Privacy Policy

Last updated: May 2026. Operated by Innovations and More Ltd.

1. Who We Are

OperationNotes is operated by Innovations and More Ltd. We provide an operative note template library and AI-assisted draft generation tool for use by qualified surgical clinicians. For questions about this policy, contact us at our contact page.

2. What Data We Collect

• Account data: If you create an account, we store your email address and encrypted password.
• Payment data: Payments are processed by Stripe. We do not store card details. We store your Stripe session ID to verify access.
• AI generation logs: When you use the AI generator, we log the operation name and generated output for service monitoring. No patient-identifiable information should be entered into this tool.
• Usage data: We may collect anonymised usage statistics (pages visited, search terms used) to improve the service.
• Cookies: We use session and functional cookies. See our Cookie Policy.

3. No Patient Data

This platform is designed to handle template text only. You must not enter patient-identifiable information into any part of this website, including the AI generator. We are not a clinical records system. We accept no responsibility for any patient data entered by users.

4. AI-Generated Content

The AI operative note generator produces draft content for educational and documentation support purposes only. AI outputs are processed via OpenAI's API. OpenAI's privacy policy applies to content submitted to their API. We recommend users do not submit patient-identifiable details when using this feature. AI-generated outputs are not clinically validated and must be reviewed by a qualified clinician before any clinical use.

5. How We Use Your Data

• To provide and maintain the service
• To verify payment and manage access
• To monitor and improve the platform
• To respond to enquiries

We do not sell your data to third parties. We do not use your data for advertising purposes.

6. Data Sharing

• Stripe — for payment processing
• OpenAI — for AI draft generation (only content you submit to the AI tool)
• Hosting provider — Hostinger, for server infrastructure

7. Data Retention

Account data is retained while your account is active. AI generation logs are retained for up to 12 months for service monitoring. You may request deletion of your data by contacting us.

8. Your Rights

Under UK GDPR, you have rights to access, correct, or delete your personal data. To exercise these rights, contact us via our contact page.

9. Security

We use industry-standard measures to protect your data including encrypted connections (HTTPS) and hashed passwords. No method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this policy periodically. Continued use of the site constitutes acceptance of any changes.