Date: January 13, 2026

Entity: TMG Solutions Advisors, LLC dba OpsIQ (“OpsIQ,” “we,” “us,” or “our”) Platform: OpsIQ Member Portal

1. Scope of Services; No Professional Advice
   • The OpsIQ platform provides access to operational resources, events, and an AI-enabled chat assistant that offers suggestions and recommendations for informational purposes only. The platform does not provide legal, tax, accounting, investment, medical, or other professional advice. Users should consult qualified professionals before making decisions.
   • The AI chat assistant (the “OpsIQ Guide”) may generate suggestions or recommendations based on user inputs; however, it does not take automatic actions on a user’s behalf and should not be relied upon as a substitute for human judgment or professional advice. AI provides recommendations only and no automated decisions affect user rights, employment, credit, or other significant outcomes
2. Eligibility; Business Use Only
   • The platform is directed to business professionals. Users must be at least 18 years old to create an account or purchase a subscription. Users must be 18+ to create accounts and enter into subscription agreements
   • The platform is intended for business-to-business use and is not directed to children. No data from children is knowingly collected
3. User Accounts; Registration Information
   • To use the platform, users must provide accurate registration information, including an email address, password, first name, last name, selected industry, and subscription tier assignment. Email address, password (hashed), first name, last name, industry selection, and subscription tier are collected for account creation, personalization, access control, and content filtering purposes
   • Users are responsible for maintaining the confidentiality of account credentials and for all activities under their account. Passwords are hashed using bcrypt in our authentication system. Passwords are hashed using bcrypt via Supabase Auth
4. Subscription Management and Payments
   • Subscription setup and payment processing are handled by Stripe; OpsIQ does not store payment card numbers on its servers. Stripe handles payment information entirely; OpsIQ does not store credit card numbers or bank account details
   • Users may manage cancellations through the Stripe Customer Portal. Users can cancel subscriptions via the Stripe Customer Portal
5. Third-Party Services and Integrations
   • OpsIQ uses third-party vendors for authentication, data storage, hosting, video, AI chat, and payments, including Supabase, Replit (including Neon), Stripe, Vimeo, and OpenAI (collectively, “Third-Party Services”). Third-party integrations include Supabase (auth/database), Stripe (payments), Vimeo (video hosting/embedded player), OpenAI (AI assistant), and Replit (hosting, database, file storage)
   • OpsIQ may share or route limited data to Third-Party Services to provide the platform. Email, password (hashed), and user profile may be processed by Supabase; email and payment method are handled by Stripe; user chat messages may be sent to OpenAI; no data is sent to Vimeo beyond embedded playback; Replit hosts application data
   • OpsIQ is not responsible for interruptions, errors, or data handling practices of Third-Party Services; those services are governed by their own terms and privacy policies.
6. Data Privacy and Security Disclosures
   • Data Categories and Purposes. The platform collects email, password (hashed), first name, last name, industry selection, subscription tier, Stripe Customer ID, Stripe Subscription ID, optional OpsIQ Guide chat messages, optional event registrations, and download activity logs for account, authentication, access control, content filtering, AI assistance, event management, and analytics
   • Storage Locations and Providers. User auth and database data are stored with Supabase (AWS) and Replit Postgres (Neon) in the United States; files are stored in Replit Object Storage in the United States; Stripe stores payment-related records in the United States; Vimeo hosts video content in the United States
   • Encryption and Security. Data in transit uses TLS 1.3; data at rest in databases uses AES-256; file storage is encrypted; passwords are hashed with bcrypt
   • Access Controls. Role-based access control is implemented for Regular Users, Advisors, and Admins; middleware and endpoint checks enforce permissions
   • Retention and Deletion. User accounts are retained until deletion is requested; chat messages are session-only and cleared on logout; uploaded resources persist until admin deletion and are anonymized when a user deletes their account; payment records follow Stripe’s retention policy; event registrations are retained until the event or account is deleted
   • User Rights. Users may access their profile data, request deletion via self-service, and partially correct data; data portability is currently in development.
   • Consent and Notice. User consent is logged at signup via a users’ consent at timestamp; users will be notified via email for material privacy policy changes
   • Sensitive Data Exclusions. The platform does not collect health data, biometric data, precise location data, Social Security numbers, government IDs, or financial account numbers; payment credentials are processed by Stripe
7. International Access; Data Location
   • The platform is hosted in the United States but may be accessible internationally. The platform is hosted in the U.S. and accessible internationally via web browser
   • Users accessing from outside the United States consent to processing and storage of their information in the United States.
8. AI and Automated Features
   • AI Output Limitations. The OpsIQ Guide may generate content that is imprecise, outdated, or contextually incomplete. Users are responsible for independently verifying AI outputs before relying on them.
