Privacy Policy

Last updated: 12/02/2026

1. Introduction

OperatorOne ("we", "us", "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect personal information when you:

We comply with the UK GDPR and the Data Protection Act 2018.

2. Who We Are

OperatorOne is a UK-based SaaS provider offering embedded AI-powered support software for websites.

If you have any questions about this Privacy Policy, you can contact us at:

3. The Data We Collect

We collect different types of data depending on how you interact with our service.

3.1 Account Information

When you register:

  • Name
  • Email address
  • Password (encrypted)
  • Company name (if provided)

3.2 Support Conversation Data

When your customers use the embedded support widget, we process:

  • Messages sent through the widget
  • Metadata such as timestamps and site key
  • Optional fields (email, phone, order ID, etc., if requested by you)

You control what fields are requested through the system.

3.3 Technical & Usage Data

We may collect:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Log data (login/logout events, session activity)

This is used for security, analytics, and abuse prevention.

3.4 Billing Data

If you subscribe to a paid plan:

  • Billing email
  • Subscription plan
  • Payment method details (processed securely by Stripe)

We do not store full card numbers.

4. How We Use Your Data

We use data to:

  • Provide and operate the OperatorOne service
  • Authenticate users and secure accounts
  • Deliver AI-generated and human support responses
  • Process payments
  • Send service-related notifications
  • Improve performance and reliability
  • Prevent fraud and abuse

We do not sell personal data.

5. Legal Basis for Processing

Under UK GDPR, we rely on:

  • Contractual necessity (to provide the service you signed up for)
  • Legitimate interests (security, product improvement)
  • Legal obligations (tax, fraud prevention)
  • Consent (where required for marketing communications)

6. Data Ownership

You retain ownership of your support conversations and customer data.

OperatorOne acts as a data processor for customer support data collected through your widget.

You are responsible for ensuring you have appropriate legal basis to collect data from your end users.

7. Data Retention

We retain data:

  • For as long as your account is active
  • As required for legal or accounting purposes
  • Until deletion is requested (where permitted)

You may request account deletion at any time.

8. Data Security

We implement appropriate technical and organisational measures including:

  • Encrypted API communication (HTTPS)
  • Secure authentication
  • Access controls
  • Rate limiting and abuse detection
  • Encrypted password storage

While we take reasonable steps to protect data, no system is 100% secure.

9. Third-Party Processors

We may use trusted service providers including:

  • Stripe (payment processing)
  • Hosting providers
  • Email/SMTP providers

These providers process data only as necessary to deliver our services.

10. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to processing
  • Data portability

To exercise your rights, contact us at support@operatorone.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

12. Cookies

OperatorOne uses essential cookies for:

  • Authentication
  • Session management
  • Security

We may use limited analytics cookies to improve service performance.

You can control cookies via your browser settings. See our Cookie policy for details.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page with an updated revision date.