Privacy Policy

Effective Date: April 21, 2026 · Last Updated: May 27, 2026

OpsReef ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rental management platform and related services (the "Service").

1. Information We Collect

Information You Provide

• Account Information: Name, email address, phone number, company name, and job title when you register for an account.
• Business Data: Client records, job details, inventory data, invoices, contracts, and other business information you enter into the Service.
• Payment Information: Billing details for your OpsReef subscription. Payment card data for processing customer payments is handled by third-party payment processors (e.g., Stripe, QuickBooks Payments) and is not stored on our servers.
• Communications: Information you provide when contacting our support team.

Information Collected Automatically

• Usage Data: Pages viewed, features used, actions taken, timestamps, and session duration.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, referring URLs, and server logs.
• Cookies: Session cookies necessary for authentication and Service functionality. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process transactions and manage your subscription.
• Send transactional communications (account confirmations, password resets, invoices).
• Respond to your requests, comments, and support inquiries.
• Monitor and analyze usage patterns to improve the Service.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., hosting providers, payment processors, email delivery services). These providers are contractually obligated to protect your information.
• Third-Party Integrations: When you connect third-party services (e.g., QuickBooks, Google Calendar, Stripe), data necessary for the integration is shared with those services per their own privacy policies.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: When you have given us explicit permission to share specific information.

4. Google User Data

When you connect your Google account (Gmail) to OpsReef, we request permission to send email on your behalf using the gmail.send scope, and to identify your account using the userinfo.email and openid scopes. We do not read, modify, search, store, or delete the contents of your Gmail mailbox.

OpsReef's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We use Google user data only to provide and improve the email-sending features visible to the user.
• We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data for advertising purposes.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security (e.g. investigating abuse), to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable policies.

You may revoke OpsReef's access to your Google account at any time at myaccount.google.com/permissions or by disconnecting the integration from your OpsReef settings page.

5. Microsoft Account Data

When you connect your Microsoft account (Outlook / Office 365) to OpsReef, we request permission to send email on your behalf using the Mail.Send scope, to read your basic profile so we can identify the connected account using the User.Read scope, and offline_access so we can refresh access without prompting you to sign in repeatedly. We do not read, modify, search, store, or delete the contents of your mailbox.

We use Microsoft account data only to provide the email-sending features visible to you within OpsReef. We do not use it for advertising, and we do not transfer it to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.

You may revoke OpsReef's access to your Microsoft account at any time at myaccount.microsoft.com/permissions or by disconnecting the integration from your OpsReef settings page.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and sensitive data at rest.
• Access controls and authentication requirements for all users.
• Regular security assessments and monitoring.
• Multi-tenant data isolation ensuring your business data is separated from other customers.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we may retain certain data for a reasonable period to allow data export, comply with legal obligations, resolve disputes, and enforce our agreements. Business data may be permanently deleted upon request after account closure.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Data Export: Export your business data from the Service at any time.
• Opt-Out: Unsubscribe from non-essential communications at any time.

To exercise these rights, contact us at privacy@opsreef.com. We respond to verified requests within 30 days.

9. Cookies

We use essential cookies required for the Service to function (authentication, session management, security). We do not use cookies for advertising or cross-site tracking. By using the Service, you consent to the use of essential cookies.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 16, we will take steps to delete it promptly.

11. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

OpsReef
Privacy inquiries: privacy@opsreef.com
Security issues: security@opsreef.com
General: info@opsreef.com