Privacy Policy

What Operator does

Operator helps a business identify sales and revenue conversations that may need a follow-up. It prepares suggestions for the account owner to review. Operator does not automatically contact Gmail recipients.

Information we process

We process the account email, onboarding and communication preferences, subscription and notification state, and the minimum Gmail connection metadata needed to operate the service.

After you connect Gmail, Operator retrieves relevant Gmail thread metadata and message content to normalize conversations, classify follow-up opportunities, show live thread context, and send only emails you expressly approve.

Google user data

Operator requests only gmail.readonly and gmail.send. OAuth credentials remain on the server, and refresh tokens are encrypted at rest. Full Gmail bodies are not stored in Operator's database; they are fetched and normalized when needed. Operator stores limited opportunity fields, Gmail fingerprints, and owner-reviewed drafts.

Google user data is used only to provide Operator's user-facing follow-up features. It is not sold or used for advertising.

AI processing

Selected, bounded conversation content and deterministic timing/direction metadata are sent server-side to OpenAI to classify possible follow-ups and, only for positive opportunities, prepare a draft. OAuth credentials, Gmail access tokens, service credentials, and unrelated account data are not included.

Other service providers

Supabase provides authentication and database services. Google provides Gmail APIs. OpenAI provides classification and drafting. Stripe processes subscriptions and retains payment records under its own obligations. Resend sends minimal Operator account notifications to the authenticated account email. Hosting providers process application traffic and operational logs.

Retention and deletion

Operator keeps account and opportunity data while the account exists or as needed to operate the service. You can disconnect Gmail without deleting the account, or permanently delete the Operator account from Settings. Account deletion removes user-owned Operator records and encrypted Gmail credentials and attempts to revoke Google authorization. It does not delete messages in Gmail. Stripe retains financial and transaction records it is required or permitted to keep.

Security and contact

Operator uses server-side authorization, owner-scoped database access, encrypted refresh-token storage, and human approval before Gmail sends. No internet service can guarantee absolute security. Contact us through the Support page with privacy questions.