Privacy Policy

OpsBloom (“we”, “us”, “our”) operates the opsbloom.com platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing OpsBloom, you agree to the collection and use of information in accordance with this policy.

Account Information

When you register, we collect your name, email address, and authentication credentials. If you sign up via Google OAuth, we receive your Google profile information (name, email, profile picture) as authorized by you.

Gmail Access

Our InboxAI module requests permission to read and send emails on your behalf via the Gmail API. Specifically, we request the following scopes:

• Read emails — to classify incoming messages by intent (interested, objection, follow-up, spam) using AI.
• Send emails — to send AI-drafted replies that you explicitly approve before sending.

We do not store the full content of your emails permanently. Email metadata and classification results are retained to provide the service. You can revoke Gmail access at any time through your Google Account settings.

User-Generated Content

Content you create or input — including proposals, briefs, URLs for content repurposing, lead data, and chatbot configurations — is stored to provide and improve the Service.

Billing Information

Payments are processed through PayPal. We receive your PayPal subscription ID, payer email, and plan details. We do not store your credit card numbers or full PayPal account credentials.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, and device information.

• Provide, operate, and maintain the Service and its five modules.
• Classify emails and generate AI-drafted replies (InboxAI).
• Generate proposals, content, and lead enrichment data using AI.
• Process payments and manage your subscription.
• Send transactional emails (e.g., proposal accepted, password reset).
• Analyze usage patterns to improve the Service.
• Detect, prevent, and address technical issues or abuse.

OpsBloom uses Anthropic's Claude AI models to power content generation, email classification, proposal drafting, and chatbot responses. When you use these features:

• Your input data (briefs, email content, URLs) is sent to Anthropic's API for processing.
• Anthropic does not use your data to train their models under their commercial API terms.
• AI-generated output is stored in your account within our database for your continued use.
• We do not sell your data to Anthropic or any other AI provider.

Your data is stored in Supabase (PostgreSQL) with the following safeguards:

• All data is encrypted in transit (TLS) and at rest.
• Row-Level Security (RLS) policies ensure users can only access their own data.
• Service-role access is restricted to server-side operations that require elevated privileges (e.g., public proposal views).
• Authentication tokens are stored securely in HTTP-only cookies.

While we implement industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We use cookies for the following purposes:

• Authentication — Session cookies to keep you logged in.
• Preferences — Storing your theme and module settings.

We do not use third-party advertising or tracking cookies.

We share data with the following third-party providers as necessary:

• Supabase — Database hosting and authentication.
• Anthropic — AI processing (Claude API).
• Google — OAuth authentication and Gmail API access.
• PayPal — Payment processing and subscription management.
• Resend — Transactional email delivery.
• Vercel — Application hosting and serverless functions.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Proposal view analytics and anonymized usage data may be retained indefinitely in aggregate form.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Export your data in a portable format.
• Withdraw consent for Gmail access or other integrations at any time.
• Object to processing of your data for specific purposes.

To exercise any of these rights, contact us at ops@opsbloom.com.

OpsBloom is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: ops@opsbloom.com
• Website: opsbloom.com
• Location: Riyadh, Saudi Arabia