Legal — Privacy, Terms & Security

Last updated: June 2026

Overview

This Privacy Policy describes how Operanix collects, uses, and protects information when you use our platform and website. We are committed to data minimization, tenant isolation, and giving customers control over their data.

Information we collect

Account information you provide (name, work email, company).
Usage and operational telemetry needed to run and secure the service.
Content you submit to the platform — knowledge sources, tasks, and agent configurations.

How we use it

To provide, secure and improve the service, to communicate with you, and to meet legal and compliance obligations. We do not sell personal information.

Data handling & retention

Customer data is stored in a tenant-isolated environment with scoped access. Data is hosted on Google Cloud (US region). Private-cloud or on-premises deployment is not offered today. PII is detected and redacted before persistence where applicable.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete your personal data. Contact us to exercise these rights.

This page is a template summary and not legal advice. Final policy language should be reviewed by counsel before launch.

Last updated: June 2026

Agreement

By accessing or using Operanix, you agree to these Terms of Service. If you are using the service on behalf of an organization, you agree on its behalf.

Use of the service

You are responsible for the actions your AI agents take within the permissions you grant them.
Human approval is required for actions you designate as high-risk; you remain accountable for approved actions.
You agree not to misuse the platform or attempt to bypass its governance controls.

Plans & billing

Paid plans are billed per the pricing in effect at purchase. Trials convert to paid plans unless cancelled before the trial ends. You may cancel at any time.

Availability

We target high availability but do not currently offer a contractual uptime SLA or a public status page. Availability targets are described in our documentation and are objectives, not contractual commitments. We aim to notify customers of material incidents.

This page is a template summary and not legal advice. Final terms should be reviewed by counsel before launch.

Last updated: June 2026

Security commitments

Security is enforced at every layer of Operanix. A summary of our controls:

Tenant-isolated data store with scoped queries — no cross-tenant access.
SSRF protection blocking internal IPs, metadata servers and private networks.
Compliance gate on every knowledge entity and document chunk before storage.
role-based access control.
Immutable, append-only audit trail.
Rate limiting across the entire API surface and bearer-token authentication.
PII detection and automatic redaction.

Operanix runs on enterprise security controls. We are not SOC 2 Type II certified today. For a detailed controls overview, DPA, or a security review under NDA, contact our team.

See the full Security & Compliance page for architecture detail.