Privacy Policy

1. Information We Collect

When you connect your Google account to Opsfly, we request access to the following types of data:

• Google Sign-In (profile & email): Your name, email address, and profile picture, used to create and identify your Opsfly account.
• Google Drive: File metadata and contents of files you explicitly connect or authorize for use in automation workflows.
• Google Sheets: Spreadsheet data from sheets you connect to power your AI agent tasks (e.g., reading rows as input or writing results as output).

We request only the minimum permissions necessary to deliver the features you activate. We do not request access to data for speculative or future features.

2. How We Use Your Data

• Authentication: Google Sign-In data (name, email, profile picture) is used solely to authenticate you and maintain your account session.
• Workflow execution: Drive and Sheets data is accessed only to carry out the specific automation tasks you configure within Opsfly — for example, reading a Sheet to trigger an AI agent action, or writing results back. This is a user-facing feature prominently available in the platform interface.
• No AI/ML training: Google user data is never used to train, fine-tune, or improve any AI or machine learning model.
• No advertising: Google user data is not used for advertising, ad targeting, or retargeting purposes.
• No secondary uses: Google user data will not be used for any purpose other than those explicitly described in this policy. Any new use will require updating this policy and obtaining your prior consent.

3. Data Sharing & Prohibited Transfers

We do not sell, rent, or trade your Google user data. Data is shared only in the following strictly limited circumstances:

• Infrastructure providers: We use Google Cloud and Firebase to host and operate the platform. These services process data solely to provide infrastructure and are bound by Google's own data protection terms.
• Legal requirements: We may disclose data if required by applicable law, regulation, or a valid legal process.

Google user data is never transferred to or shared with:

• Advertising platforms or ad networks
• Data brokers or data aggregators
• Any party for credit-worthiness assessment or financial scoring
• Any party for ad targeting, remarketing, or retargeting
• Any third party not described in this policy

4. Human Access to Your Data

Opsfly staff do not read or access the contents of your Google user data (including Drive files or Sheets data). The only exceptions, in line with Google's Limited Use requirements, are:

• You explicitly consent to access for a specific support purpose.
• Access is required for security purposes (e.g., investigating a breach or abuse).
• Access is required to comply with applicable law.
• Access is to aggregated and anonymized data for internal operations analysis, where no individual user can be identified.

5. Data Storage & Protection

• Data is stored on Google Cloud / Firebase infrastructure, which maintains industry-standard physical and technical security controls.
• All data in transit is encrypted using HTTPS/TLS. All data at rest is encrypted using industry-standard encryption.
• Access controls are enforced at the account level; only authenticated users can access their own data.
• We store only the minimum data necessary to operate the features you use.

6. Data Breach Notification

In the event of a security incident that results in unauthorized access to or use of your personal data or Google user data, we will promptly notify affected users to the extent required by applicable law. Notification will be provided via the email address associated with your account. If you believe your data has been compromised, contact us immediately at opsfly@infai.xyz.

7. Data Retention & Deletion

• Google user data is retained for as long as your Opsfly account remains active or as needed to provide the services you use.
• Account & data deletion: You may request deletion of all your data at any time by emailing opsfly@infai.xyz with the subject line "Delete My Data". We will delete your data within 30 days of receiving the request.
• Revoking Google access: You can revoke Opsfly's access to your Google account at any time via Google Account Permissions. Revoking access immediately stops all future access to your Google data. Any Google user data already stored by Opsfly will be deleted within 30 days of revocation.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. If we intend to use your Google user data in a new way or for a different purpose, we will update this policy and obtain your prior consent before doing so. Continued use of Opsfly after non-material changes constitutes acceptance of the revised policy.