Privacy Policy

1. Who operates OperatorAI

OperatorAI at operatorai1.com provides business discovery, AI receptionist tools, appointments, job listings, reviews, and human support. This notice describes personal information processed through those features.

Operator / data controller: Hunter
Contact address:
Privacy email: kolozvaridenis56@gmail.com

Privacy requests can be sent to the email above or through OperatorAI management in Our partners. Identify the account or conversation concerned, but do not send passwords or verification codes.

Partner businesses are responsible for their own service delivery and hiring decisions and for information they keep outside OperatorAI. Where OperatorAI handles customer records solely on a business’s instructions, the respective responsibilities also need to be set out in a data-processing agreement.

2. Information we collect

• Accounts: name, email, account type, password hash, sign-in sessions, linked Google identity information, optional approved profile pictures, and staff roles where assigned. We do not receive your Google password.
• Business profiles: business name, work email, phone, city, country, address, services, prices, opening hours, availability, appointment capacity, breaks, and job details. Public profile information may be visible to any visitor; only publish a home-office address if it is intended for customers.
• Bookings and enquiries: customer name and contact details, selected business and service, appointment date and time, visit address, notes, cancellations, and related leads and notifications.
• AI conversations: messages, replies, conversation identifiers, selected business or job, and language. Contact details in a conversation may be captured as an enquiry for the selected business.
• Job applications: the position selected, application answers, contact information, and uploaded PDF CV. Avoid including identity documents, financial details, or unnecessary sensitive information.
• Reviews and support: ratings, review text, abuse reports, management messages, staff replies, and records of moderation or account changes. Staff-only features also store internal team messages, screenshot attachments, emoji reactions, and conversation assignments. Team members with support access can see these messages, their colleagues’ automatic Available, Busy or Away status, and the support conversation being answered or assigned. Status uses activity on OperatorAI pages, whether an OperatorAI page is visible and focused, and activity in reply fields. Switching tabs or leaving the site starts a five-minute grace period before Away; five minutes without interaction on the site also changes status to Away. Presence is temporary; the site does not read other tabs’ contents or record keystrokes for presence.
• Billing, when enabled: subscription plan, status, trial or partnership dates, and payment-provider customer and subscription identifiers. Card details are entered with the payment provider; OperatorAI does not store full card numbers.
• Saved listings and activity: account-linked saved businesses and jobs, submitted applications and their statuses, notification read markers, and towns selected for job alerts. These records are stored with the account and can be accessed on another signed-in device.
• Technical information: browser storage identifiers, request and error information, and security records. Hosting providers may process IP addresses and connection logs; some abuse controls use a hash of an IP address.

Profile pictures

Profile pictures are optional and publicly visible wherever your avatar is shown, including reviews and staff messages. Before publication, the cropped picture is sent to OpenAI for automated safety screening. Images that fail screening or cannot be checked are not published or saved to OperatorAI’s image storage. Approved images are stored with your account; uploading a replacement or using Remove picture deletes the previous active image. Technical backups may retain older records under the retention practices below. Automated checks can make mistakes; contact management support to report an inappropriate picture or a rejected upload. Do not upload private documents or pictures you do not have permission to use.

Voice messages to OPI

Voice messages are optional. Microphone recording begins only when you choose Record voice message and permit microphone access. Recordings are limited to 60 seconds and 4 MB. You can listen to or discard a recording before submitting it. When you choose Transcribe recording, the audio is sent through OperatorAI to OpenAI for speech-to-text processing. OperatorAI does not save the raw audio to its application storage. The transcript can be reviewed or edited before you send it into the chat, where it is handled like other conversation messages. Recording stops when you leave the page or after the recording limit. Provider retention practices may differ; see the provider links below. Optional reading of OPI replies uses your browser’s speech service. Use these controls while parked, not while driving.

OPI may prepare an appointment from your messages. A summary is shown before you confirm. Only a successful booking-system response means an appointment is booked; confirmed details and the appointment location are shared with the selected business.

3. Why we use information

We use information to create and secure accounts, show relevant businesses and jobs, answer enquiries, arrange appointments, forward applications, deliver service messages, administer subscriptions, investigate abuse, and respond to support requests.

