Privacy Policy
Last Updated: July 15, 2026
OpsBox AI LLC ("Company", "we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes how we collect, use, and protect information when you access or use our Warehouse Management System (WMS) and related services (the "Services") during your use of our services.
By accessing the Services, you agree to the collection and use of information in accordance with this policy.
1. INFORMATION WE COLLECT
We collect different types of information to provide and improve our WMS:
A. Personal Information
- Account Data: Names, email addresses, phone numbers, and job titles of authorized users.
- Login Credentials: Encrypted passwords and authentication tokens (via our auth providers).
B. Business & Logistics Data (The "Warehouse Data")
- Inventory Data: SKU numbers, product descriptions, stock counts, and bin locations.
- Transaction Data: Inbound receipts, outbound shipment details, and carrier tracking numbers.
- Customer Data: Names and addresses of your customers (the recipients of shipments) that you enter into the system for fulfillment purposes.
C. Usage & Telemetry Data
- System Logs: IP addresses, browser type, and timestamps of when you access the system.
- Activity Tracking: Information on how you interact with the interface (e.g., "Time to Pack" metrics, button clicks) to help us optimize the UX.
D. Cookies, Analytics & Tracking Technologies (Marketing Site)
On our public marketing pages we use cookies and similar technologies. These are disabled by default and only activate if you accept them via our cookie banner. We automatically honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing. The technologies we use are:
- Google Analytics 4 (Google LLC): Measures site traffic and page usage. IP addresses are anonymized. Loads only after consent. See Google’s Privacy Policy.
- Reddit Advertising Pixel (Reddit, Inc.): Measures the performance of our Reddit ads and enables cross-context behavioral advertising. Loads only after consent. See Reddit’s Privacy Policy.
- On-site Chat ("Deadstock Dave"): A first-party assistant on our marketing site. If you send a message, the conversation transcript (and any name/email/company you provide) is recorded and stored so we can respond and follow up. A notice is shown in the chat window.
- Strictly-necessary technologies: Security, load balancing, and session functionality that are required for the site to work and are not gated by consent.
2. HOW WE USE YOUR INFORMATION
We use the collected data for the following specific purposes:
- Service Delivery: To process inventory transactions, generate shipping labels, and manage warehouse workflows.
- AI & Machine Learning Improvement: We may use anonymized and aggregated warehouse data to train our AI models (e.g., optimizing pick paths or predicting stockouts). We do not use your proprietary customer lists to train models for other tenants.
- Feedback & Debugging: To identify software bugs, crash reports, and performance bottlenecks.
- Communication: To send administrative emails (password resets, downtime alerts) and requests for product feedback.
3. DATA SHARING AND DISCLOSURE
We do not sell your personal information for money. However, when you consent to advertising cookies on our marketing site, the use of the Reddit Advertising Pixel may qualify as “sharing” of online identifiers for cross-context behavioral advertising under California’s CCPA/CPRA. You can opt out of this at any time (see Section 5), and we honor GPC signals automatically. We share information with third parties only in the following circumstances:
Advertising & Analytics Partners (marketing site, consent-gated):
- Google LLC (Google Analytics 4): Site analytics.
- Reddit, Inc. (Reddit Pixel): Ad measurement and cross-context behavioral advertising.
Service Providers:
We use trusted third-party vendors to host our infrastructure and facilitate operations, including:
- Vercel / AWS: Cloud hosting and serverless computing.
- Database Providers: Storing application data (e.g., Neon, Supabase).
- Authentication Services: Managing secure logins (e.g., Auth.js, NextAuth).
Legal Compliance:
If required by law, subpoena, or to protect the rights and safety of OpsBox AI LLC.
4. DATA SECURITY
We implement industry-standard security measures (including SSL encryption and secure database connections) to protect your data. We take reasonable measures to protect your information; however, no method of transmission over the Internet is 100% secure. You acknowledge that you use the Services at your own risk.
5. YOUR CALIFORNIA PRIVACY RIGHTS (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights regarding your personal information:
- Right to Know / Access: Request the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of personal information we collected from you, subject to legal exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: Opt out of the “sharing” of your personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information and the Right to Non-Discrimination for exercising these rights.
Do Not Sell or Share My Personal Information
We do not sell your personal information for money. If you have opted into advertising cookies, you can withdraw that consent and opt out of “sharing” for cross-context behavioral advertising in either of these ways:
- Use the “Do Not Sell or Share My Personal Information” link in the footer of our marketing site to re-open the consent banner and select Decline.
- Enable a Global Privacy Control (GPC) signal in your browser or extension — we detect and honor it automatically as a valid opt-out.
How to Exercise Access / Deletion / Correction Rights
To submit an access, deletion, or correction request, email us at privacy@opsbox.co with the subject line “California Privacy Request.” We will verify your identity before responding and will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request on your behalf.
6. DATA RETENTION
We retain your personal and business data only as long as necessary to provide the Services or as required by law. Upon termination of your account, you may request the deletion of your data by contacting support.
7. CHANGES TO THIS POLICY
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
8. CONTACT US
If you have any questions about this Privacy Policy, please contact us: