Privacy Policy

Introduction

Operum ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our desktop application and website (collectively, the "Service").

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)

Usage Data

We automatically collect certain information when you use the Service:

• Device information (operating system, device type, and a normalized device identifier derived from your computer's hostname — for macOS, Linux, or Windows systems we store a platform-specific label like "macOS laptop" rather than the raw hostname)
• IP address (recorded server-side when your device connects to our authentication and database services)
• Local IP address (recorded by the desktop application for device session management)
• Application version and user agent string
• Feature usage statistics
• Error logs and crash reports

Session records — device identifier, operating system, application version, local IP address, and user agent — accumulate for as long as your account exists. Sessions you sign out of are marked inactive rather than deleted.

Referral Links

If you arrive through an affiliate's referral link, we set two first-party cookies, each for 30 days: operum_ref, recording which affiliate referred you, and operum_ref_at, recording when you first clicked. If you then create an account or subscribe, that affiliate is recorded on your account. Only if you accept analytics cookies, we also count the visit for that affiliate, using a third cookie (operum_vid, a random identifier, 30 days) that we store only as a keyed hash, at most once a day, with no IP address or device details. The affiliate sees visit counts and, for people who create an account through their link, the sign-up date, whether the account is Trial, Free, Paid or Churned (for a paying account, its plan: Standard or Premium), and a heavily masked email address (for example, dm•••@g•••.com). For each account attributed to them, the affiliate also sees the date it was attributed, the date of its first payment, the commission accrued and paid on it, and the status of that commission. Affiliates never see your full email address, your name or your card or billing details.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. We receive only the last four digits of your card, card type, and billing address for record-keeping purposes.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Detect, prevent, and address technical issues
• Comply with legal obligations

Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for authentication and database services, which employs enterprise-grade security measures.

The desktop application stores authentication tokens and encryption keys securely on your device. How your Anthropic credential is handled depends on how your team connects to Claude. If the team signs in to Claude, that sign-in is kept by Anthropic's own Claude Code software on your device, in a configuration folder for that team (on macOS, in your Keychain). If you set your own Anthropic API key or Claude Code token as an environment variable on your computer, Operum reads it from there and does not store it. If you save an Anthropic API key in Operum's Integrations page, it is stored in an AES-256-GCM encrypted file on your device, with the master encryption key held in your operating system's keychain (macOS Keychain or Windows Credential Manager). On Linux, where the system keyring does not persist across restarts, the master key is instead kept in a key file on your device that only your user account can read, created when you choose to enable credential storage.

AI Processing and Data Handling

Operum orchestrates AI agents powered by third-party AI models. Here is how your data interacts with AI services:

• Local-first architecture: Your code and project files remain on your device. AI API calls are made directly from your machine to the AI provider (Anthropic) — your data does not pass through our servers. Exception: with Quick Start, your code is hosted in a repository in Operum's GitHub organization; a zip export is prepared in our storage and served through a link valid for 1 hour.
• Your Anthropic credential: Each team either signs in to Claude through Anthropic's own sign-in, or uses your own Anthropic API key or Claude Code token. The credential stays on your device and is used only by Operum on your machine to run your agents — it is never sent to our servers. We never see your Anthropic password and never sign in on your behalf. Operum never provides, pays for, or resells Claude access: your Claude usage is billed to you by Anthropic under your own agreement with Anthropic.
• AI-generated outputs: Code, text, and other outputs generated by AI agents are created locally on your device. We do not collect, store, or have access to AI-generated content.
• Agent activity logs: The desktop application stores agent activity logs locally on your device. These logs are never transmitted to our servers.
• Agent instruction files: If you customize your agent instruction files (system prompts), those customizations are uploaded to our servers to enable team collaboration features. These files may contain your custom workflows and preferences.
• No training on your data: We do not use your code, prompts, or AI outputs to train any models. Refer to Anthropic's data usage policy for how the AI provider handles API requests.

