Privacy Policy

Who we are

Ariflogs Services LLC, a United States company, runs Opskeet. Our team works from Bangladesh and may access data from there. Questions and requests go to hello@opskeet.com.

We’re the controller for our customers’ account data. For the people who visit, chat with or email a customer’s website, the customer is the controller. We process that data on the customer’s behalf, only to run Opskeet for them, under our DPA.

What we collect

Customers and their teams

• Account: name, email, photo if you add one, the projects you’re on and your role in each.
• Sign-in: we email a 6-digit code, stored hashed and valid for 5 minutes. Sessions keep your IP address and browser, and sign-in attempts keep your IP address to limit abuse.
• Projects: the website address, settings, logo and brand colors (read from the site), canned replies, tags, help center articles and knowledge.
• Knowledge: pages we crawl from the websites you add, documents you upload and answers you write. The crawler respects robots.txt.
• AI keys: if you add your own Anthropic key, we check it with Anthropic, encrypt it, and only ever show its last 4 characters.
• Notifications: if you turn on push notifications, the address your browser gives us for that device.

Visitors and contacts of our customers

• Chats and emails: messages, files, ratings and the emails people send to a project’s address, with the original email kept for the team.
• Contact details: name and email if they share them, details the customer’s site sends about signed-in users, and the fields, tags and notes the team adds.
• Visit details: rough location (country, region, city) from their IP address, time zone, language, browser, device, referrer and the last few pages they viewed.
• Analytics: pages viewed, time on page, where the visit came from (including campaign tags), and events the customer’s site sends. Page addresses are sent without their query, except campaign and ad click tags.
• Help center: votes, “Did this help?” notes as written, and searches that found nothing, with emails, links and numbers removed.

We don’t keep visitors’ IP addresses. We use them to find a rough location and to limit abuse, and keep only hashed values for the limits.

Why we use it

To provide Opskeet under our contract with customers, and to keep it secure and prevent abuse, which is our legitimate interest. We don’t show ads or train AI models on your data.

AI

The AI agent answers from a project’s own knowledge. It learns from the team’s past answers only as suggestions, and nothing reaches the AI until someone on the team approves it. A project’s data is never used for another project.

By default, AI runs on Cloudflare Workers AI. If a customer adds its own Anthropic key, that project’s AI requests go to Anthropic first, under the customer’s own Anthropic account and Anthropic’s terms.

Who processes it

We run Opskeet on Cloudflare: Workers for the app, D1 for the database, R2 for files, Workers AI, AI Search and AI Gateway for AI, Browser Run for crawling websites, and Email Routing and Email Sending for email. Cloudflare runs a global network, so data may be processed outside your country.

Push notifications reach your device through your browser’s push service, encrypted so that service can’t read them.

How long we keep it

• Sign-in codes: expire after 5 minutes.
• Sessions: expire 7 days after last use, or when you sign out.
• Account, project, chat and contact data: until it’s deleted, or the project is.
• Analytics visits, page views and events: 25 months.
• Site events on a contact’s timeline: 90 days.
• Help center notes and searches that found nothing: 90 days.
• Files uploaded to a chat but never sent: 1 day.
• Test chats the team starts: 1 day.
• Backups: up to 30 days after a change or deletion.
• Service logs, including AI requests, are kept by Cloudflare for a limited time to run and debug Opskeet.

Deleting data

Teams can delete a contact in Opskeet, which also deletes their visits. A project’s owner can delete the project, which deletes its chats, contacts, files, knowledge and analytics. To delete your account, email us from the address you sign in with.

If you chatted with or emailed a business that uses Opskeet, ask that business first; it controls your data. You can also write to us and we’ll pass the request on. Each email reply from a project has a link to stop further emails.

Cookies and browser storage

The Opskeet app uses a sign-in cookie to keep you signed in, and a cookie that remembers which sidebar groups you folded. This site sets no cookies.

On customers’ websites, the chat widget keeps a token in the visitor’s browser storage so their chats are there when they come back. If the customer keeps “Remember returning visitors” on, analytics also keeps an ID there. When it’s off, or the browser sends Global Privacy Control, analytics stores nothing in the browser and counts a visitor by a hash that changes daily. We don’t use advertising cookies.

Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, or object to or restrict how we use it. You can also complain to your data protection authority. Email hello@opskeet.com; we may need to confirm it’s you.

Children

Opskeet is for businesses and isn’t meant for anyone under 18.

Changes

When we change this policy we update the date above. For significant changes we’ll tell customers in the app or by email. Using Opskeet is also covered by our Terms of Service.

Ariflogs Services LLC, United States. hello@opskeet.com