Privacy Policy

1. Data we collect

We collect three kinds of data:

• Operator account information — the details needed to create and secure an operator’s account and its users, such as name, username, role, and a securely hashed password. We never store passwords in plain text.
• Billing data the operator enters — the operator’s subscribers and their details, tariff and tier configuration, bills, and payment records, all entered by the operator to run their business.
• Meter readings and photos — meter values and the accompanying photos an operator’s field staff capture as proof of a reading.

We do not receive or store payment card numbers or bank credentials. Payments are made directly between the subscriber and the operator through the operator’s own payment channel and do not pass through OnlyOps.

2. How we use data

We use the data solely to provide the Service — to authenticate users, calculate and record bills, store meter readings and their photos, track collections, and show an operator the state of their own business. We use aggregate, non-identifying information to keep the Service reliable and to improve it. We do not use operator or subscriber data for advertising.

3. How data is protected and separated

Each operator’s data is scoped to that operator and isolated from every other operator’s data at the data-access layer and in the database. Data is transmitted over encrypted connections and stored with a reputable cloud infrastructure provider. Meter photos are held in private object storage and are only served through short-lived, access-controlled links. Access within OnlyOps is limited to what is needed to operate and support the Service.

4. Sharing

We do not sell your data, and we do not share it with third parties for their own marketing. We use a small number of infrastructure providers — for example cloud database and object storage, and, where an operator chooses to send bills, messaging and payment providers — that process data only to deliver the Service on our behalf. We may disclose data where required by law or to protect the rights, safety, and security of operators and the platform.

5. Retention

We keep operator data for as long as the account is active and as needed to provide the Service and meet legal and record-keeping obligations. Billing and payment records may be retained longer where required for financial or legal reasons. On request, and subject to those obligations, we will help an operator export or delete their data.

6. The operator’s role

Much of the data in OnlyOps concerns an operator’s own subscribers and is entered by the operator. The operator is responsible for handling that information lawfully and for having the right to enter it. OnlyOps processes that data on the operator’s behalf to provide the Service.

7. Your requests

To access, correct, export, or delete data, or to ask a question about this policy, contact us at founder@onlyops.io. We will respond within a reasonable time.

8. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the date above and, where appropriate, notify operators.

9. Contact

OnlyOps is operated from Beirut, Lebanon. For any privacy request, email founder@onlyops.io.