Effective 2026-10-22. This policy describes how OpsBlu LLC (“OpsBlu,” “we,” “our,” or “us”) handles information about two groups: businesses that appear in our dataset, and customers and visitors who use opsblu.com. OpsBlu LLC is the data controller for personal information covered by the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).
Business records we collect
OpsBlu compiles records about US local businesses from public websites, certificate transparency logs and public business directories. A record may include:
- Identity and location: business name, category, street address, city, state, ZIP and approximate coordinates.
- Published business contact details: the business phone number and role or shared inboxes (for example info@, office@, hello@) that the business publishes itself.
- Website facts: domain, platform, Core Web Vitals and other performance measurements, SEO basics, TLS certificate dates.
- Marketing technology: which analytics tags, advertising tags, pixels and consent tools a website loads, and whether conversion tracking is delivered server-side.
- Change signals: when a business first appeared, when its website launched or changed platform, when tags were added or removed, and when it appears to have closed.
We do not collect or publish reviews, star ratings, photos, or named-person contact details (personal names, personal emails, mobile numbers). Where a business publishes a named individual’s details, we do not store them. Sources and refresh cadence are described on our methodology page.
How business records are used
- Aggregate statistics (counts, percentages, maps) are published freely and never identify a business. Any count under five is suppressed.
- Individual records are made available to paying customers (agencies, software companies and their automated agents) for business-to-business outreach, market research and product development, under our Acceptable Use Policy.
- Customers may not resell or redistribute raw records, use them to send unlawful messages, or retain a record after we notify them of a removal.
Opting a business out
Any owner or employee of a listed business may request removal at /remove. We hide the record immediately, verify the request by email, and complete removal across search, exports and the API within 72 hours. The business is added to a suppression list so future collection skips it. We notify customers who exported the record in the previous 30 days.
Information about customers and visitors
- Account information: your email address and its domain (used to decide eligibility for free credits), API keys you create, saved territories and alert settings.
- Billing: payments are processed by Stripe. We store the amount, time and Stripe reference of each top-up, never card numbers. Our credits ledger (grants, top-ups, reveals, exports, expiries) is kept so you can audit your spend.
- Usage: which records you opened or exported (needed to bill once per record per month), searches, draws on the explore tool, and sample-page views tied to an outreach token.
- Leads: if you enter an email to unlock a free tool or request access, we keep the email and the query you ran so we can follow up.
- Device data: IP address, browser and pages visited, used for security, rate limiting and analytics.
Sharing
- We do not sell customer or visitor personal information.
- Service providers who help us operate (payments, email delivery, hosting, analytics) receive only what they need to perform their service.
- We disclose information when required by law or to protect our rights, customers or the public.
Cookies and analytics
We use first-party cookies for sign-in and consent preferences, and Google Analytics 4 (delivered through our own TagFrog tagging) for product analytics. Analytics and advertising storage are off until you consent. Manage choices via “Cookie Settings” in the footer.
Retention
- Business records are refreshed continuously and removed on request or when a business is confirmed closed for 12 months.
- Account, ledger and reveal history are kept while your account is active and for 7 years after for tax and audit purposes.
- Outreach sample tokens and the events tied to them expire after 60 days.
Your rights
- Businesses: opt out at /remove.
- Customers and visitors: access, correct or delete your personal information via Privacy Choices or privacy@opsblu.com. California residents may also opt out of any sale or sharing of personal information; we do not sell it.
- Unsubscribe from marketing email using the link in each message.
Security
Transport is encrypted (TLS). API keys are stored hashed. Access to production data is limited to OpsBlu staff with a need to know. No method of storage is perfectly secure; report concerns to security@opsblu.com.
Children
Our services are for businesses and professionals. We do not knowingly collect information from anyone under 16.
International transfers
We operate from the United States. If you access the service from elsewhere, your information is processed in the US under appropriate safeguards.
Changes
We will post updates here with a new effective date and, for material changes, email account holders.
Contact
OpsBlu LLC. Privacy requests: privacy@opsblu.com. General: contact us.