YOUR INFORMATION

Operoso privacy notice.

Effective November 5, 2026

Operoso and operoso.io are operated by Seravio. This notice covers the local desktop app, website and support. Contact support@operoso.io for privacy requests. See also Seravio's studio notice.

Invoices and client records stay on your computer

Operoso stores the business details, client contacts, invoices, payment records and notes you enter in a local workspace database. It generates invoice PDFs and backups locally. There is no Seravio account requirement, live multi-device sync, advertising, app usage telemetry or direct cloud-provider upload service.

Databases and exported files are not encrypted by Operoso. An invoice PDF or backup can contain business, client, payment and other personal information. Choose private storage and share only with appropriate recipients. Saving a copy into a folder synced by OneDrive, Dropbox or another provider lets that provider process it under your own account and its terms; Operoso does not directly connect to those accounts. Your operating system, backups or device administrator may also access local files.

Optional cloud-folder backups in the 1.4 beta

If you choose a backup folder, the desktop app saves verified SQLite copies of all workspaces locally while open and when closing. Your existing sync client may then upload them to your chosen provider. Operoso does not sign in to the provider, store cloud credentials or confirm remote upload. The selected folder path, installation-specific backup identifier, last-saved metadata and snapshot fingerprint are stored in local app settings and are not included in portable backups or sent to Seravio.

The app keeps the latest 30 automatic copies per installation. Manual copies and other installations’ backups remain until you remove them. Turning off stops new copies without deleting existing files. Your provider’s trash, retention and version history can retain deleted copies. Backups are not encrypted by Operoso; use a private folder and check your provider’s sync status. No backups run while the app is closed. This feature does not synchronize live invoice edits between computers.

Deleting a record does not erase existing PDFs, exported backups, recovery copies or platform-managed snapshots. Uninstall may leave data or platform backups behind and is not secure erasure. Export or remove local records and copies yourself; we cannot remotely retrieve or erase information the app never sends us. Use appropriate permissions and lawful grounds when entering another person's contact or invoice information.

Website, contact and support information

Cloudflare hosts the website and processes IP address, request URL/time, browser/user-agent and other connection/security information. When enabled, Cloudflare Turnstile processes browser/challenge signals and your IP address to prevent spam; the contact rate limiter uses your IP as a temporary security key.

The contact form asks for your name, email, topic and message. It sends these through Cloudflare email delivery to support@operoso.io; Seravio handles them in its support mailbox, and replies may come from hello@seravio.io. There is no separate website submissions database. Email infrastructure and Google Gmail, our configured inbox, process correspondence and delivery information. Direct email includes what you choose to attach. Please do not send client databases, private invoices, medical information, payment details, passwords or license credentials.

Cookies, analytics and browser signals

We do not use advertising pixels, session replay or cross-site profiling. Cloudflare injects a Web Analytics/RUM beacon for website usage and performance measurement. If loaded, it can send page/referrer URLs, a page-load identifier and browser timing metrics to Cloudflare. Cloudflare describes this as cookieless measurement without browser-storage tracking or cross-site identification; see its measurement documentation. Browser security and privacy settings can block it. Site fonts, videos and guide search are served or run locally within this site; guide search terms are not sent to a search service. Cloudflare can use necessary security/challenge storage or cookies. Blocking the security check can prevent the form from working; you can email support instead. We do not change behavior specifically for Do Not Track or Global Privacy Control signals because we do not sell information, share it for cross-context behavioral advertising or conduct cross-site profiling.

Why we process information

Where EU or UK data protection law applies, our grounds are taking steps at your request or performing a contract for product delivery and related support; legitimate interests in answering enquiries, securing services, measuring website performance, preventing abuse and maintaining necessary business records; and legal obligations for applicable tax, accounting or legal requirements. Where a feature requires consent, we request it separately. A contact request does not subscribe you to marketing. Providing form details is optional, but we cannot answer without contact information or deliver an emailed license without a purchase email.

Service providers and international processing

Cloudflare provides website hosting, security, form protection where enabled, and email delivery/routing. Google Gmail is the configured support inbox and processes messages, attachments and email metadata you send; see Google's privacy notice. Providers may process information in the United States and other countries where they operate. Their roles depend on the service: some act on our instructions, while others, such as app stores and payment providers, also process information for their own purposes under their notices.

Where international-transfer rules apply, a legally permitted transfer mechanism is required, such as an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the providers and safeguards relevant to your request. We do not claim that a provider's privacy policy alone establishes compliance.

The Cloudflare privacy notice explains its services. Downloading through the Snap Store involves Canonical's privacy practices, separate from local Operoso records. We do not receive your Store account information merely because you download the app.

Retention

Local app records remain until you remove them and their copies. Support correspondence is retained while needed for the request and follow-up, then reviewed for deletion. An ongoing dispute, security incident or applicable recordkeeping duty can require longer retention. We consider the purpose, sensitivity and whether the information is still necessary. Providers manage operational logs and backups under their retention/restoration cycles and applicable deletion obligations.

Your privacy choices and rights

Contact support@operoso.io with a privacy request. Depending on the law that applies, you may request access, a copy, correction, deletion or portability of your information; restriction of processing; or withdrawal of consent where we rely on it. You may object to processing based on legitimate interests. Withdrawing consent does not undo earlier lawful processing. We do not use solely automated decisions that produce legal or similarly significant effects.

We verify requests proportionately, normally using the email address already associated with the enquiry or purchase. Do not send identity documents or sensitive records unless we explain why they are necessary and provide an appropriate method. We respond within applicable legal deadlines and explain any lawful exception. You may ask us to review a refused request and complain to your local privacy regulator, including the UK Information Commissioner or an EU/EEA supervisory authority where applicable. We do not discriminate against people for exercising privacy rights.

Security, disclosures and external services

We use HTTPS for the public service and limit access to information needed for support and operations. No service, email account or device can be guaranteed completely secure. We may disclose information when required by law, to protect rights or address fraud/security incidents, or in a business transfer subject to applicable privacy obligations. We do not sell personal information or share it for cross-context behavioral advertising. Links to app stores and other websites take you to services governed by their own notices.

Children and policy changes

Our public website contact and purchasing services are intended for adults, not directed to children under 13. Do not submit children's information through public forms. If you believe a child has provided information, contact us so we can investigate and take appropriate action. We date changes here and provide additional notice or seek consent where required for a material change. A policy update does not authorize an unrelated new use of information already collected.