Privacy Policy

Last Updated: 2025-11-26

1. Introduction

OperativeAI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect the information you provide when using our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, phone number
  • Payment Information: Credit card details (securely processed by our payment processor)
  • Business Data: Invoices, customer data, employee records you upload
  • Communications: Your conversations with our support team

2.2 Automatically Collected Information

  • Usage Data: How you use our Service
  • Device Information: Browser type, IP address, device identifiers
  • Cookies: Used to improve user experience and analytics

3. How We Use Your Information

We use your information to:

  • Provide and maintain our Service
  • Process transactions and send related notifications
  • Provide customer support
  • Send service updates and promotional messages (with your consent)
  • Improve our Service and develop new features
  • Ensure the security of the Service
  • Comply with legal obligations

4. AI and Machine Learning

We use AI technology to process your data (such as invoice extraction and customer service automation). Your data may be used to improve our AI models, but we ensure:

  • Data is anonymized before training
  • You can opt out of AI training data usage
  • We do not share your raw data with third parties for AI training

5. Information Sharing

We may share your information in the following circumstances:

  • Service Providers: Third parties that help us operate the Service (e.g., cloud hosting, payment processing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In the event of a merger, acquisition, or asset sale
  • With Your Consent: When you explicitly consent

6. Data Security

We implement strict security measures to protect your data:

  • All data transmission uses SSL/TLS encryption
  • Data storage uses AES-256 encryption
  • Regular security audits and penetration testing
  • Strict employee data access controls
  • Compliance with industry security standards

7. Data Retention

We retain your data for as long as you use our Service. When you terminate your account, we delete your data within 90 days, unless legally required to retain it longer.

8. Your Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the right to:

  • Access personal data we hold about you
  • Correct inaccurate personal data
  • Request deletion of your personal data
  • Object to certain data processing
  • Data portability (export data in a structured format)

9. Cookie Policy

We use cookies and similar technologies to improve your experience. You can manage cookie preferences in your browser settings. Note that disabling certain cookies may affect Service functionality.

10. International Data Transfers

Your data is primarily stored in Hong Kong. If data is transferred to other regions, we ensure appropriate safeguards comply with applicable data protection laws.

11. Children's Privacy

Our Service is not intended for persons under 18 years of age. We do not knowingly collect personal data from children.

12. Privacy Policy Updates

We may update this Privacy Policy from time to time. For significant changes, we will notify you via email or in-Service notification.

13. Contact Us

For any privacy-related questions, please contact our Data Protection Officer: