Legal

Privacy Policy

Effective date: June 1, 2026 · Last updated: June 8, 2026

This Privacy Policy explains how Operiq ("Operiq," "we," "us") collects, uses, shares, and protects information when you use our mobile and web applications and related services (the "Service"). It is designed to meet Apple App Store and Google Play disclosure requirements. Capitalized terms not defined here have the meaning in our Terms of Service.

1. Who we are

Operiq provides software for trade and field-service operations. For privacy inquiries: privacy@operiqapp.app.

2. Information we collect

Account and profile

Email, phone number, authentication identifiers, display name, organization membership, and role.

Organization and operational data

Customer and job records, estimates, invoices, messages, photos, inventory, fleet notes, calendar events, and settings you configure.

Device and usage

App version, device type, crash logs, diagnostics, and in-app actions needed to secure and improve the Service.

Location (optional)

When you enable workforce or field tracking, we may collect coarse or precise location per your organization's settings and device permissions. You can revoke location permission in device settings.

Payments

Card payments may be processed by Stripe; subscription billing may be processed by Apple App Store or Google Play via RevenueCat. We receive payment status and metadata, not full card numbers.

AI features

Prompts and operational context you submit may be sent to third-party AI providers to generate responses. Do not submit sensitive personal data you are not authorized to share.

3. How we use information

• Provide, maintain, and secure the Service
• Authenticate users and enforce organization access controls
• Process payments and deliver customer payment links you create
• Send service-related notices (not marketing without consent where required)
• Comply with law and respond to lawful requests
• Improve reliability, prevent fraud, and debug issues

4. Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on contract performance, legitimate interests (security, improvement), consent (e.g., optional location), and legal obligation as applicable.

5. Sharing

We share information with:

• Service providers (e.g., Google Firebase/Firestore/Auth/Functions, cloud hosting, Stripe, RevenueCat, maps, AI APIs) under contractual safeguards
• Your organization administrators and authorized members per role permissions
• Parties you direct (e.g., guest payment or estimate links you share)
• Authorities when required by law or to protect rights and safety

We do not sell personal information for money. We do not share data for cross-context behavioral advertising as defined under California law.

6. Retention

We retain data while your account or organization uses the Service and as needed for backups, security, and legal compliance, then delete or anonymize per our retention practices unless law requires longer storage.

7. Security

We use industry-standard measures including encryption in transit, access controls, and Firebase security rules. No method is 100% secure; you are responsible for protecting credentials.

8. Your rights and choices

Depending on your location you may have rights to access, correct, delete, port, or restrict processing of personal information, and to object or withdraw consent.

• Access/update: use in-app profile and organization settings where available
• Delete account: contact privacy@operiqapp.app; we will verify identity and process per law
• Location: disable in device settings
• Marketing: opt out via unsubscribe or contact us

California residents may have additional rights under CPRA (know, delete, correct, opt out of sale/share — we do not sell). EEA/UK users may lodge complaints with a supervisory authority.

9. Children

The Service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect children's data. Contact us to request deletion if you believe we received such data.

10. International transfers

We may process data in the United States and other countries where our providers operate. We use appropriate safeguards where required for cross-border transfers.

11. App Store and Google Play disclosures

Apple App Store Privacy Nutrition Labels and Google Play Data Safety declarations should align with this Policy. The table below summarizes data categories:

We do not use your data for cross-app tracking or sell personal information. We do not display third-party advertising in the Service.

12. Subscriptions and in-app purchases

Paid plans may be billed through Apple App Store or Google Play via RevenueCat. Payment processors receive purchase identifiers needed to validate your subscription. We do not receive your full payment card number from app store billing. Manage or cancel subscriptions through your Apple ID or Google Play account settings. Refunds follow the applicable store's policies.

13. Account and data deletion

You may request deletion of your account and associated personal data by:

• Using in-app account settings where available, or
• Emailing privacy@operiqapp.app from your registered email address

We will verify your identity and process deletion within a reasonable period, subject to legal retention requirements and backups. Organization owners should contact us to delete business data tied to a workspace. Deleting the app from your device does not delete server-side account data.

14. Changes

We may update this Policy. Material changes will be notified in-app or by email where required. Version changes may require renewed acceptance in the app.