Privacy

Effective 28 October 2026 · SelfOperate is operated by Stromation LLC · privacy@selfoperate.com

Who we are

SelfOperate is a product operated by Stromation LLC, a company registered in Texas, United States. Where this policy says “we”, it means Stromation LLC acting through the SelfOperate product.

What we collect

• Account and profile data — the name, email address and sign-in identifiers you use to access SelfOperate.
• Business and company data — what you tell us about the business being built or operated: services, pricing, service area, operating preferences, and the records the product keeps about your company.
• Connected-provider metadata — which third-party accounts you have connected, the account identifier at that provider, the permissions you granted, and the health of the connection.
• Files and evidence you upload — documents and images you provide so work can be done or verified.
• Photos you add — photos of you, your work, your product or your place, for your website. Location and camera details are removed before a photo is stored. Each photo is checked for prohibited content by Amazon Rekognition, part of the AWS infrastructure SelfOperate runs on, before it is kept. AI edits only photos you mark as being of you, only if you turn that on, and you can turn it off at any time.
• Operational and audit data — a record of what was requested, what was approved, what was done, and by whom. This is what makes the product auditable, and it is deliberately not optional.
• Payment metadata — our payment processor handles card details. We receive the result of a payment and the identifiers needed to reconcile it. We do not receive or store full card numbers.
• OAuth connection data — the tokens that let SelfOperate act on a connected account, held as described below.
• Which link brought you — if you arrive through a tagged link, such as one of our tip videos, or open our tips page from outside this site, one first-party cookie notes the source and the video (for example “YouTube, episode w1-mon-alex”) for 30 days. It holds no identifier and no third party reads it, and it is not set at all if your browser sends Global Privacy Control. If you then start a plan, that note is kept with your company so we can see which videos help people.
• Ad measurement — if you arrive by clicking one of our ads on Google or Meta (Facebook and Instagram), one first-party cookie keeps the ad’s campaign labels and click identifier, from your first and your latest ad visit, for 90 days. If you then start a plan, create an account or pay, SelfOperate tells that ad platform, from our servers, that it happened so the ad can be measured and improved: the type of event, when it happened, the amount and currency of a payment, the click identifier, your browser’s user agent, and your email address in scrambled (hashed) form. We never send card details, what you wrote about your business, or anything from your dashboard. Google and Meta handle that data under their own privacy policies and may use it to measure and improve their ad services. We do not sell your information. To opt out, turn on Global Privacy Control or Do Not Track in your browser and we store and send nothing. To remove what we already hold, close your company in Settings or use our data deletion page (or email privacy@selfoperate.com): completing that request deletes the stored ad source and click identifiers for your account, and we send no further events about it. You can also clear the cookie in your browser, or limit ad personalisation in your Google and Meta settings.
• Anonymous visit statistics — on our public pages we count visits with a small first-party counter: pages viewed, the referring site and campaign tag, and a general screen size. It uses no cookies, stores no IP address and no personal data, and cannot identify you.
• Visit recordings and heatmaps (Microsoft Clarity) — on our public pages only (the home page, pricing, examples and similar), we use Microsoft Clarity to make anonymous recordings of how visitors move, click and scroll, and heatmaps of where people click. Clarity may set cookies in your browser to recognise a return visit. We do not run it on signed-in pages such as the dashboard or approval links, or on the pages where you type your email (getting started, the free website check, the existing-business page, contact and sign-in). We use it to improve the site and do not use it for advertising. If your device is set to a time zone in the European Union, the wider European Economic Area, the United Kingdom or Switzerland, Clarity stays off unless you choose “Allow” on our cookie notice. To opt out anywhere, turn on Global Privacy Control or Do Not Track in your browser, and Clarity will not load for you; blocking clarity.ms with your browser or an ad blocker also stops it. Microsoft handles the data under its own privacy statement. Change your cookie choice
• Free website check — if you use it: the website address and email you enter, the score and findings we show you, when you agreed to keep your result with your email, and a scrambled form of your network address that is used only to limit misuse and cannot be turned back into the address. The check reads only public pages. We keep this for 12 months after you last use the check, then delete it automatically, or sooner if you ask at privacy@selfoperate.com.