   • No Automated Decisions of Legal Significance. AI features provide recommendations only and do not make automated decisions affecting user rights or significant outcomes; tier- and industry-based access only determine which resources or events a user can see
   • User Inputs. Users must not include confidential, sensitive, or third-party proprietary information in AI chat inputs that they do not have the right to share. User chat messages may be processed by OpenAI for AI assistance
9. User Responsibilities
   • Compliance and Proper Use. Users must comply with all applicable laws and refrain from using the platform to upload or transmit unlawful, infringing, misleading, harmful, or malicious content, or to attempt to access data or systems without authorization.
   • Account Security. Users must implement reasonable safeguards over their devices and accounts and promptly notify OpsIQ of suspected unauthorized access.
   • Content Rights. Users represent and warrant that they have the necessary rights to any content they upload or submit and grant OpsIQ the rights necessary to operate the platform, including hosting, displaying, and transmitting such content to provide services to the user and other authorized users.
10. Service Availability; Maintenance
    • The platform may be unavailable from time to time due to maintenance, updates, or outages of Third-Party Services. OpsIQ does not guarantee uninterrupted or error-free operation.
    • Security and Continuity. Supabase provides auth logs and monitoring; Replit provides deployment and error logs; Stripe provides payment monitoring and fraud detection; Supabase provides automatic daily database backups; recovery from Git repository can occur within hours
11. Security Practices; Incident Response
    • Administrative, technical, and physical safeguards include RBAC, least privilege, TLS 1.3, AES-256, bcrypt, JWT with expiration, input validation, parameterized queries, XSS prevention, CORS configuration, cloud-hosted infrastructure, and provider-managed physical security
    • Incident Response and Notifications. In the event of a data breach, OpsIQ will comply with applicable state breach notification laws and notify users via email
12. Accessibility
    • Accessibility Commitment. The platform implements WCAG 2.1 Level AA measures including keyboard navigation, skip links, color contrast, alt text, form labels, focus indicators, screen reader support, and responsive design;
    • Video Captions. Video captions depend on Vimeo settings and are the responsibility of the uploader
13. Export Controls
    • Users must not use the platform in violation of applicable export control or sanctions laws. The platform uses standard, publicly available encryption (TLS, AES) implemented by third-party providers and no custom cryptographic modules are developed
14. Prohibited Data and Uses
    • The platform is not intended for processing regulated financial records (beyond Stripe payments), protected health information, children’s data, biometric identifiers, precise geolocation, government ID numbers, or other sensitive categories noted in Section 6.8. The platform does not collect health or wellness data, children’s data, biometric data, location data, Social Security numbers, or government IDs
    • Users must not upload such data to the platform or include it in chat prompts.
15. Modifications to the Platform and Policies
    • OpsIQ may update the platform features and these disclosures from time to time. Users will be notified via email of material privacy policy changes
    • Continued use following an update constitutes acceptance of the updated terms and disclosures.
16. Limitations of Liability; Warranty Disclaimers
    • TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE PLATFORM AND ALL CONTENT, AI OUTPUTS, AND SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT.
    • OPSIQ DOES NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE, OR THAT AI OUTPUTS OR CONTENT WILL BE ACCURATE OR COMPLETE.
    • TO THE MAXIMUM EXTENT PERMITTED BY LAW, OPSIQ WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, COVER, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, GOODWILL, OR DATA, ARISING OUT OF OR RELATED TO THE PLATFORM OR THESE DISCLOSURES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL OPSIQ’S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THE PLATFORM EXCEED THE AMOUNTS PAID BY THE USER TO OPSIQ FOR THE SUBSCRIPTION DURING THE TWELVE-MONTH PERIOD PRECEDING THE EVENT GIVING RISE TO LIABILITY.
    • THE LIMITATIONS IN THIS SECTION APPLY TO THE FULLEST EXTENT PERMITTED BY LAW AND FORM AN ESSENTIAL BASIS OF THE BARGAIN BETWEEN THE PARTIES.
17. Indemnification
    • Users will indemnify, defend, and hold harmless OpsIQ and its affiliates, officers, directors, employees, agents, and licensors from and against all losses, liabilities, damages, penalties, fines, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) user content or data; (b) user’s breach of these disclosures or the Terms of Service; (c) misuse of the platform; or (d) violation of law or third-party rights.
18. Data Subject Requests; Account Deletion
    • Users may request access or deletion through in-platform controls or by contacting OpsIQ at support@opsiq.biz . Self-service account deletion is available via the Account Settings page and automatically cancels the Stripe subscription, deletes user data and registrations, and anonymizes uploaded resources
19. Contact Information
    • For privacy or security, privacy or technical questions, contact: support@opsiq.biz
20. Governing Terms
    • These disclosures supplement, and are incorporated into, the OpsIQ Terms of Service and Privacy Policy. In the event of conflict, the Terms of Service and Privacy Policy govern. Dedicated pages exist at /terms and /privacy and are ready for legal content