Privacy Policy

OpsBrain provides an operational execution platform that helps organisations turn standard operating procedures into guided workflows, monitor how work is executed, and improve their processes using behavioural and execution data (the "Services"). This Privacy Policy applies to personal information we process through our marketing website at opsbrain.io, through our platform, and through related communications, sales, and support activities.

This policy does not apply to the personal information that our customers process about their own employees, contractors, or end users within the platform. Where a customer uses the Services to process such information, that customer acts as the controller of that information and is responsible for its own privacy practices, and we act as a processor on the customer's documented instructions under the applicable agreement between us.

For the personal information described in this policy, the data controller is OpsBrain Inc, a company incorporated in the State of Delaware, United States, with its principal place of business at Calle Alcalde Cano Coloma 4, 46022 Valencia, Spain. If you have questions about this policy or how we handle your personal information, you can reach us using the contact details in the "How to Contact Us" section below.

Information you provide to us. When you create an account, contact us, or submit our demo-request form, we collect the information you choose to give us. This typically includes your name, business email address, telephone number, company name, job title, company size, the operational use case you are interested in, and any message or other details you include. When you correspond with our sales or support teams, we retain the content of those communications.

Information collected automatically. When you visit our website or use the platform, we and our service providers collect certain information automatically. This includes usage data (such as the pages you view, the features you interact with, and the dates and times of your activity), log data (such as your Internet Protocol address, browser type, and referring pages), and device information (such as operating system, screen resolution, and language settings). We collect some of this information using cookies and similar technologies, as described in the "Cookies and Similar Technologies" section.

Information from third parties. We may receive information about you from third parties, including business partners, analytics and advertising providers, and publicly available sources, as well as from infrastructure providers that help us detect and prevent fraud and abuse. Where you sign in or connect through a third-party service, we receive the information that service shares with us in accordance with your settings on that service.

We use personal information to operate our business and to provide, maintain, and improve the Services. In particular, we use it to:

• create and administer accounts, authenticate users, and provide customer support;
• respond to demo requests, enquiries, and other communications, and schedule and conduct demonstrations;
• deliver, maintain, secure, and improve the Services, and develop new features and offerings;
• analyse usage and execution patterns so that we can generate process-improvement insights and measure performance;
• send administrative messages, service updates, and, where permitted, relevant marketing communications;
• detect, investigate, and prevent fraud, security incidents, and other prohibited or unlawful activity; and
• comply with our legal obligations and enforce our terms and agreements.

Where data protection law (such as the UK GDPR or the EU GDPR) applies, we process personal information only where we have a valid legal basis to do so. Depending on the circumstances, we rely on the following bases: performance of a contract with you or steps taken at your request before entering into a contract; our legitimate interests in operating, securing, and improving our business and the Services, provided those interests are not overridden by your rights; compliance with a legal obligation; and your consent, where we ask for it (for example, for certain marketing communications or non-essential cookies). Where we rely on consent, you may withdraw it at any time, as described in the "Your Rights and Choices" section.

We use cookies, pixels, local storage, and similar technologies to operate our website, remember your preferences, measure traffic and engagement, and, where applicable, support marketing. Some of these technologies are strictly necessary for the website to function, while others are optional and used only where permitted. You can manage cookies through your browser settings and, where we provide one, through our cookie preferences tool. Disabling certain cookies may affect the availability or functionality of parts of our website.

We disclose personal information in the following circumstances:

• Service providers and sub-processors. We share information with vendors that perform services on our behalf, such as cloud hosting, data storage, analytics, email delivery, payment processing, and customer support. These providers are authorised to use personal information only as necessary to provide services to us and are bound by appropriate contractual obligations.
• Legal and regulatory. We may disclose information where we believe in good faith that disclosure is required to comply with applicable law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of OpsBrain, our customers, or others.
• Corporate transactions. If we are involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be transferred as part of that transaction, subject to the protections described in this policy.

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising in exchange for money or other valuable consideration.

We and our service providers may process personal information in countries other than the one in which you are located. Where we transfer personal information across borders, we put appropriate safeguards in place as required by applicable law, such as standard contractual clauses approved by the relevant authorities or transfers to jurisdictions recognised as providing an adequate level of protection. You may contact us for more information about the safeguards we use.

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to provide the Services, to comply with our legal, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. When personal information is no longer required, we will delete it or anonymise it. The specific retention period depends on the type of information and the context in which it was collected.

We maintain administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, and alteration. These measures include access controls, encryption in transit, network protections, and regular review of our practices. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee its absolute security.

Depending on where you live and subject to applicable law, you may have some or all of the following rights in relation to your personal information:

• the right to access the personal information we hold about you;
• the right to request correction of inaccurate or incomplete information;
• the right to request erasure of your personal information in certain circumstances;
• the right to request that we restrict the processing of your information;
• the right to data portability, where applicable;
• the right to object to certain processing, including direct marketing; and
• the right to withdraw consent at any time where we rely on consent to process your information.

To exercise any of these rights, please contact us using the details in the "How to Contact Us" section. We may need to verify your identity before responding to a request. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority, although we encourage you to contact us first so that we can address your concern.

Our website and the Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe that a child has provided us with personal information, please contact us so that we can take appropriate steps to delete it.

Our website and communications may contain links to third-party websites, products, or services that we do not operate or control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any third-party services you visit or use.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will revise the "Last updated" date at the top of this page and, where the changes are material, we will provide a more prominent notice. We encourage you to review this policy periodically.

If you have questions, requests, or complaints regarding this Privacy Policy or our handling of your personal information, you can contact us at support@opsbrain.io. You can also write to us at OpsBrain Inc, Calle Alcalde Cano Coloma 4, 46022 Valencia, Spain.