace / business name and optional business profile (address, phone, website) used on your documents.
• The operational data you enter: clients, quotes, invoices, gear/inventory, crew, jobs, and related records.
• Support requests and any information you include in them.

• Security/abuse-prevention markers derived from your IP address and browser user-agent. For rate limiting and abuse prevention we store salted hashes of these markers rather than the raw values.
• Server and application logs needed to operate and secure the Service. Logs are written through a redacting logger designed to keep secrets and message bodies out of them.
• Aggregate performance metrics (e.g., page-load / Core Web Vitals via our hosting provider’s Speed Insights).
• Essential cookies / session data used to keep you signed in (see Cookies below).

• To create and authenticate your account and operate your workspace.
• To manage your trial and, in the future, billing if you choose a paid plan.
• To secure the Service — rate limiting, abuse prevention, and diagnosing problems.
• To send transactional email (for example, a welcome email on signup, or workspace invitations).
• To send product updates and marketing email about OpsVue. You can unsubscribe from marketing email at any time; transactional and service messages (e.g., security and billing) are required while your account is active.
• To measure our marketing — understanding which ads and channels bring people to OpsVue — using the advertising-measurement tools described below, and only if you opt in.
• To provide support and respond to your requests.

We do not sell your personal information for money. Apart from the opt-in advertising-measurement partners described in section 5, we share data only with service providers (“subprocessors”) that help us run OpsVue, under contracts that limit their use of the data. Our current subprocessors:

• Supabase — authentication, the application database, and uploaded-file storage.
• Vercel — application hosting, edge delivery, and logs.
• Resend — transactional email delivery.
• Cloudflare — DNS, network / edge services, and encrypted off-site backups.
• Stripe — payment processing (subscription billing, and Stripe Connect when a workspace connects its own Stripe account). Card details are entered on Stripe-hosted pages; they never touch our servers.
• PostHog — product analytics (pseudonymous usage events, page views, and masked session replays — typed input is hidden, and financial dashboards, the client portal, and sign-in pages are never recorded; no names, emails, or document contents are transmitted as event data).
• Sentry — error monitoring (personal data is scrubbed before events are sent).
• Better Stack — uptime monitoring and alerting (observes availability; holds no customer data).

The current list is also published on our Subprocessors page. We may also disclose information if required by law or to protect the rights, safety, and security of OpsVue and its users.

We do not sell your personal information for money. With your opt-in consent (the Advertising category in our cookie banner), our marketing site (opsvue.io) uses advertising-measurement pixels — currently Meta (Facebook)— to understand which ads and channels bring people to OpsVue. This can involve sharing limited data (such as that you viewed a page or started a trial, and a hashed version of your email for match measurement) with those partners; under laws such as the California CPRA this may be treated as “sharing” for cross-context behavioral advertising. These tools load only if you opt in, and are off by default. We do not run third-party ad banners on OpsVue and do not target ads at you inside the product.

Your choices (including “Do Not Sell or Share”):you can opt out of advertising measurement at any time by choosing “Necessary only” (or turning off the Advertising category) in our cookie banner via Cookie settings, or by emailing us at contact@opsvue.io. California residents may use this same control to exercise the right to opt out of the “sale” or “sharing” of personal information.

OpsVue uses essential cookies to keep you signed in and to operate the Service securely (for example, your authentication / session cookie, and a first-party cookie that stores your cookie choices). These are necessary for the app to function. Our optional product analytics runs only if you allow it in the cookie banner; it uses browser local storage (not cookies) and pseudonymous identifiers. You can change your choice at any time via Cookie settingson this page. Advertising and measurement pixels (currently Meta) load and may set cookies only if you opt into the Advertising category in the banner; they are off by default. Google Analytics, when enabled on our marketing site, runs under the separate Analytics category of the same banner and may set its own cookies — it too is off by default.

• Account and workspace data is retained while your account / workspace is active. If your trial ends, your data is preserved (not deleted) so you can continue.
• Security and log data is retained as operationally necessary and then rotated / expired.
• You can request deletion of your account and workspace data — see your rights below.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. These rights, and how they apply, depend on the laws applicable to you (for example, the California CCPA/CPRA, CalOPPA, or the EU/UK GDPR). To exercise them, contact us at contact@opsvue.io or through our Contactpage; we may need to verify your identity before acting on a request, and we will not discriminate against you for exercising your rights. OpsVue does not offer automated self-serve export today — contact us and we will help with an access or export request. If you are a business customer (a workspace owner), requests about your end clients’ or crew data should come from you as the controller of that data.

• Encryption in transit (HTTPS / TLS) for all traffic, with HSTS.
• Tenant isolation: workspace data is separated using database row-level security, so one workspace cannot read another’s data.
• Role-based access controls within each workspace.
• Application-level rate limiting and abuse prevention.
• Reputable infrastructure providers (see Subprocessors).

No method of transmission or storage is perfectly secure, but we work to protect your information.

OpsVue is a business tool and is not intended for children under 13, and we do not knowingly collect personal information from them.

OpsVue is operated from, and processes data in, the United States. If you access OpsVue from outside the US, you understand and consent that your information will be processed in the US.

Sending documents from your own Gmail address is optional. If you choose to connect your Google account, OpsVue requests only the send-only permission (gmail.send) and uses it solely to send the specific messages you compose and send from within OpsVue. We do not read, list, modify, or store your mailbox, contacts, or any other Google data. Your Google authorization token is stored encrypted and used only to send on your behalf; disconnecting your Google account in OpsVue revokes it.

OpsVue’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train machine-learning models.

Privacy questions or requests? Reach us at contact@opsvue.io or through our Contact page. The operating legal entity is OPSVUE LLC, a Nevada limited liability company.

This Privacy Policy is effective June 18, 2026 and was last updated July 17, 2026. Update history: the Google-integration (Gmail sending) disclosure was added July 6, 2026; the advertising-measurement and marketing-email disclosures — Section 5 (“Advertising measurement and your choices”) and the related changes to the Summary, Section 3 (how we use information), Section 4 (sharing), and Section 6 (cookies) — were added July 17, 2026. We may update this policy; if we make material changes we will take reasonable steps to notify workspace owners before they take effect.