Privacy Policy

Operator is a service operated by Operator AI LLC ("Operator", "we", "us"). This Privacy Policy describes the personal and business data we process when you create an account, hire an Operator agent, or use any operator.fyi service.

We collect three categories of data:

• Account data: the business name, owner name, email address, phone number, and billing address you give us at signup or in your account settings.
• Connected-account data:the data we receive from third-party tools you connect, such as Google Business Profile, Stripe, email, and similar integrations. You grant access through each provider's OAuth flow and you can revoke it at any time.
• Operational data: the records our agents generate while running on your behalf: drafted posts, sent replies, invoice activity, call transcripts, the Health score we compute for you, and the audit log of actions taken.

We use your data to:

• Run the agents you hired and complete the tasks they exist to do.
• Compute your Health score and surface market signals.
• Bill you for your subscription and any verified wins.
• Communicate operational information (digests, billing notices, security alerts).
• Detect abuse, fraud, and policy violations.

We do not sell your data. We do not use your data to train shared or third-party models. For how AI processes your data, see the AI Use Policy; for cookies and similar technologies, see the Cookie Policy.

Operator stores each customer's data in a per-business knowledge store (the "business brain"). Access is enforced by row-level security keyed to the business identifier on every record.

• Agents acting on behalf of one business cannot read another business's data.
• We do not run cross-business queries against customer brains for product features.
• Customer brains never appear in the Substrate Data API, the public market intelligence surface, or any data product we sell to third parties.

Aggregate market intelligence we publish is derived from public sources (directory data, public reviews, public web), not from your private business brain.

We rely on a short list of established providers to deliver the service. Each handles a specific function:

• Supabase: primary database, authentication, file storage.
• Vercel: web hosting and serverless functions.
• Stripe: subscription billing and metered usage. Card data is held by Stripe, not by Operator.
• Resend: transactional email.
• Twilio: SMS and voice messaging.
• Retell AI: voice agent runtime.
• Anthropic, OpenAI: language-model inference for agent work. Provider zero-retention terms are used where available.

The full list, with the data each provider handles and where, is on the Sub-processors page. You can also request it at operator@operator.fyi.

We retain account and operational data for as long as your account is active and for a limited period after cancellation to satisfy legal, accounting, and dispute-resolution obligations. You can request earlier deletion of operational data as described below; data we are required to retain (for example, billing records) is kept for the period the law requires.

You can access, correct, export, or delete your data at any time. Email operator@operator.fyi with the request and we will respond within the period required by applicable law (and within 30 days for routine requests). Depending on where you live, you may also have additional rights under the GDPR (EU/UK), the CCPA/CPRA (California), and similar regimes.

Operator is a business service and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so we can delete it.

Operator is operated from the United States. If you use the service from outside the United States, you understand that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

We will update this policy as the product evolves. Material changes will be communicated through the in-product notification surface or by email to your account address before they take effect.

Privacy questions, data-subject requests, and Data Processing Addendum requests: operator@operator.fyi. Operator AI LLC, Wyoming, USA.