Privacy Policy
Last updated: 2026-07-22
What we collect
Account and business information you provide directly: your email, organization name, employee count, industry (NAICS code), and worksite locations. Records you choose to create in the app: employee names/emails for training tracking, incident log entries, and any custom filing dates you add. Answers you give in a document wizard (e.g. hazard lists, reporting channels) are used to draft that document and stored with it.
What we don't collect
We don't track you across other websites, sell your data, or use it to train AI models beyond generating the specific document you requested in that request.
Who we share it with
Only the services that make the product work, each only with what they need to do their job: Stripe (payment processing), SendGrid (transactional email — reminders, document delivery), Anthropic (drafting document content from your answers and public legal sources), and Vercel (hosting and file storage for your generated documents). None of them use your data for their own purposes beyond providing that service to us.
How long we keep it
Account and document data for as long as your account is active. Violent incident log entries are retained per SB 553's requirements. If you stop paying, your existing documents and data stay intact and viewable — we don't delete anything just because a subscription lapses.
Your choices
You can correct your business profile and worksite details any time from your account. To request a copy or deletion of your data, email us — see Support in the footer. California residents have rights under the CCPA to know, delete, and opt out of sale of personal information; we don't sell personal information, so there's nothing to opt out of.
Cookies
We use one cookie to keep you signed in. No advertising or analytics trackers.
Contact
Questions about this policy or your data — info@operone2i.com.