AYS Operations

Privacy Policy

Effective date: July 10, 2026

AYS Operations ("AYS Operations", "we", "us", or "our") provides business-management software for consultants and small businesses at aysops.com. This policy explains what information we collect, how we use it, and the choices you have. By using AYS Operations you agree to this policy.

Information we collect

  • Account information — your name, email address, company name, and password (stored only as a secure hash), provided when you create an account.
  • Sign-in identities — if you sign in or connect Google or Microsoft, we receive your basic profile from that provider: name, email address, and profile picture. We do not receive your Google or Microsoft password.
  • Business data you enter — information you and your team add while using the service, such as customer records, estimates, work orders, invoices, expenses, mileage logs, notes, and uploaded files. This data belongs to you.
  • Payment information — subscription payments are processed by Stripe. We store your subscription status and billing history; we never see or store full card numbers.
  • Technical information — session cookies, security events (such as blocked requests and login attempts), and standard server logs used to keep the service secure and reliable.

Google user data

When you sign in with Google, we request only your basic profile information (name, email address, and profile picture) to create and secure your account. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service data.

AYS Operations's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

  • To provide, maintain, and improve the service.
  • To authenticate you and secure your account (including two-factor authentication).
  • To process subscription billing and send transactional emails (such as invoices you choose to send, receipts, and security notices).
  • To respond to support requests.
  • To detect, investigate, and prevent abuse, fraud, and security incidents.

We do not sell your personal information, and we do not use your data for third-party advertising.

Cookies

We use only cookies necessary to operate the service: your login session, your two-factor verification state, and your selected company. We do not use third-party advertising or cross-site tracking cookies.

Where your data lives and who processes it

We rely on a small number of service providers to run AYS Operations:

  • Supabase — database, authentication, and file storage.
  • Vercel — application hosting.
  • Stripe — subscription payment processing.
  • Google / Microsoft — optional sign-in providers.
  • Anthropic — optional AI features (for example, reading an odometer value from a photo you upload). Data is sent only when you actively use such a feature.

If you connect your own email account (SMTP) to send invoices and documents, those emails are sent through your configured email provider; your email credentials are stored encrypted.

Your customers' data

The customer records, invoices, and other business data you enter may contain personal information about your own customers. You control that data: you decide what to enter, and you are responsible for having the right to store it. We process it only to provide the service to you and never use it for our own purposes.

Data retention and deletion

Your data is retained while your account is active. If you delete records in the app they are removed or marked deleted (some records, such as deleted work orders, are retained in a recoverable state so our support team can restore them at your request). If you close your account, we delete your data within a reasonable period, except where we must keep records to meet legal, tax, or accounting obligations. Backups expire on a rolling schedule.

Security

All traffic is encrypted in transit (HTTPS). Data access is enforced per account at the database level, uploaded files are scanned against unsafe file types, two-factor authentication is required on every account, and security-relevant events are logged.

Your rights

You may access, correct, export, or delete your personal information. Most of this is available directly in the app; for anything else, contact us at [email protected] and we will respond within 30 days. Depending on where you live, you may have additional rights under local privacy law (such as PIPEDA in Canada or the GDPR in the EU).

Children

AYS Operations is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in the app or by email before they take effect, and the effective date above will be updated.

Contact

Questions about this policy or your data: [email protected]