Operixby Black Flag AVP

Operix by Black Flag AVP: Privacy Policy

Effective date: October 20, 2026
Last updated: October 22, 2026

This policy explains what Operix collects and why. Operix is operated by Nicholas J Garza, an individual doing business as Black Flag AVP, Houston, Texas, which is responsible for your personal data under this notice. Contact: support@blackflagavp.com. Mailing address: 957 Nasa Pkwy, Unit #2194, Houston, Texas 77058.

What we collect

  • Account: your name and email from your sign-in provider.
  • Signup form: name, business name, email, and a keyed hash of your IP address for abuse limits.
  • Shared desk: only if you turn on sharing, an encrypted copy of your desk summary on our servers (encrypted in transit and at rest; we can access it only to run the service and support you).
  • Subscription and payments: Stripe IDs, amounts and status for your subscription and for invoices paid online. No card numbers.
  • People who pay an invoice online: their name, email and card details are collected and processed by Stripe on Stripe's hosted checkout, under Stripe's privacy policy. Operix never sees card numbers.

How we use it

To provide, secure and support Operix, bill your subscription, prevent abuse, and send service emails. We don't sell personal data or use it for targeted advertising or profiling.

Your customers' data

Your desk can hold your customers' names, phones, emails and invoices. For that data you are the controller and we are your processor under the Data Processing Addendum (/dpa).

What stays on your device

Your desk is stored encrypted on your device. Signing out removes it and its key from that device; download an encrypted backup first.

AI (xAI)

Ask and assistants are optional. When you use them, we send your question and a summary of the relevant desk data to xAI to generate an answer. Before a request leaves our server, Operix automatically removes or replaces the names, email addresses, phone numbers, payment card numbers, Social Security numbers and US addresses it can detect (names become labels such as "Person 1"), and blocks the request if any remain. Automated removal may not catch every item, such as a name typed only in free-text notes or a non-US address, so don't enter other people's personal data into notes or AI prompts. xAI doesn't use this content to train its models. Don't put card numbers, Social Security numbers or health information in notes.

Optional AI features are processed by xAI with Zero Data Retention enabled, so xAI does not store Customer Data sent for AI processing after it returns a response, except where xAI's terms or the law require otherwise.

Who we share with

  • Stripe, to process subscription and invoice payments.
  • xAI (SpaceXAI LLC), AI processing of de-identified content for Ask and assistants (see above).
  • Sign in with Grok (xAI / SpaceXAI LLC), our sign-in provider, to verify who you are; sessions are run by our own server.
  • Vercel Inc., hosting (US).
  • Neon (Databricks), Postgres database for shared desk copies, signup form entries and payment status (US).
  • Google Fonts, which receives your IP address when pages load fonts.

We also share data when the law requires it. We don't sell personal data.

Emails

We send service emails about your account, billing, receipts, cancellations and security. Any marketing email we send will identify us, include our mailing address, and let you unsubscribe; we honor unsubscribe requests within 10 business days.

Retention

We keep account data while your account is open. Shared desk copies are deleted within 45 days after you turn sharing off or close your account. Signup form entries (including earlier early-access requests) are deleted after 12 months. Stripe IDs are kept as long as tax and accounting law requires. To close your account, email support@blackflagavp.com; we'll close it and delete your account data within 45 days, except records the law requires us to keep.

Your rights

Depending on where you live, including under the Texas Data Privacy and Security Act, you can ask to access, correct or delete your personal data, get a portable copy, and opt out of sale, targeted advertising and profiling (we don't do these). Email support@blackflagavp.com. We answer within 45 days and may extend that once by 45 days if needed, with notice. If we decline, you can appeal by replying to our decision; if we deny your appeal, you can contact the Texas Attorney General. We won't treat you differently for exercising these rights.

You can also export your desk from Operix at any time.

Data breaches

If we learn of a breach of security affecting your personal data, we'll notify you without unreasonable delay and no later than 60 days after we determine it occurred, and notify the Texas Attorney General where required, as Texas law requires (Tex. Bus. & Com. Code ยง521.053).

Cookies

Only those needed for sign-in and security.

Children

Operix is for businesses and people 18 and older. We don't knowingly collect children's data.

Changes

We'll post updates here with a new "Last updated" date and give 30 days' notice of material changes by email or in the app.

Contact

Nicholas J Garza, an individual doing business as Black Flag AVP, 957 Nasa Pkwy, Unit #2194, Houston, Texas 77058. support@blackflagavp.com.