Where data-protection law requires a lawful basis, core account and requested-service processing is based on performing a contract or taking requested steps before a contract; security, fraud prevention, and proportionate moderation rely on legitimate interests balanced against individual rights; required accounting or lawful disclosures rely on legal obligations. Optional activities requiring consent must use that consent, which can be withdrawn. Accepting terms is not blanket consent to unrelated data use.

Required form fields are needed for the requested feature. Without contact details, for example, a business may be unable to arrange a visit. Optional information should be limited to what is relevant.

4. AI assistance and web searches

AI replies are generated using your message, relevant recent conversation history, and business or job information. Relevant context is sent to the configured AI provider, currently OpenAI. An owner’s business-assistance context can also include that owner’s booking and lead information. Do not submit passwords, payment-card information, medical records, or other unnecessary sensitive information.

When a review question triggers an internet search, business-identifying information and the search request are processed through the AI/search service. Linked external websites have their own privacy policies. Online review summaries may be incomplete or refer to a different business; check the cited sources.

The receptionist assists with information and scheduling; it does not make an employer’s hiring decision or provide professional medical, legal, or financial advice. Management support messages go to human staff, rather than the receptionist automatically answering them.

5. Who can receive information

• The business you contact or book receives relevant enquiries and appointment details, including a visit address when needed.
• The business receiving a job application can view the application and CV. CVs are not intended as public directory content.
• Business listings, job advertisements, and published review information are visible to other users. Do not include private contact details in a public review.
• Authorized OperatorAI personnel can access information needed for support, moderation, security, or administration, according to their access rights.
• Service providers process relevant information to deliver hosting, AI, authentication, messages, and payments, as described below.
• Information may be disclosed where required by law or necessary to investigate fraud, protect people, or establish and defend legal claims.

The current site does not include a personal-data sales or advertising-targeting feature.

6. Service providers and international processing

The integrations in the current project include the following. A provider receives information only when the relevant integration or feature is used.

Providers may process information outside your country. Applicable transfer safeguards and deployment locations must be confirmed for the live service; this draft does not assert that every transfer has already been assessed. You may request information about the safeguards that apply to your data.

7. Browser storage and notifications

The site uses local storage and session storage for sign-in, preferences, conversation or visitor identifiers, and account-connection flows. Clearing browser storage can sign you out or remove access to a guest support conversation; it does not delete server records.

Browser notifications are optional and depend on your browser permission and device settings. They can display appointment information on a shared or locked device. You can revoke permission in browser settings. Declining notifications does not delete your account. Third-party sign-in or checkout pages may use their own cookies or storage.

8. Retention and deletion

Account and business records are kept while needed to provide the service. Booking, application, CV, review, support, internal team-chat, assignment, and security records may also be needed to resolve disputes, prevent abuse, and meet legal duties. Retention decisions should take account of those purposes, sensitivity, account closure, and applicable legal requirements.

Current behavior: only future confirmed appointments appear in the customer appointment view; that is not automatic deletion from stored records. The chat record keeps a limited recent message history, but separate enquiries and provider records may remain. Dismissing a notification or deleting a business listing does not necessarily erase associated records.

You can request account closure or a copy of your information from Profile. The request is delivered to the management inbox for owner review; it does not automatically erase information or end a paid subscription. Management will confirm the next steps and identify any records that need to be retained. Fixed retention periods and an independent backup destination have not yet been set.

9. Your choices and privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, a portable copy of information, or object to certain processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights can have exceptions, including records that must be kept by law.

Use the contact route above and describe the request. Proportionate identity verification may be needed before releasing or changing records. Requests should be handled within the deadlines applicable to your jurisdiction. For information independently held by a partner business, contact that business too.

You may complain to the relevant supervisory authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection. Where EU/EEA law applies, you may contact the competent local data-protection authority.

10. Security, children, and changes

The current software uses password hashing, authenticated access, and role-based restrictions. No online service can guarantee absolute security. Keep sign-in credentials private and report suspected account misuse through management support.

OperatorAI is intended for adults. It is not designed to collect children’s information or to store medical files or other sensitive case records. If you believe a child has supplied personal information, contact us to request review and appropriate removal.

Updates to this notice will be identified by a revised date. Material changes requiring additional notice or consent must be communicated through an appropriate channel. A revised notice does not by itself authorize incompatible new uses of existing information.