Privacy Policy

1. Introduction

OpsBaseline (“we,” “us,” “our”) respects your privacy. This Privacy Policy describes what data we collect, how we use it, and how we protect it when you use our service at opsbaseline.com and related services (the “Service”).

2. Data We Collect

We may collect:

• Account data: name, email, organization name, and password (hashed).
• Usage data: how you use the Service (e.g., pages visited, features used, API calls).
• Technical data: IP address, browser type, device information, and logs.
• Integration data: credentials and configuration you provide for AWS, Slack, or other integrations (stored encrypted).
• Consent records: timestamp and context when you accept our Terms, Privacy Policy, or Cookie Policy.

3. How We Use Your Data

We use your data to: provide and operate the Service; authenticate you; enforce our terms; send transactional emails (e.g., password reset); improve the Service; comply with law; and protect our rights and security. We do not sell your personal data to third parties.

4. Data Sharing

We may share data with: service providers (e.g., hosting, email, payment processors) who process data on our instructions; law enforcement when required by law; or in connection with a merger or sale of assets. We require processors to protect your data by contract.

5. Data Retention

We retain account and usage data for as long as your account is active and as needed to provide the Service, comply with law, or resolve disputes. You may request deletion of your account and associated data subject to applicable retention obligations.

6. Security

We use industry-standard measures (encryption, access controls, secure development practices) to protect your data. See our Security page for more detail. No system is 100% secure; you use the Service at your own risk.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data, or to object to or restrict processing. To exercise these rights, contact us using the details on our website. EU/UK users have additional rights under GDPR (see our GDPR Compliance page).

8. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and, where appropriate, notify you. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us via the address provided on our website.