Google user data, and Gmail specifically

Some SelfOperate features connect to Google accounts. Those connections exist only because you, as the account owner, completed Google’s consent screen and granted them. This section describes what happens after that.

• Authorised by you. A Gmail connection begins with the account owner completing Google’s consent screen. Nothing is connected on your behalf.
• Bounded reads, not crawling. Reads are searches and message fetches performed to carry out work you asked for. SelfOperate does not autonomously traverse or index an entire mailbox.
• Verified before storage. A connection is checked against Google’s profile endpoint before any credential is stored, so a connection that cannot actually work is never recorded as usable.
• Provenance. Where information from an email is deliberately used in your company record, the product keeps a reference to where it came from, so you can see why it believes what it believes.
• Revocable. You can disconnect inside SelfOperate at any time, and you can revoke access directly in your Google Account permissions.

Limited Use. SelfOperate’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not sell Google user data; we do not use it for advertising; we do not transfer it except as needed to provide the features you asked for, to comply with applicable law, or as part of a merger or acquisition after notice; and we do not allow humans to read it except where you explicitly ask us to, where it is necessary for security or to comply with law, or where the data has been aggregated and anonymised.

Facebook Pages. If you connect Facebook, SelfOperate reads the list of Pages you manage so you can choose one, publishes a post to that Page only after you approve its exact text, and reads that Page’s recent posts with their reaction, comment and share counts to show them back to you. We keep the text of posts you draft or approve and the link to each published post. We do not read private messages unless you turn on replies to messages, we do not sell or advertise with this data, and disconnecting stops all access at once.

Advertising and posting accounts you connect

If you connect Facebook, Instagram, Google Ads, a Google Business Profile or TikTok so that SelfOperate can post or run ads for your business, this is what happens. It applies only to the accounts you choose, and only once you have connected them.

• What we read. The list of Pages, Instagram accounts, ad accounts or business locations you manage so you can choose one; the posts and ads we made for you and how they are doing (views, clicks, reactions, comments, leads, and the amount the platform says was spent); and the review status of those ads. Where you turn it on, we also read comments, messages and lead forms sent to your business, so your assistant can reply for you.
• What we do. We create posts and ads only for the accounts you connected. You approve every new campaign and every budget increase first, and you set the monthly limit. Ads are billed by Meta, Google or TikTok to your own ad account. SelfOperate never adds or changes a payment method and never pays for ads.
• What we keep. The posts and ads we made, their results, the choices you made, and the IDs of the accounts you picked. Sign-in tokens are held as described below.
• Customers’ details. If you ask us to send a message to your past customers, we send it one customer at a time, only to people you already have a relationship with, and for texts only to people who agreed in writing to get marketing texts. Mobile numbers and text-message consent are not shared with third parties or affiliates for marketing or promotional purposes. Every message includes a way to stop them, and we honour it.
• Ad measurement for your business. If you turn on ads, we can add the platform’s measurement code to your website and send the platform a small signal when someone becomes a lead or a customer (scrambled email or phone, never card details). We respect Global Privacy Control. We do not add third-party measurement code to the websites of health businesses.
• No selling, no profiling. We do not sell this data and do not use it for anything except running your marketing. Meta, Google and TikTok handle their side under their own policies.
• Stopping. Disconnect any account in SelfOperate and our access stops at once. Use “Stop all ads” to pause every live ad. See Deleting your data.

