Scope
This policy covers the operatornest.com website, including access requests, free tools, shared results, group polls, embeds, the public API and the MCP server. It doesn't cover the OperatorNest product itself. The product has separate terms and a privacy notice provided at signup.
Get access form and email
When you submit the Get access form, we collect:
- your email address
- your name, role and use case, if you choose to provide them
- the page path, referrer and campaign parameters associated with your request
- your approximate country, derived from request metadata, and the submission time
We use this information to respond about access and understand where requests come from. Cloudflare stores the submission and delivers a confirmation to you and a notification to our team. Your confirmation can include your name and use case. The team notification includes the submitted fields. Replies to our email are handled in our team mailbox. Where a legal basis is required, we rely on your consent.
We keep access submissions until you ask us to delete them or until 24 months pass without activity, whichever comes first. This is our retention policy; the form does not automatically delete old records. Email delivery records and mailbox copies have no automatic deletion period set by the website. Email privacy@operatornest.com to request deletion of our copies or withdraw consent. We cannot delete copies in your mailbox.
Tool results attached to access requests
If you choose to attach a tool result, we put a short summary in the editable use case field. We send it only when you submit the form. It then follows the same purpose, consent basis, processors and retention as your access request. Edit or remove it before submitting, or emailprivacy@operatornest.com to request deletion afterward.
Cookieless analytics
We use Cloudflare Web Analytics to understand visits, referring pages, browser and device types, and page load performance. It does not set tracking cookies or build cross-site profiles. Our legal basis is our legitimate interest in improving the website.
Cloudflare keeps unsampled beacon data for 7 days, then uses sampled or aggregated data. Analytics reports are available for the previous 6 months. We do not have an individual visitor profile to delete from these reports. Email privacy@operatornest.com about analytics data rights, and we will assess what data can be located and removed.
Bot protection
Cloudflare Turnstile protects the access form, AI tools and poll creation. It processes technical browser and device signals, including your IP address, to distinguish people from bots. We send the verification token and your IP address to Cloudflare for the check. We do not store the token in our form, tool or poll records. Our legal basis is our legitimate interest in preventing abuse.
We handle the token during the request. Cloudflare's Turnstile privacy addendum governs its own handling of signals, including its separate use to improve bot detection. That addendum does not specify a fixed retention period. Email privacy@operatornest.com to request help exercising rights over signals processed for our site.
AI tools
The AI task brief generator, AI follow-up email writer, meeting agenda generator, email tone checker and delegation audit send the details you enter to an AI model provider we contract with as a processor. This includes task descriptions, draft emails, recipient or attendee details, meeting notes, and information about your week, depending on the tool. The provider uses them to produce the requested result. The AI search readiness checker sends the structural signals described below for its recommendations.
Where a legal basis is required, we rely on your consent when you submit the tool request. We process inputs and outputs during the request and do not save them in our website database by default. Creating a shared link or submitting an attached result changes this, as described in those sections. Results remain in your open page until you leave or replace them.
Our website does not set a fixed retention period for the provider's own records. Email privacy@operatornest.com to request deletion of personal data held by our processors. Avoid entering sensitive information or other people's information without permission.
AI search readiness checker
We fetch the public URL you enter, follow permitted redirects and check related robots, site-description and sitemap files. Cloudflare resolves the hostname. The destination sites receive our server requests, including URL query parameters. We do not forward your IP address to them. Only issue codes and structural signals go to the AI processor, such as missing headings or blocked crawlers. We do not send it the fetched page text or the URL.
We use these requests to prepare your check, on the same consent basis as the AI tools. We do not save the URL, fetched files or result by default. A shared result includes the checked URL and page findings. Destination sites and the DNS service have their own retention practices. Do not submit URLs containing secrets. Email privacy@operatornest.com about deletion requests; we cannot remove records controlled by the destination site.
Daily quotas and temporary rate limits
To prevent abuse, Cloudflare stores a daily count, tool category and a salted hash of your IP address for AI tools and readiness checks. The hash lets us recognize the same network without putting the raw IP address in that quota table. It can link usage across days. Quotas reset at midnight UTC, and a daily job deletes quota records older than 30 days.
Cloudflare also handles IP addresses or IP-derived keys for temporary rate limits on access requests, tool calls, result sharing, poll creation and MCP requests. Their counting windows are 60 seconds. This is a limit window, not a promise that every provider record is erased after 60 seconds. Our legal basis is our legitimate interest in keeping the site available and preventing abuse. Email privacy@operatornest.com to request deletion of identifiable quota data.
Aggregate tool counts
We retain historical daily totals by tool to understand usage. These totals contain no visitor identifier, input or output. Cloudflare stores them without a fixed expiry. Where a legal basis applies, it is our legitimate interest in understanding site use. There is no individual record to delete from these totals; contactprivacy@operatornest.com with questions about them.
Shareable result links
When you create a shared link for an AI tool or readiness check, Cloudflare stores the result for30 days from creation. It does not store the original input separately, but a result can repeat names, email text or other details you entered. Readiness results include the checked URL and page metadata. Our legal basis is your consent to create the link.
Anyone with the link can open it without signing in until it expires. To request earlier removal, email privacy@operatornest.com with the link. Removing or expiring it cannot recall copies someone has already saved.
