Privacy Policy

Effective June 7, 2026

OpsDirect (“OpsDirect,” “we,” “us”) is a financial and operations management tool that helps owners who run one or more businesses keep track of their bills, receipts, email, and finances in one place. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using OpsDirect you agree to this policy.

Information we collect

• Account information — your email address and the settings and preferences you create in the app.
• Financial data (via Plaid) — when you connect a bank or card account, we use Plaid to retrieve your transaction history on a read-only basis (dates, amounts, merchant names, and categories). We do not move money, initiate payments, or store your bank login credentials.
• Email data — if you connect Gmail or Outlook, we read message content and metadata to identify bills, receipts, and items that need your attention, and to file them. We act on your inbox only as you direct.
• Receipts and documents — images and files you upload or that we extract from your email for bookkeeping and expense records.
• Usage information — basic technical and diagnostic data needed to operate and secure the service.

How we use your information

• Categorize transactions and receipts, organize them by business, and keep your books.
• Produce accountant-ready, year-end expense reports and tax-preparation packets per business.
• Surface what needs your attention (bills due, important email, account alerts).
• Provide, maintain, secure, and improve the service.

We do not sell your personal or financial information, and we do not use it for advertising.

Plaid

We use Plaid Inc. (“Plaid”) to connect your financial accounts. By connecting an account you also agree to Plaid’s End User Privacy Policy. Plaid accesses your account on a read-only basis to provide transaction data to OpsDirect; you can disconnect a connected institution at any time, which revokes that access.

How we share information

We share data only with the service providers we use to operate OpsDirect, and only as needed to provide the service — for example: Plaid (financial data), Supabase (database, authentication, and storage), Vercel (hosting), Google and Microsoft (email connections you authorize), AI providers used to read receipts and classify email, and Stripe (billing). We may also disclose information if required by law. We do not sell your data.

How we store and protect your information

• Data is encrypted in transit (TLS 1.2 or better) and at rest (AES-256).
• Each user’s data is isolated at the database level so you can only access your own records.
• Access tokens for connected services are stored securely and never exposed in our application code.
• Administrative access to systems that hold customer data requires multi-factor authentication.

Data retention and deletion

We retain your data while your account is active. You can disconnect any connected bank or email account at any time, which revokes our access to it. You may request deletion of your data, and we delete your data upon account closure, except where we are required to retain certain records by law. See our Data Retention and Disposal Policy for details.

Your choices

• Disconnect any connected account at any time from within the app.
• Request access to, correction of, or deletion of your personal data.
• Close your account, which stops data collection and triggers deletion as described above.

Children

OpsDirect is intended for business owners and is not directed to anyone under 18.

Changes to this policy

We may update this policy as the service evolves. We will update the effective date above when we do, and significant changes will be made available within the app.

Contact

Questions about this policy or your data? Contact us at chanpoppell57@gmail.com.