AI Business OS

This Privacy Policy explains what information AI Business OS ("we", "us") collects, how we use it, and the choices you have.

1. Information we collect

Account information: name, email address, and organization details you provide when signing up.
Business data: the sales, finance, inventory, customer, marketing, HR, and operations data you or your team enter into the Service.
Billing information: subscription and payment details, handled by our payment processor Paddle -- we do not store your card details ourselves.
Usage data: basic technical logs (e.g. sign-in activity, AI credit usage) used to operate and secure the Service.

2. How we use information

We use your information to provide and improve the Service, including to power the AI assistant's answers about your own business, to process billing, to provide customer support, and to keep the Service secure. We do not sell your data.

3. AI processing

When you use the AI assistant or other AI-powered features, relevant business data is sent to third-party AI model providers (such as OpenAI and Anthropic) solely to generate the response or insight you requested. These providers process the data under their own data-processing terms and do not use it to train their models on our customers' behalf.

4. Sub-processors

We rely on the following categories of sub-processors to operate the Service:

Supabase -- database hosting and authentication
Paddle -- subscription billing and payment processing
OpenAI and Anthropic -- AI model providers
Google -- optional Google Calendar integration, only if you connect it

5. Data retention and deletion

We retain your data for as long as your account is active. The owner of an organization can delete all of the organization's data at any time from Settings → Organization. Deletion is permanent and takes effect 7 days after it is requested; it can be cancelled until then. It removes the organization's records, uploaded files and team memberships, and stops the paid subscription. We keep billing and payment records for as long as the law requires, and your sign-in account remains until you ask us to delete it.

6. Your rights

Depending on where you're located, you may have the right to access, correct, export, or delete your personal information. Organization administrators can download a complete copy of the organization's data at any time from Settings → Organization; contact us to correct your information or to delete your sign-in account.

7. Security

We use industry-standard measures -- including row-level access controls and encryption in transit -- to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies to keep you signed in and to remember your session. We do not use advertising or cross-site tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new effective date.

10. Contact

Questions about this policy, or requests regarding your data, can be sent to gabyhaddad_22@outlook.com.