Privacy policy
In short. OpsDesk is a work-tracking tool. We collect your name, email address and a Google account ID so we can sign you in, plus the content you add to OpsDesk. We don’t sell your data, show ads or track you across other sites. We read no other Google data.
Who we are
OpsDesk is run by LinuxOps (“we”, “us”). If you have a question about this policy or your data, write to nikkle@linuxops.in.
Where an organisation gives you access to OpsDesk, that organisation decides what work is tracked in it, and we handle the data to run the service.
What we collect
- Account details. When you sign in with Google we receive your name, your email address and a unique Google account ID. We use the email address to identify you inside OpsDesk and the account ID to recognise the same sign-in next time. We don’t store your profile photo.
- What you add. Requests, proposals, changes, comments, approvals and attachments, together with the history of who changed what and when. This may include personal data you or your colleagues choose to write down.
- People named in an item. If someone adds your email address to an item, for example as a requester or approver, we store that address and send you the related emails, including Approve and Decline links.
- Technical data. Our hosting providers keep standard server logs, such as IP address, browser type, the page requested and the time. We use them to keep the service secure and working.
How we use it
- To sign you in and keep your session secure.
- To run OpsDesk: show your work, assign it, send notifications and approval emails, and produce reports.
- To keep the service safe, investigate problems and prevent misuse.
- To answer you when you contact us.
We don’t use your information for advertising, and we don’t sell it.
Google user data
OpsDesk asks Google for three basic permissions only: openid, email and profile. That gives us your name, your email address and your Google account ID, and nothing from Gmail, Drive, Calendar, Contacts or any other Google service.
We use this data only to sign you in and to show who you are inside OpsDesk. We don’t transfer it to anyone other than the service providers listed below, who help us run OpsDesk. We don’t use it for advertising, we don’t sell it, we don’t use it to train AI or machine-learning models, and we don’t read it except where needed for security, to follow the law, or when you ask us to look into a problem.
You can remove OpsDesk’s access to your Google account at any time at myaccount.google.com/permissions.
Cookies and local storage
OpsDesk uses only what it needs to work. It doesn’t use advertising or analytics cookies, and this website doesn’t either.
| Name or purpose | What it does | How long |
|---|---|---|
| Sign-in session cookie | Keeps you signed in to OpsDesk. | Until your sign-in expires or you sign out. |
| Sign-in step cookie | Protects the sign-in process against forgery while you are redirected to Google. | A few minutes. |
| Saved views (browser storage) | Remembers the list view you last used on this device. | Until you clear your browser data. |
Who we share data with
We use the service providers below to run OpsDesk. They handle data only to provide their service to us. Some of them process data outside India.
| Provider | What they do | Data involved |
|---|---|---|
| Signs you in. | Name, email address, Google account ID. | |
| Render | Hosts the OpsDesk application. | Everything OpsDesk handles while it runs, plus server logs. |
| Cloudflare | Network protection and DNS, hosts this website, and stores file attachments and database backups. | Uploaded attachments, backups of the OpsDesk database, connection data such as IP address. |
| Email delivery service | Sends notification and approval emails. | Recipient name and email address, and the email content (item titles and links). |
| Google Chat | Posts team notifications to a chat space, where an organisation has set that up. | Item titles and status updates. |
We may also disclose information if the law requires it, or to protect the safety and security of our users or the service. If OpsDesk is ever transferred to another operator, we will tell you first and this policy will continue to apply to your data.
How long we keep it
- Work items, comments and history are kept for as long as the organisation uses OpsDesk, because the history is the record.
- Database backups are kept for 7 days and then deleted automatically.
- Server logs are kept by our hosting providers for the periods they set.
Your choices
You can ask us to show you the personal data we hold about you, correct it, or delete it. Where an item is part of a record that others rely on, we will remove or anonymise your personal details rather than delete the item. We aim to reply within 30 days. Write to nikkle@linuxops.in. You can also sign out at any time and remove OpsDesk’s access in your Google account, as described above.
Security
OpsDesk is served over HTTPS. Access to a project depends on being added to it by an administrator. Approval and tracking links are signed and expire. No system is perfectly secure, so we keep the number of people and services that can reach your data small.
Children
OpsDesk is a workplace tool and isn’t meant for anyone under 18. We don’t knowingly collect data from children.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, where we can, tell people who use OpsDesk.