Privacy Policy

01

Information we collect

• Email addresses submitted via the free scorecard form or assessment booking form.
• Company names submitted via the assessment booking form.
• Payment information processed by Stripe. We do not store card details on our servers.
• Anonymized usage data collected via standard web analytics.
• Voice interview recordings and transcripts collected during paid Friction Report assessments, stored securely and used solely for report generation.

02

How we use your information

• To generate and deliver your free scorecard report or paid Friction Report.
• To process payment for the Friction Report assessment via Stripe.
• To send transactional emails related to your scorecard or assessment.
• To send occasional product updates if you have opted in.
• To improve our diagnostic engine and service quality.

03

Information sharing

• We do not sell, rent, or trade your personal information to third parties.
• We share information only with service providers required to deliver our service: Stripe for payment processing, Resend for transactional email, Retell for voice interview infrastructure, Anthropic for AI-assisted analysis, and Supabase for secure data storage.
• We may disclose information if required by law.

04

Data retention

• Scorecard submissions and assessment data are retained as long as your account is active or as needed to provide service.
• Voice interview recordings are retained for 12 months after report delivery, then permanently deleted.
• You may request deletion of your data at any time by emailing hello@operatorhq.ai.

05

Your rights

• You have the right to access, correct, or delete the personal information we hold about you.
• You have the right to opt out of marketing communications at any time.
• For requests, email hello@operatorhq.ai.

06

Cookies and tracking

• We use minimal first-party cookies for session management and analytics.
• We do not use third-party advertising trackers.

07

Security

• All data is transmitted over encrypted HTTPS connections.
• Sensitive data is stored in encrypted Supabase databases with row-level security.
• Payment data is handled exclusively by Stripe and never touches our servers.

08

Changes to this policy

• We may update this policy from time to time. Changes will be reflected in the Last updated date at the top of this page.

09

Contact

• For privacy questions or concerns, contact hello@operatorhq.ai.