Who this applies to
Operon AI, Inc. operates operon.ai and the Operon platform. This policy covers visitors to our website and individuals whose information we process on behalf of our business customers.
When we handle conversations on behalf of a customer, that customer is the controller of the data and we act as their processor. Their own privacy policy governs how they use it, and our Data Processing Addendum governs how we handle it for them.
What we collect
We collect three categories of information.
- Information you give us directly: name, work email, phone, company, and anything you write in a form or send us by email.
- Information collected automatically on our website: IP address, browser and device type, pages viewed, and referring source. We use first-party analytics and do not sell this data.
- Information processed for our customers: call audio, transcripts, messages, contact details, appointment data, and outcomes, all handled under our customers' instructions.
How we use it
Website information is used to operate the site, respond to inquiries, and understand which content is useful. Customer data is processed solely to provide the service our customer has asked for.
We do not sell personal information. We do not share it with advertising networks. We do not use customer conversations to train models, ours or a provider's, on any plan.
Legal bases
Where GDPR applies, we rely on legitimate interests for operating our site and communicating with prospective customers, contract performance for delivering the service, and consent where required for marketing communications. You can withdraw consent at any time.
Retention
Website inquiry data is retained for 24 months from last contact unless you ask us to delete it sooner. Customer data follows the retention policy configured by the customer, which can be as short as zero retention.
Deletion is honored across primary storage, backups, and analytics within 30 days.
Sharing
We share personal information with subprocessors who help us deliver the service, all of whom are contractually bound to equivalent protections. Our current subprocessor list is published and we give 30 days notice before it changes.
We may disclose information where required by law, and where we do, we notify the affected customer unless legally prohibited.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. You also have the right not to be discriminated against for exercising these rights.
To exercise any of them, email privacy@operon.ai. We respond within 30 days and we do not require you to create an account to make a request. If your information is held on behalf of one of our customers, we will route your request to them and assist them in responding.
International transfers
Data is processed in the region selected by the customer, either the United States or the European Union. Where a transfer out of the EEA or UK is necessary, we rely on Standard Contractual Clauses and the UK International Data Transfer Addendum.
Children
Our service is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe we have, contact us and we will delete it.
Changes and contact
We will post material changes here and notify customers by email at least 30 days before they take effect.
Questions, requests, or complaints go to privacy@operon.ai, or by mail to Operon AI, Inc., 548 Market St, Suite 4210, San Francisco, CA 94104.