Privacy Policy

We collect the following categories of information:

• Account & identity. When you sign up with email or with Google, we collect your name, email address, and a unique account identifier. If you sign in with Google, we receive your basic Google profile (name, email, and profile picture) so we can create and secure your account.
• Business data you connect. When you authorise an integration (for example accounting, CRM, calendar, email, meeting transcripts, or website analytics), we access and store the data you choose to connect so the Service can summarise it and answer your questions. We only access the scopes you approve, and only for accounts you connect.
• Onboarding & workspace content. Information you provide about your business, goals, and preferences, plus the messages and notes you create inside AIOS.
• Payment information. Subscriptions are processed by Stripe. We receive billing status and identifiers but never see or store your full card details.
• Usage & device data. Basic technical information such as log data, browser type, and how you interact with the Service, used to operate and improve it.

• Provide, maintain, and secure the Service and your AI Chief of Staff.
• Summarise, organise, and answer questions about the data you connect.
• Process payments and manage your subscription.
• Communicate with you about your account, security, and product updates.
• Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with our legal obligations.

We do not sell your personal information or your connected business data, and we do not use it to serve third-party advertising.

When you connect a Google account, AIOS’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request the Google scopes needed to provide the features you enable, and we use Google user data solely to provide and improve those user-facing features within AIOS.
• We do not transfer or sell Google user data to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use Google user data for advertising.
• We do not use Google user data to develop, improve, or train generalised or non-personalised AI and/or machine-learning models.
• We limit human access to Google user data except with your explicit consent, for security or abuse investigations, to comply with law, or where the data has been aggregated and anonymised.

You can disconnect a Google integration at any time from your AIOS settings or via your Google Account permissions.

We share information only with service providers who help us run AIOS, under agreements that require them to protect it. Our key sub-processors are:

• Supabase — authentication and database hosting.
• Vercel — application hosting and delivery.
• OpenAI— powering the AI assistant. Data sent via the API is not used to train OpenAI’s models.
• Composio — securely connecting your third-party integrations.
• Stripe — payment processing.
• Resend — transactional email.

We may also disclose information if required by law, to protect our rights and users, or in connection with a business transfer.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account or a connected integration, we delete or de-identify the associated data within a reasonable period, except where we must retain it to meet legal, accounting, or security obligations.

We protect your information with encryption in transit, access controls, and tenant isolation so each customer’s data is kept separate. No method of transmission or storage is completely secure, but we work to safeguard your data and to respond quickly to any incident.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for an integration. To make a request, contact us at privacy@aismarter.ai. You can also disconnect integrations and delete workspace content directly in the app.

AIOS is operated from Australia and uses service providers that may process data in other countries, including the United States. Where required, we rely on appropriate safeguards for these transfers.

We use essential cookies to keep you signed in and to operate the Service. We do not use cookies for third-party advertising.

AIOS is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of AIOS after a change means you accept the updated policy.

Questions about this policy or your data? Email us at privacy@aismarter.ai.