Third-Party Services

We use the following third-party services:

• Supabase - Authentication and database
• Stripe - Payment processing
• Anthropic - AI model provider (API calls made directly from your device)
• GitHub - Code repository integration (with your explicit authorization)
• Sentry - Error and crash reporting. Reports are keyed to an opaque account identifier and do not include your email address.
• PostHog - Product analytics. Usage events are keyed to an opaque account identifier, not to your name or email address. Note: PostHog may capture IP addresses and geolocation data as part of standard analytics processing. On our website, and only after you accept analytics cookies, PostHog also records sessions (how pages are scrolled and clicked), with everything typed into forms and any email address shown on screen masked; account, admin and sign-in pages are never recorded.
• Google Analytics (GA4) - Website analytics on our landing pages
• Vercel - Website hosting and analytics
• Resend - Transactional email delivery

Each third-party service has its own privacy policy. We encourage you to review them. We share only the minimum data necessary with each service to provide the functionality described above.

Analytics Consent: When you visit our website, you can choose whether to allow non-essential analytics cookies. Currently, this consent mechanism controls PostHog analytics and referral visit counting (see Referral Links above) only. Google Analytics (GA4) and Vercel Analytics operate independently of this consent mechanism. We are working to bring all analytics under unified consent control.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Opt out of marketing communications

To exercise these rights, contact us at privacy@operum.ai.

Data Retention and Deletion

User-Requested Account Deletion

You may permanently delete your account at any time — from Settings → Danger Zone in the desktop app, or from your account page on the web. Two paths are available on both surfaces:

• Delete with a recovery window: starts a 7 calendar-day recovery window during which you can sign back in and choose Cancel deletion to revert. At the end of the 7-day period, your account and all associated data are permanently deleted.
• Delete immediately: permanently destroys your account and all associated data right away with no recovery window.

Either path permanently deletes all data associated with your account, except where we are required to retain specific records for legal purposes. This includes your profile, teams, projects, agent configurations, chat history, and schedules.

Important note about Operum-provisioned (Quick Start) repositories: If you use Quick Start and Operum provisions a GitHub repository for your team, that repository is created in Operum's GitHub organization and you do not have direct GitHub access to it by design. When you delete your account, your Operum project data is removed, but the provisioned repository itself is not automatically deleted from GitHub. If you wish to preserve your repository contents, you must export or transfer the repository before deleting your account — see how to export your Quick Start repository. If you connect your own GitHub repository instead of using Quick Start, that repository remains in your GitHub account and Operum cannot and does not delete it.

Exporting or transferring any data you wish to keep before deletion is your responsibility. Only you, signed in to your own account, can export or transfer your data; no other Operum user can read, export, or transfer it. Operum is not liable for data — including provisioned repositories — lost as a result of your own decision to delete your account. Once deletion completes, the data cannot be recovered.

User-Initiated Team Deletion

You can delete a team at any time from Settings → Danger Zone ("Move Team to Trash"). The team then moves to Trash, where it is hidden from your normal team list but its data is preserved for 7 calendar days so you can change your mind.

Within the 7-day Trash window you can:

• Restore the team — it becomes fully accessible again, exactly as it was before deletion.
• Delete Permanently — the team is removed from your account immediately with no further recovery period.

On day 7, any team still in Trash is removed automatically.

Subscription Status and Data Access

Operum does not automatically delete your data based on subscription status. If your subscription enters a past-due state or you cancel your subscription, your data is preserved. Here is what happens:

• Payment failure: we retry the payment. If the subscription ends unpaid, your account moves to the Free plan. Nothing is deleted, and you can upgrade again at any time.
• Voluntary cancellation: You retain full access until the end of your current paid period, then your account continues with reduced features on the Free tier. Your data remains intact.
• Downgrades: Moving to a lower-tier plan has no effect on your existing data. Teams and projects are not archived or deleted due to tier limits.

Only you can delete your data, through the account deletion or team deletion mechanisms described above.

Account Suspension for Security or Policy Violations

If we identify a security concern or policy violation, we may suspend your account. Account suspension restricts access to your account but does not delete your data. Suspended accounts retain their data so that legitimate issues can be resolved and access restored. If you believe your account was suspended in error, contact us at support@operum.ai.

Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, or want to make a data access or deletion request, use the form below.

Prefer email? You can also reach us directly at privacy@operum.ai.