1. Who we are
Ops Navigator (the “Service”) and the website at opsnavigator.app are provided by Caprics Technologies Pvt Ltd (“Caprics”, “we”, “us”, “our”), a private limited company based in India. Ops Navigator is a product of Caprics Technologies Pvt Ltd.
Caprics Technologies Pvt Ltd
No 51, 11th Street, Venkateswara Colony,
Industrial Estate, Nehru Nagar, Kottivakkam,
Chennai, Tamil Nadu 600041, India
Phone: +91 98845 35765
Email: hello@caprics.tech
This policy explains what personal data we collect, why, how long we keep it and the choices you have. It is written to meet our obligations under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it, and the Information Technology Act, 2000 with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”).
2. Our role and your organisation’s role
Ops Navigator is used by organisations (“Customers”) to document and run their processes. Our role depends on the data:
- Caprics as data fiduciary. For data we collect for our own purposes, such as website visit data, account and billing details, product usage data and messages you send us, Caprics decides why and how the data is processed and is responsible for it.
- Caprics as data processor. For content that a Customer’s users put into a Customer workspace (“workspace content”), the Customer is the data fiduciary. We process workspace content on the Customer’s behalf, only to provide the Service and in line with our agreement with that Customer.
If you use Ops Navigator through your employer or another organisation, that organisation’s own privacy notice also applies to you.
3. Personal data we collect
When you visit this website
- Server logs kept by our hosting provider: IP address, browser and device type, pages requested, referring page and date and time.
- Requests your browser makes to our font providers, described in section 7.
Account data
- Your name, work email address, organisation and workspace name, role and sign-in credentials.
- Details of the people you invite, such as their names and work email addresses.
- When paid plans are offered: billing contact details, plan and transaction records.
- Messages you send us, such as support requests, feedback and sales enquiries.
Workspace content
- Documents, handbooks and files you upload; SOPs, journeys and doc site pages; recorded workflow captures, including screenshots of the applications you record; comments, acknowledgements and copilot questions and answers.
Usage data
- Technical data such as IP address, browser, device and operating system, session and security logs, and error reports.
- Product usage data, such as which features are used and how guides and journeys are completed. Engagement analytics in Ops Navigator are reported in aggregate, and input values typed into a host application are not captured.
Please do not put sensitive personal data (such as passwords, financial account or card details, health or biometric information, or identity document numbers) into workspace content unless your organisation has a lawful basis and appropriate safeguards for doing so.
4. How we use it
- To provide, operate and maintain the Service, including creating workspaces, signing you in and managing access.
- To deliver the features you ask for, such as structuring documents into SOPs, building journeys, publishing doc sites and answering copilot questions.
- To keep the Service and this website secure, prevent fraud and abuse, and troubleshoot problems.
- To respond to your requests and send service messages, such as security alerts, changes to these terms and billing notices.
- To understand how the Service is used and improve it, using aggregated information wherever possible.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell personal data, use it for advertising, or use workspace content for any purpose other than providing the Service to the Customer.
5. Consent and legal basis
We process personal data for which Caprics is the data fiduciary on the basis of your consent, given when you create an account, accept an invitation or contact us after being shown this policy, or for a legitimate use permitted by the DPDP Act, such as data you have voluntarily provided for a specific purpose or processing needed to comply with law. You can withdraw consent at any time by writing to us; this does not affect processing that took place before you withdrew it, but we may then be unable to provide the Service to you.
For workspace content, the Customer is responsible for having a lawful basis, and for giving any notices and obtaining any consents the law requires, before its users put personal data into the Service.
6. The copilot, AI features and captures
Some features, including the in-app copilot, use AI to process workspace content, for example to break a handbook into step-by-step SOPs or to answer a question from your organisation’s own content. To provide these features, workspace content may be processed by third-party AI service providers acting as our processors, solely to provide the feature you are using.
We do not use your workspace content to train our own models, and we require our AI processors to process it only to provide the service.
When you record a workflow with the browser extension, captures are designed to protect the people in them: emails, phone numbers and amounts are always blurred, and AI proposes further redactions for review before a capture is finalised. AutoPlay asks before risky steps and its actions are logged. AI output can be wrong or incomplete, so please review it before relying on or publishing it.
9. Transfers outside India
We and our service providers may store or process personal data on servers outside India. Where this happens, we transfer data only as permitted by the DPDP Act, including any restrictions the Government of India notifies for particular countries, and we expect our providers to protect it to the standard described in this policy.
10. How long we keep it
- Account data and workspace content: for the life of the account. When an account or workspace is closed, or when the Customer asks us to delete it, we delete it within a reasonable period, except where a law requires us to keep it. Copies in backups are removed as those backups are overwritten in the normal cycle.
- Usage data: for the life of the account, or in aggregated form that no longer identifies you.
- Website server logs: for a short period needed for security and troubleshooting, and for any minimum period required by law.
- Enquiries and support messages: up to 24 months after our last communication with you.
We may keep data for longer only where a law requires it or where it is needed to establish, exercise or defend a legal claim.
11. Security
We follow reasonable security practices and procedures, as required by the SPDI Rules and the DPDP Act, including encryption in transit (HTTPS), access controls down to the document level, role-based permissions and activity logging. Access to personal data inside Caprics is limited to people who need it to provide and support the Service.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will act promptly to contain it and will notify the Data Protection Board of India, affected individuals and, where relevant, the affected Customer, as the law requires.
12. Your rights
As a data principal under the DPDP Act, you have the right to:
- Access: a summary of the personal data we hold about you, how we process it and the identities of those we have shared it with;
- Correction: correction, completion or updating of inaccurate or incomplete data;
- Erasure: deletion of your data when it is no longer needed for its purpose or when you withdraw consent, unless a law requires us to keep it;
- Withdraw consent at any time, as easily as you gave it;
- Grievance redressal: raise a complaint with our Grievance Officer; and
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
If your data is in a Customer workspace, please contact that organisation first; we will help it respond. Otherwise, write to the Grievance Officer in section 15 with the subject “Privacy request”. We may ask you to confirm your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process. If you are in another country, you may also have rights under your local data protection law.
13. Children
Ops Navigator is designed for organisations and their staff. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. Customers must not invite children as users or upload children’s personal data into the Service without the verifiable parental consent and safeguards the DPDP Act requires. If you believe we hold a child’s data without such consent, contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, give notice through the Service or by email before they take effect.
15. Grievance Officer
Questions, requests and complaints about personal data can be sent to:
Grievance Officer, Caprics Technologies Pvt Ltd
No 51, 11th Street, Venkateswara Colony,
Industrial Estate, Nehru Nagar, Kottivakkam,
Chennai, Tamil Nadu 600041, India
Email: hello@caprics.tech (subject “Privacy request”)
Phone: +91 98845 35765
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days of receiving it.
16. Contact us
For anything else about this policy or Ops Navigator, contact Caprics Technologies Pvt Ltd at hello@caprics.tech or +91 98845 35765, or write to us at the address above.