Privacy policy

Account details. When you sign in with Google we receive your name, your email address and whether Google has verified it. We use these to identify you, to decide which store you belong to, and to write to you about your account. We never receive your Google password.

Store data you upload or enter. Your distributor's invoice exports (products, pack sizes, cases, prices, invoice dates), your POS sales exports (items sold, modifiers, times, voids), your counts, your item cards and recipes, and the record of each order: the draft, your edits, the reason on each changed line, the lock, and the grade. This is the data the service exists to process.

Lead-form details. If you use the contact form we receive what you type: your name, email, number of stores, concept, distributor, POS system and what you would want fixed first. We use it to reply.

Usage logs. Our servers keep ordinary request logs (time, page or endpoint, status, an IP address and browser type) for security and debugging. They are not used to profile anyone.

• Card numbers. Payment is handled by Stripe on Stripe's pages; the card never reaches our servers. From Stripe we receive the subscription status, the plan, the number of stores and the email used at checkout. The card on file is shown only in Stripe's billing portal.
• Advertising or analytics trackers. This site runs no advertising pixels and no third-party analytics scripts.
• Precise location, contacts, photos or anything else from your phone. The count sheets run in the phone's browser and send only the numbers you type.

To produce your store's drafts, record and grades, and to run the service for your store: importing your files, mapping your products to item cards, drafting recipes for your manager to confirm, computing days of supply, and keeping the order record.

To support you: answering questions, diagnosing a problem you reported, and the direct line to the founders during onboarding.

To bill you, through Stripe, and to keep the records the law requires us to keep about payments.

To improve the service for your store. Aggregate statistics that cannot identify a store, an item price or a person may be used to improve the service for everyone; a single store's data is never used to advertise to anyone and is never sold.

We publish per-order grades only with the written agreement of the store's owner, and only as the record shows them: the date, a store letter rather than a name, who graded it, and the lines graded right.

This website sets no cookies of its own. It stores your paper-or-night theme choice in local storage if you use the toggle in the footer. If you sign in on this site, Google's sign-in (Firebase Authentication) keeps your session in your browser's storage so the site can open the app for you; signing out clears it. None of this is used for advertising or analytics.

The app keeps your sign-in session in your browser's storage so you stay signed in; signing out clears it. Stripe's checkout and billing pages set their own cookies on Stripe's domain under Stripe's policy.

We use a small number of companies to run the service. Each processes data only on our instructions and under its own security commitments.

• Google Cloud and Firebase (Google LLC): hosting, sign-in, the database and file storage for the app, in the United States.
• Stripe, Inc.: payments, card storage, invoices and the billing portal.
• Vercel, Inc.: hosting for this website and its contact form.
• An email provider: delivery of the messages we send you (account and billing notices, replies to the contact form).
• Google Cloud Vertex AI (Google LLC): a language model used to suggest matches between invoice products and ingredient cards, to draft recipes for your manager to confirm, and, when someone at your store asks for them, the order review and analytics answers. For those tasks it receives the store data the task needs, which can include item names, quantities, counts, purchases and prices; it does not receive card details or passwords.

We will update this list before adding a processor that would receive store data, and tell existing customers by email.

Access to your store's data is limited to the Operator Lens team, to run and support your account. We never share your data with other customers.

While your store is active we keep everything, because the record is the product: the grades only mean something next to the drafts and edits they grade.

When a store is cancelled, we keep its data for 90 days so that you can change your mind, ask for an export, or claim the refund; then we delete it, except for billing records we are required to keep. Copies in our routine backups expire on their own within a further 14 weeks.

You can ask us to delete your store's data sooner, or to delete a person's account details, at any time. We confirm in writing when it is done. An export of your data is available on request, in a common file format, within ten business days.

Lead-form messages from people who do not become customers are deleted after twelve months.

Data is encrypted in transit and at rest by the providers above. Sign-in is through Google, with verified email required. Access inside the app is scoped to the store a person belongs to; the only accounts that can see every store belong to the Operator Lens team and are used to run and support the service. The account owner controls who the people at the store are. Backups are taken daily and kept for a limited period. We keep the list of people and services with access short and review it.

If we learn of a breach that affects your data we will tell you without undue delay and say what happened, what was affected and what we are doing about it.

The service is for businesses and the people who run them. It is not directed at anyone under 18, and we do not knowingly collect their details.

Wherever you are, you can ask us what we hold about you or your store, ask for a copy, ask for corrections, and ask for deletion. Write to us through the contact page and we will answer within one business day and act within ten business days. If the law where you are gives you further rights, you have them too.

If we change this policy in a way that matters (what we collect, who processes it, how long we keep it) we will tell customers by email at least 30 days before the change takes effect. The date at the top is the date of the last change.

Operator Lens is operated by its two founders in Minnesota. Questions about this policy or a request about your data go to the contact page.

Billing questions, including the 60-day refund, are covered in the Refund policy.