How we keep your business safe

Your accounts stay yours

Every account stays in your name: your Google listing, your ad accounts, your booking app, your number and your customer lists.

Wherever a tool lets you add a user, you add us as one, and you can remove us any time. Your ads and your Google listing work this way, with no password shared.

For tools that don't allow that, you share logins through a 1Password vault in your name, with only the logins we need. Never over text or email.

When you leave, we remove every connection the same day: app connections, our user access and the vault.

What we never touch

We never log in to your bank. Your customers pay through your own tools, and money moves only where you already take it.

We don't sell your data, and we turn off AI training on it in every tool that offers the setting.

What always waits for your yes

Spending over your cap, discounts, refunds, price changes and any change to who has access. Each one comes to you as one text: reply YES or NO.

You set every job to Auto, Ask me or Off, and change it any time, by tap or by text. One switch pauses everything.

How the work is checked

Replies only state prices, hours and policies you've confirmed. If the system isn't sure, it asks instead of guessing.

Your client success lead checks replies before they go out at first, and anything new is always checked by a person.

Every action is logged with what was done, why, and the proof, and you can change it back. Numbers in your reports are computed and checked by code, not written by an AI model.

Customers know it's an assistant: a new conversation says so up front, and anyone can ask for a person.

If something does slip, we stop it, tell you the same day, fix it, and add a rule so it doesn't happen again.

Your data, kept apart

Every client gets their own separate workspace, and the database itself keeps each business's records apart (row-level security), so your customers never mix with anyone else's.

Connection keys and tokens are stored encrypted, and they're never shown to the AI models or written to logs.

In the OPER8 app you sign in with a one-time code by email. Approving money, changing a connection or turning on Auto asks for a fresh code.

This website

Every page is served over HTTPS with strict security headers. Forms only accept posts from our own pages, every form is rate limited, and the free website check refuses private and internal addresses.

Analytics and ad pixels only run if you haven't opted out, and never when your browser sends Global Privacy Control. Details are on the privacy page.

Report a problem

Found a security problem on our site or in our app? Please tell us. Bring it to a call, or reply to any email from us.

More on how we use information: privacy and texting terms. Our promises: in writing.