Privacy Policy

OpsVault Tech (“OVT,” “we,” or “us”) is a custom software studio operating as OpsVault Tech LLC, based in Greeley, CO. This policy covers opsvaulttech.io, our free tools hosted on subdomains, and any email we send.

When you use our site or tools, we may collect:

• Contact form submissions: name, business name, email, phone (optional), and the message you send.
• Free tool inputs: the URLs you audit, domains you monitor, emails you register with BugBreaker or ReviewRadar, and any data you volunteer through our tools.
• Automatic data: IP address, browser/device info, referring URL, and pages visited. Standard web-server logs.
• Email engagement: if we send you a marketing email, our provider (Brevo) records whether it was opened or clicked.

We do not collect payment card data. Any future payments route through Stripe — your card never touches our servers.

• Respond to your inquiries and provide the services you ask for.
• Run the audits, monitors, and tools you request.
• Send you occasional updates — only if you opt in or are an active client.
• Improve our tools (anonymous usage patterns, error logs).
• Comply with legal obligations (tax, legal requests, etc.).

If you received a cold email from us, your business contact info was gathered from publicly-available sources (Google Maps, public business directories, your own website). We send a small number of relevant prospecting emails at a time — not bulk blasts.

One-click unsubscribe in every email. Your unsubscribe is honored permanently — your address goes on a do-not-email list we never remove from, even if you re-enter our database later.

We use a handful of trusted services to run the business:

• Vercel — hosting the website and our APIs.
• Supabase — our database (form submissions, tool registrations, audit records).
• Resend — transactional email (confirmations, receipts, one-to-one reply).
• Brevo — marketing email (only if you're on our prospecting or newsletter list).
• Stripe — payment processing (when you engage for a paid service).
• Google APIs — PageSpeed Insights and Places (for our Site Audit tool).
• Anthropic (Claude) — powers some AI features. Inputs sent to Claude follow Anthropic's commercial data policy (not used for model training).

Each provider has their own privacy policy. We only share what they need to do their job.

We use minimal cookies. Essential cookies keep you logged in to any internal dashboard you have access to. We do not use advertising trackers or cross-site tracking cookies.

If we ever add analytics, we use privacy-respecting analytics (like Vercel Analytics) that does not collect personal data or use fingerprinting.

• Contact form submissions: kept until you ask us to delete them.
• Audit results: retained for the shareable-link feature; deletable on request.
• Unsubscribes: permanently (so we know not to email you again).
• Inactive accounts on free tools: may be deleted after 24 months of inactivity.
• Client records: retained for the duration of our engagement + 7 years (for tax/accounting).

Email us any time to:

• Request a copy of data we have on you.
• Correct inaccurate information.
• Delete your data (subject to legal retention requirements).
• Opt out of marketing emails.
• Object to how we use your data.

We respond to these requests within 30 days. No fee, no friction.

We run HTTPS everywhere, use row-level security on our database, and only grant data access to people who need it (currently: one person — Alec). We do not store payment card data. If we ever experience a breach that could affect you, we'll notify you directly.

Our services are for businesses. We do not knowingly collect personal information from anyone under 13. If you believe we have, email us and we'll delete it immediately.

When we update this policy, we update the “Last updated” date at the top and post the new version here. For material changes, we'll also notify active clients by email.

Have a question about this policy or how we're using your data? Reach out — we answer every message.