Privacy Policy

Effective date: April 6, 2026

Introduction

Creative Ops OS ("Creative Ops," "we," "us," or "our") is a project management platform for creative professionals. This privacy policy covers the Creative Ops web application and the Creative Ops — Live Website Review browser extension (collectively, the "Service").

What We Collect

Account infoName and email address, collected during registration for authentication and identity.Reviewer nameProvided via URL parameters or manual entry in the browser extension, used to attribute comments to reviewers.Comments & annotationsText comments, pins, and drawn annotations created through the extension and web app for review functionality.Website URLsURLs of websites being reviewed, collected as part of review sessions.Project dataProject details, tasks, and assets uploaded through the web application.File uploadsDesign assets and attachments uploaded for review and project management.

How We Store Data

All data is stored in a PostgreSQL database hosted by Supabase with row-level security policies. Data is transmitted over HTTPS with TLS encryption. File uploads are stored in Supabase Storage (S3-compatible, encrypted at rest).

Cookies & Local Storage

The web application uses authentication cookies provided by Clerk for session management only. No tracking or advertising cookies are used. The browser extension uses chrome.storage.local to store session tokens locally on your device. The extension does not set any cookies.

Analytics & Tracking

We do not use any analytics services such as Google Analytics, Mixpanel, or similar tools. We do not engage in behavioral tracking, advertising, or retargeting. No data is shared with third parties for marketing purposes.

Data Sharing

Your data is never sold to third parties. We share data only with the services required to operate the platform:

Clerk — authentication and user management
Supabase — database and file storage
Vercel — application hosting
OpenAI — AI-powered features, only when you explicitly trigger them

Data Retention

Account data is retained while your account is active. Review session data, including comments and annotations, is retained as long as the associated project exists. Deleting a project removes all associated review data.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. You may also request a copy of your data in a portable format. To exercise any of these rights, contact us at the email address below. We will fulfill requests within 30 days.

Changes to This Policy

We may update this policy from time to time. Changes will be posted to this page with an updated effective date.

Contact

For privacy-related questions or requests, contact us at kevin@creativeops.dev.