Privacy Policy

Effective October 7, 2026

Supportopus is a support workspace for software teams: it collects support conversations, groups them, drafts replies and, when a person approves, works on fixes. This policy explains what information we handle and why. It covers the dashboard at app.supportopus.ai, the Supportopus chat window on our customers' websites, and this website.

Supportopus is run by Millennial Apps, LLC ("we", "us"). Questions: support@supportopus.ai.

Two kinds of people

Team members sign in to app.supportopus.ai to answer and manage support for their company. We handle their information ourselves.
People who chat with one of our customers through the chat window on that customer's site or app. We handle those conversations on behalf of that customer, who decides what to ask for and how to use it. If you chatted with a company that uses Supportopus, that company's own privacy policy applies, and you can contact them about your information. We will help them answer you.

What we collect

Team members

Your name and email address, and the workspace and role you were invited to.
If you use Sign in with Google: the name, email address and profile picture Google shares with us. We ask Google for nothing else: no contacts, files, mail or calendar.
When you sign in, and what you do in the workspace (for example replies you send, plans you approve, settings you change), so your team has a record of who did what.

People who chat with our customers

The messages you send, and a name or email address if you choose to give one.
If the company's site has signed you in, an identifier and email address that the company passes to us, so the conversation reaches the right account.
A scrambled (one-way) version of your IP address, used only to stop abuse. We do not store the IP address itself.
A session token kept in your browser so the conversation is still there when you come back.

This website

If you fill in the design-partner form, what you write in it.

How we use it

To run Supportopus for our customers: show conversations to their team, send replies, group problems, and carry out work a person has approved.
To sign people in and send account emails, such as sign-in codes and invitations.
To keep the service secure and prevent abuse.

We do not sell personal information, and we do not use it for advertising.

AI

Each customer chooses which AI reads their conversations: a model on the customer's own computer, an AI tool signed in with the customer's own account on a computer the customer controls (the "runner"), or an AI provider through the customer's own account. Messages go only to the AI the customer chose, under the customer's agreement with that provider. We do not train AI models on your information.

Code

When a customer connects GitHub, the key that opens their code is created on and kept on the customer's own runner. Our servers store only public facts, such as repository names.

Information from Google

We use the information Google shares when you sign in (your name, email address and profile picture) only to sign you in and to show your teammates who you are. We do not use it for advertising, we do not sell it, and we share it only with the service providers below that run our sign-in. Supportopus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We use these companies to run Supportopus. They process information only to provide their service to us.

Supabase: database, sign-in and file storage (servers in the United States).
Cloudflare: hosting of app.supportopus.ai and network protection.
SMTP2GO: sending email (sign-in codes and invitations).
Google: Sign in with Google.
Netlify: this website and its form.
AI providers only where a customer has chosen one, as described above.

How long we keep it

Team member accounts: while you belong to a workspace. Workspace owners and admins can remove members.
Conversations: for as long as the customer keeps them. A chat window's session ends after 30 days for people who aren't signed in, and after 1 day for signed-in people.
When a customer stops using Supportopus, we delete their workspace data on request within 30 days, apart from copies in backups, which expire on their normal schedule.

Security

Everything travels over encrypted connections. The database checks, on every request, that the person asking belongs to the workspace. Secrets are kept in encrypted storage, and keys for code stay on customers' own machines.

Cookies and browser storage

We keep you signed in, and remember small preferences such as light or dark mode, using your browser's storage. We do not use advertising or cross-site tracking cookies.

Your choices

You can ask us for a copy of your information, or ask us to correct or delete it, at support@supportopus.ai. If your question is about a conversation with one of our customers, we will pass it to that customer, who decides.

Children

Supportopus is a tool for businesses and is not meant for children under 13.

Changes

If we change this policy, we will update the date at the top. For important changes, we will also tell workspace owners before they take effect.