Privacy policy
Effective November 1, 2026
BackOps is a tool for shift flower counts in dispensaries. This page explains, in plain words, what we collect, why, and what we do with it.
What the website forms collect
When you use the contact form, the free-trial form, or ask for a walkthrough, we collect what you type in:
- Your name
- Your email (the contact form also accepts a phone number instead)
- Your store or business name, if you add it
- Your message and the topic you picked
We use this only to reply to you and, if you asked for one, to set up your trial or walkthrough. Messages are stored in our database and forwarded to our own inbox. We may send you a one-time confirmation link to make sure the email address is yours.
The bot check
The forms use Cloudflare Turnstile to tell people from bots. It loads when you start filling in a form, and Cloudflare processes signals from your browser to run the check. To limit abuse we also keep a salted, one-way hash of your IP address for about 24 hours. We don't keep your IP address itself with your message.
Customer data: counts and count photos
If your store uses BackOps, we store what the app needs to work:
- Shift counts: the numbers staff enter for each strain, with the shift, time and store
- Count photos: the live photos staff take with each count
- Label-check results: what the automatic label check read from each count photo and any flag it raised
- Your strain list and on-hand numbers from your POS, used for the comparisons
- Staff sign-in emails and a hashed store PIN
Count photos are processed on Cloudflare's servers to run the label check. This data is used to run the service for your stores: the manager view, flags, the daily summary and alerts to your own Slack channel. It is only visible to the people you give access to.
Who else handles data
We run on Cloudflare (hosting, database, photo storage, email routing, the bot check and the label check). If you connect Slack, alerts go to the Slack channel you choose. The website loads fonts from Google Fonts. We don't use advertising trackers.
We don't sell your data
We don't sell or rent personal data or store data to anyone, and we don't share it for advertising.
Keeping and deleting data
We keep form messages as long as we need them to follow up with you. Customer data is kept while your account is active. Ask us and we'll delete your messages or your store's data, unless we have to keep something by law.
Changes
If we change this policy, we'll update this page and the date at the top.
Contact
Questions or requests: [email protected].