The short version. When you ask Operly for something, our servers make the request to an AI company under Operly’s own account, not yours. We do not attach your account ID or email address as a separate field. We do not sell your data, and we do not use your content to train AI models. The text needed to answer you does go to AI companies, and it can include your name and what the AI read from your email. The sections below say exactly what.
Looking for how Operly is built, including the workspace computer, credentials and approvals? See Security.
How your data moves
The Operly app (web, iPhone and Android) sends each request to our servers. Our servers check your sign-in and workspace, build the instructions for the AI, and call the AI company. Your connected accounts are reached from our servers, never from the AI company.
AI requests use Operly’s own key. You do not sign in to an AI company through us.
We add no user ID, email or account field to the request.
The text itself can identify you. See the next section.
What is sent to AI companies
Depending on the feature, a request goes to AI model companies for text, search, speech, or image and video generation. Some features go through a routing service, and others go directly to the company. This is what a typical request contains.
| Item | Sent? | Notes |
|---|---|---|
| The text you type or say | Yes | It is what the AI answers. |
| Your name and location | Yes, if in your profile | Included in the AI’s instructions so replies address you. |
| Your connected email addresses | Yes | Listed in the instructions so the AI knows which accounts it can use. |
| Memories, standing instructions, document excerpts, tasks | Yes, as text | Included as text in the AI’s instructions. |
| What the AI reads to do your request: email, calendar, documents | Yes, for that request | Email bodies often contain names and addresses. |
| Screenshots, page text, files and command output from your workspace computer | When teammates work there | Sent to AI companies, through Operly, as part of completing the task. |
| Your account ID or email address as a separate field | No | Requests carry no user-identifier field. |
| A one-way scrambled workspace code | On some chat paths | Lets the AI company reuse cached instructions and answer faster. It cannot be turned back into your name, email or account ID. |
| Voice audio | During the call | Goes to the speech provider while you talk. We do not save recordings. The text of the call is saved in the conversation. |
We do not sell your data, and we do not use your content to train AI models. Each AI company handles requests under its own terms, which we do not control, so we make no promise about how long any of them keeps a request.
We treat text from emails and web pages as untrusted data, and the actions that matter most need your approval. That reduces the risk from malicious content in an email. It does not remove it.
What we store
| Data | What is kept |
|---|---|
| Conversations | Your messages, the AI’s replies, and what tools were called with and returned, saved with the conversation. |
| Reply drafts | Sender, subject, a short snippet and up to 5,000 characters of the email body. |
| Scheduled sends | Recipients, subject and body, until they go out. |
| Your mailbox | Normal mail search runs live against your mail provider. We do not keep a copy of your mailbox. |
| Memory | Facts and instructions you can list, edit and delete in Settings. |
| Files you upload and task attachments | Private storage. |
| Workspace computer | Your files and signed-in website sessions on the computer’s disk. A workspace can have more than one computer. Snapshots of your team’s work files and notes are kept in private storage so a teammate can resume after a restart. |
| Computer activity | Each action on the computer is recorded for the live activity feed and the conversation record. |
| Generated images, videos and slideshows | Stored in public buckets, so anyone with the exact link can open them. |
Our database and file storage are in the United States, on a managed hosting provider that states all customer data is encrypted at rest with AES-256 and in transit with TLS. AI requests are processed by our AI providers on their own infrastructure, so we do not say your data stays in one country.
What you control
- Consent. AI features that process your data are gated behind consent you can grant and revoke in Settings. Revoking turns the AI features off and keeps your data.
- Memory. You can review, edit and delete what Operly remembers in Settings, and clear it all at once.
- Connected accounts. Connecting Google asks permission to read, draft, send and organise Gmail, to view and edit calendar events, and to open files you pick or that Operly creates in Drive. Disconnecting removes our stored sign-in tokens for that account. To also remove access on Google’s side, use your Google account permissions page.
- Your workspace computer. You can press Stop on a teammate, take over the screen, delete files, and sign out of sites on the computer.
Export and deletion
- Export. You can export your workspace data as an archive from Settings: documents, chats, tasks, reminders, projects, memory, teammates, slideshows, and generated images and videos. The download link works for 15 minutes. The export does not include the files on your workspace computer or computer activity records.
- Delete your account. This removes your workspace data and every stored file under the workspace, including saved snapshots of your team’s work, and the cloud computer. Your sign-in is removed once cleanup is verified. Deletion stops future subscription charges. Identifiers needed for payment, tax, audit and commission records may remain.
Who can see your data
- Only a super admin can sign in as a customer to help with a support request. Every support sign-in is logged, and the session ends after 4 hours.
- Admin actions are recorded with who, when and from where.
Outside services
These are the kinds of outside services that receive customer data. Our Privacy Policy is the authoritative list.
| Kind | What it handles |
|---|---|
| AI model companies | Text, search, speech, and image and video generation. |
| Email, calendar and messaging | Your own Gmail, Calendar and connected apps through their own APIs, plus platform email, Telegram and Slack where you use them. |
| Payments | Billing and payouts. |
| Push notifications | Device identifiers and notification text. |
| Error monitoring | Error context. Browser personal data collection is off and session replays mask all text. |
| Hosting | Web edge host, cloud servers, managed database and storage, managed cache, workspace computer provider, and a secrets manager. |
| Document rendering | Documents and agreements rendered to PDF. |
What we do not promise
- We cannot control how an AI company keeps or logs a request once it receives it.
- The text sent to an AI company can include your name and what the AI read from your email, calendar or documents.
- Anyone with the link can open generated images, videos and slideshows.
- Sites you sign in to on the workspace computer stay signed in on its disk until you sign out there.
Questions
For privacy questions or data processing agreements, email support@getoperly.ai and we will get you what you need.