Credentials and tokens

• For accounts you connect directly, OAuth tokens are held in SelfOperate-controlled encrypted secret storage, separate from the application database.
• Connections through Composio. Gmail, Google Calendar and QuickBooks can be connected through Composio, a connection service. For those accounts, Composio — not SelfOperate — holds the sign-in tokens, on its own systems. SelfOperate keeps only a private reference to your connection there, asks Composio to run one of a fixed list of read tools when work needs it, and gets the result back.
• Connections are scoped to your tenant and company. One customer’s connection is not reachable from another’s.
• Tokens are never returned in customer-facing API responses. The product works with opaque references, and the credential itself is supplied only at the moment an authorised action runs.
• On disconnect, SelfOperate destroys its own copy of the credential (or its reference to a Composio connection) first, then asks the provider, or Composio, to drop the grant. A provider being unavailable cannot block a disconnect.

What we do not do

• We do not sell your data, or Google user data, to anyone.
• We do not use your data, or Google user data, to serve advertising.
• We do not use your business data to train general-purpose models for other customers.
• We do not transfer Google user data for purposes unrelated to the features you connected it for.

Your data is yours

The company we help you build is yours. Accounts are created in your name, and SelfOperate exports available company records in a structured, readable archive. Its manifest lists what is included and what is not yet covered. Stopping a subscription stops the operating layer; it does not transfer ownership of your business, your accounts or your data.

Retention

We keep account, company and audit data for as long as your account is open, because the product’s value depends on an unbroken record of what was done. When you ask us to delete your account, the recorded erasure steps run and any unresolved data is identified for a retention decision. Stored credentials are withdrawn. We may retain a limited record of transactions where we are required to — for example tax and accounting records — and backups age out on their ordinary cycle rather than being edited. We have not set arbitrary retention windows we do not actually enforce.

Not erased yet. Deleting your account does not yet reach files you upload as proof that a job was done, the print artwork and estimates for printed items you order or logo files you upload yourself. Until it does, those stay stored; ask at privacy@selfoperate.com what remains for your account. Deleting your data keeps this list current.

Security

These are controls the product implements, not aspirations:

• Tenant isolation — every read and write is scoped to a tenant and company, and cross-tenant access is refused rather than filtered.
• Least-privilege permissions — each provider connection requests a narrow, explicitly listed set of scopes. Anything outside that list is rejected before a request is made.
• Approval controls — actions are read-only, approval-required, or permitted, according to limits you set. Nothing escalates itself.
• Audit trail — requests, approvals and outcomes are recorded.
• Malware scanning — uploaded files are scanned, and a file that has not returned a clean result is not usable.
• Separated secrets — credentials live in encrypted secret storage, not alongside application data.

No system is perfectly secure, and we do not claim a certification we have not obtained. We hold no SOC 2, ISO 27001 or comparable third-party attestation today, and this page will say so until that changes.

Third-party services

SelfOperate runs on cloud infrastructure and connects to providers you choose — Google, payment processors and others. Those providers handle data under their own terms and privacy policies, and connecting an account means data moves between SelfOperate and that provider to do the work you asked for.

Composio is one of these services. If you connect Gmail, Google Calendar or QuickBooks through it, Composio holds that account’s sign-in tokens and carries the read requests SelfOperate makes and their results (for example the emails, events or invoices being read). Composio handles that data under its own privacy policy.

Disconnecting and deletion

• Disconnect a provider — in SelfOperate, from your connections. You can also revoke directly at the provider.
• Export your data — download the available records while your account is open, and check the archive manifest for coverage.
• Delete your account — email privacy@selfoperate.com from the address on your account. Export first if you want a copy; deletion is not reversible.

Step-by-step instructions for every provider, including Facebook and Instagram, are on Deleting your data.

Children

SelfOperate is a business product and is not directed to anyone under 18.

Changes

When this policy changes materially we will update the effective date and tell account holders. We will not quietly broaden what we do with data already collected.

Contact

Stromation LLC, Texas, United States · privacy and data requests: privacy@selfoperate.com · everything else: contact@selfoperate.com