Some calculators instead put the inputs in the part of a link after the # character. That part stays in the browser and is not sent to our server. Anyone receiving the link can read those inputs. These links have no server record or automatic expiry. Delete your saved link or browser history to remove your local copy; recipients control their copies.
Group availability polls
Cloudflare stores the poll title, date range, time window, time zone and settings, plus participant names and selected availability. It also stores random participant IDs and hashes of the keys used to manage the poll or edit an answer. We use this data to show the poll and update availability live. Our legal basis is your consent when you create or join a poll.
Anyone with the poll link can see participant names and availability. Poll data is scheduled for deletion 30 full days after the final poll day ends, using the poll's time zone. The organizer can delete the whole poll sooner. Closing it stops changes but does not delete it. To request removal of your participant record, email privacy@operatornest.com with the poll link.
To limit poll creation, Cloudflare stores a daily count and an IP hash that changes each UTC day. We allow five polls per network per day. A daily job deletes these records after 30 days. Our legal basis for these limits is our legitimate interest in preventing abuse. Contact privacy@operatornest.com to request deletion of identifiable limit records.
Browser storage
We keep referral and campaign details in your browser's session storage until the tab session ends. Poll organizer and participant edit keys stay in local storage until you clear them or delete the poll from that browser. Expiring a poll does not clear these keys. There is no timed expiry for them. They let you manage the poll on the device that created or joined it.
Our legal basis is our legitimate interest in attributing access requests and keeping poll controls available. Clear site data in your browser to remove these values. Clearing poll keys loses your editing access and does not delete the poll. Unsaved tool inputs and results stay in the open page; downloaded files and copied results remain wherever you save them. If your browser supports tool access for connected assistants, those assistants can receive calculator results through your browser. Their services handle any copies under their own policies.
Embedded tools
Our embedded calculators run in a frame on another site. They calculate in your browser and do not send your tool inputs to the host page. The frame sends its height to the host so it can resize. Loading an embed still sends ordinary request metadata to Cloudflare, and analytics may apply. Following its attribution link supplies referral parameters.
The purposes, legal bases, retention and deletion routes for analytics and operational logs above and below also apply to embeds. The host site controls its own data practices. Email privacy@operatornest.com about data we process in an embed.
Public API and MCP server
Our public calculator API and MCP server process the inputs your client sends to calculate results. These calculations do not call an AI model or save your inputs or outputs in our database. Cloudflare processes the request, and MCP requests use the temporary rate limits described above. Our legal basis is our legitimate interest in providing the calculation you request.
We handle calculation data only during the request. Operational logs have the retention below. Your client may save inputs, outputs and result links under its own policy. Email privacy@operatornest.com about our records; contact your client service about copies it retains.
Operational logs and page formats
Cloudflare processes IP addresses and browser metadata to serve and protect requests. Our operational logs record request URLs, methods, response status, execution details and errors. URLs can include query parameters and shared-link or poll IDs. Email delivery errors may include delivery details. We do not deliberately log form submissions or AI input and output bodies.
Cloudflare's operational log retention is up to 7 days. Our legal basis is our legitimate interest in diagnosing failures and protecting the website. Email privacy@operatornest.com with the URL and approximate request time about deletion or other rights. Returning a page as Markdown adds no separate visitor record or tracking; the same request handling still applies.
Why we use this information
We use information for the purposes described in each section. We don't use it to build advertising profiles, and we don't sell it.
Legal basis
The legal bases above apply where required, including under the GDPR. You can withdraw consent by emailing privacy@operatornest.com. Withdrawal does not affect processing that already took place. You can also object to processing based on legitimate interests.
Retention
The periods above describe each activity. Where no fixed period is set, you can request deletion using the contact below. We may need to retain specific records when the law requires it. We will explain any limit that applies to your request.
Sharing
Cloudflare processes website hosting, storage, security, analytics and email delivery data. An AI model provider we contract with as a processor handles AI tool requests. Our email service providers handle team correspondence. We share data with providers for the purposes above, under terms that limit how they may use it. Shared results and polls are also visible to the people who have their links.
Your rights
Email privacy@operatornest.com to ask for access, correction or deletion, withdraw consent, or object to our use of your data. Where the law provides these rights, you can also request restriction or a portable copy, and complain to your data protection authority. Include the relevant email address, shared link or poll link so we can locate the record. We may ask for enough information to confirm it is yours.
International transfers
We and our processors may handle information in countries other than your own. Where transfer safeguards are required, we use the applicable legal safeguards, such as contractual protections. Email privacy@operatornest.com for information about the safeguards that apply to your data.
Security
The site uses HTTPS, bot checks, request limits and input validation. Poll management and editing require secret keys whose hashes are stored on the server. Shared results use randomly generated link IDs. Anyone who receives a shared link can read it, so keep private details out of results you share. No security measure removes every risk.
Children
This website is not directed at anyone under 16. We don't knowingly collect their information. If you believe a child has provided personal data, email privacy@operatornest.comso we can investigate and remove it.
Changes
We may update this policy as the website changes. We will update the last updated date above when we do.
Contact
Questions about this policy: privacy@operatornest.com.