Privacy Policy

This Privacy Policy explains how ShadowOps collects, uses, discloses, and protects information when you visit our sites, join the waitlist, create an account, or use the ShadowOps service.

1. Information we collect

Information you provide

• Waitlist and contact details, such as your email address, plan interest, referral, and campaign information.
• Account details, such as your email address, display name, password-derived credential, and authentication choices.
• Content you submit or create, including prompts, conversations, instructions, files, project data, CRM records, agent configurations, and outputs.
• Provider and integration credentials that you choose to connect, such as API keys or OAuth tokens. These are treated as sensitive information and are stored using application-level encryption where supported.
• Payment and transaction information. Payment card data is handled by the payment provider; ShadowOps receives account, transaction, subscription, and payment-status identifiers.

Information collected automatically

We may receive IP address, browser and device information, request timestamps, approximate location derived from an IP address, security events, and diagnostic information needed to operate, secure, rate-limit, and troubleshoot the service.

2. How we use information

We use information to provide and secure ShadowOps; authenticate accounts; operate agents, workflows, files, and integrations; process payments; communicate about access, service changes, and support; prevent abuse; investigate incidents; comply with law; and maintain, measure, and improve the service.

3. AI and provider data

When a task requires an AI or integration provider, relevant prompts, files, configuration, and outputs may be transmitted to the provider selected by you or enabled for your account. The provider's own terms and privacy practices apply to that transfer. Review the provider's retention and training settings before sending confidential information.

ShadowOps does not currently sell personal information for money. We do not use private customer content to train a general-purpose model unless we clearly tell you and obtain any permission required by law or contract.

4. How we share information

We share information only as needed with service providers that host, secure, authenticate, process payments for, or help operate ShadowOps; with AI and integration providers you select; with professional advisers; in connection with a merger, financing, or other business transfer; or when required to comply with law, protect rights, or prevent fraud and abuse.

5. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict use of personal information, object to certain processing, opt out of targeted advertising or sale/sharing, appeal a decision, or withdraw consent. You may unsubscribe from non-transactional email by using the instructions in the message or contact us at [email protected]. We may need to verify a request before completing it.

6. Retention and deletion

We retain information for as long as needed to provide the service, maintain legitimate business records, resolve disputes, enforce agreements, prevent abuse, and meet legal obligations. Waitlist information is retained for launch communications until you unsubscribe or it is no longer needed. Account content and credentials are deleted or de-identified according to the account and backup lifecycle; residual copies may remain temporarily in secure backups.

7. Security and transfers

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted connections, password hashing, and protection for stored secrets. No system is completely secure. ShadowOps and its providers may process information in countries other than your own, subject to applicable transfer safeguards.

8. Children

ShadowOps is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us so we can investigate and delete it where required.

9. Changes and contact

We may update this policy as the service changes. We will post the updated version and revise the effective date. Questions, rights requests, and privacy complaints may be sent to [email protected].