Privacy Policy

CivOps LLC (“CivOps”, “we”, “us”) is a company in Northeast Ohio, USA. We run this website (civops.io) and three products: the CivOps Manufacturing Platform, the CivOps AI Academy courses, and the Contractor Operating Platform.

This policy covers civops.io, its checkout and the Academy. For the details businesses put into our platforms about their own customers and staff, see section 4.

Questions about privacy go to info@civops.io. We answer within 30 days, usually much sooner.

Only what you type in or what a service needs to work. We do not buy lists, and the site has no advertising or tracking cookies.

• Demo requests (the platform tour): your name, work email, company, role and, if you add it, your biggest challenge. We use it to reply and arrange a demo. It is emailed to our sales inbox; the site does not keep a copy.
• “Talk to us” requests (plans not sold on the site): your email, company, the plan, how many seats or plants, and your note. Used to reply with a quote. Emailed to sales, not stored by the site.
• Checkout: your work email, company, the plan and quantity, and a purchase order number if you give one. We use them to bill you, send receipts and invoices, and open your account. Your card or bank details go straight to Stripe's payment page; CivOps never sees or stores card or bank account numbers. We also record which version of our Terms and this policy you agreed to, and when.
• Academy accounts: your email and, if you add it, the name to print on your certificates. If you buy seats, the company name and the emails of the people you give seats to.
• Academy progress: sessions you mark finished, your answers and scores on unit checks and the exam, homework you hand in (the link and any notes), and the instructor's scores and feedback. Used to run the course and decide whether a certificate is earned.
• Certificates: the certificate number, your name as you set it, the course and the date. Anyone with the number can check it on civops.io; that is what makes a certificate verifiable. Nothing else about you is shown.
• Signing in: the Academy signs you in with an emailed link instead of a password. We keep only a scrambled (hashed) copy of each link and session, never the link itself.
• The course assistant, when it is switched on: we record that a question was asked, on which session, and how much it cost to answer. We do not keep the question or the answer.
• Technical records: like every website, our hosting provider keeps short-lived server logs (IP address, browser type, the page asked for, time) to keep the site running and secure.

Our legal reasons (for readers in the UK and European Union): we use your details to carry out a contract with you or take steps you ask for before one (checkout, the Academy, quotes); for our legitimate interest in replying to business enquiries and keeping the site secure; and to meet legal duties such as tax records.

One cookie, and only if you sign in to the Academy: civops_learn, which keeps you signed in on that device for up to 30 days. It cannot be read by scripts on the page and is deleted when you sign out.

No analytics, advertising or social-media cookies. Our fonts are served from civops.io itself, not from an outside font service.

When a manufacturer uses the CivOps Manufacturing Platform, or a trade business uses the Contractor Operating Platform, the data they put in (production records, jobs, their customers' names and addresses, and so on) is theirs. We process it only to provide the service, on their instructions, and never sell it or use it to advertise. Each business has its own separate database.

If you are a customer of one of those businesses, that business decides how your details are used. Ask them first; we will help them answer you.

The Manufacturing Platform can also run on the plant's own network or its own cloud account, where we may never see the data at all. Academy students build their own platform on their own accounts; we do not get access to it.

We use a small number of service providers. Each gets only what it needs to do its job, and each is bound by its own privacy and security terms.

• Stripe: payments, receipts, invoices and subscriptions. Stripe holds your card or bank details.
• Resend: sends our emails (sign-in links, receipts of requests, seat invitations, and the emails your requests become).
• Vercel: hosts civops.io and keeps its server logs.
• Neon (managed Postgres): the database that holds Academy accounts, orders, progress and certificates.
• Cloudflare: streams the films on our pages when they are switched on, and runs the Contractor Operating Platform.
• Anthropic: answers course-assistant questions, only when the assistant is switched on. The question and the session it is about are sent; your email is not.
• Telnyx: sends and receives text messages for businesses on the Contractor Operating Platform that turn texting on.

A paid Manufacturing order is passed to our own Manufacturing Platform to open the account. Some of these providers are in the United States or process data there.

We do not sell your personal information, or share it for advertising. We would disclose it only if the law requires it, to protect people or our rights, or as part of a sale or merger of CivOps, in which case this policy keeps applying to it.

• Everything travels over encrypted connections (HTTPS).
• No passwords to steal: Academy sign-in links work once, for 30 minutes, and only hashed copies are stored.
• Forms posted from other websites are refused, and every price is checked on our server.
• No card or bank numbers ever reach our systems.
• Access to the database is limited to the people who run the service.

No system is perfectly secure. If a breach affects your personal information, we will tell you and the authorities as the law requires.

• Demo and “talk to us” emails: up to 3 years after our last contact, then deleted, unless you become a customer.
• Academy account and progress: while your account is open and for 3 years after your last sign-in, so you can come back to the course.
• Certificates: for as long as CivOps runs the Academy, so employers can keep checking them. You can ask us to withdraw yours.
• Orders, invoices and payment records: 7 years, for tax and accounting law.
• Sign-in links expire after 30 minutes; sessions after 30 days.
• Server logs: kept for the short period our host sets, typically days to weeks.

Wherever you live, you can ask us to:

• see the personal information we hold about you, and get a copy;
• correct it (you can change the name on your certificates yourself on your Academy home page);
• delete it, unless we must keep it by law (for example, tax records), or it is needed to finish something you asked for.

Write to info@civops.io from the email address we know you by. We may ask you to confirm it is you. We answer within 30 days, and we never charge for it or treat you differently for asking.

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with privacy laws have the rights above, plus the right to know what we collect and why (this page), and to opt out of the sale of personal information, targeted advertising and profiling. We do none of those, so there is nothing to opt out of.

You can use an authorized agent to make a request. If we turn a request down, you can appeal by replying to our answer; we will reply within the time your state's law sets.

CivOps LLC is the controller of the personal information described here, except data businesses put into our platforms, where we act for them (as their processor).

On top of the rights above, you can object to our use of your details based on legitimate interest, ask us to limit how we use them, ask for them in a portable format, and withdraw consent where we relied on it. You can also complain to your data protection authority (in the UK, the Information Commissioner's Office), though we would like the chance to fix it first.

Your details are processed in the United States. When they move there from the UK or EU, we rely on the safeguards our providers offer, such as the Standard Contractual Clauses or the EU–US Data Privacy Framework.

Our products are for businesses and working adults. They are not meant for anyone under 16, and we do not knowingly collect personal information from children. If you think a child has given us their details, write to info@civops.io and we will delete them.

If we change this policy, we will update the date at the top. If a change matters, such as a new kind of data or a new use of it, we will also say so on the site and email customers before it takes effect.

Privacy and legal questions: info@civops.io.

Sales, quotes and billing: sales@civops.io.

CivOps LLC, Northeast Ohio, USA. See also our Terms of Service.