Privacy Policy

Business OS is operated by Ilan Baruch in Israel. Privacy questions and data requests may be sent to ilan.b@outlook.com.

We process account details, organization and team information, client and company records, activities and schedules, services, products, payments, operational notes, and technical information needed to secure and operate the service. Organizations control the business information their users enter into Business OS.

We may also process authentication identifiers and email addresses supplied by identity providers when a user signs in.

When an authorized organization owner or manager connects Google Calendar, Business OS requests the connected Google account email address and permission to manage calendar events.

Business OS uses this access only to create, update, and remove Google Calendar events that correspond to activities managed in Business OS. The current one-way synchronization does not import, display, analyze, or store the contents of the user's existing Google Calendar events.

We store the connected account email, an encrypted OAuth refresh token, Google event identifiers, and synchronization status and error information. This information is used only to provide and maintain the Google Calendar synchronization requested by the organization.

Business OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We use information to provide, secure, support, and improve Business OS; authenticate users; isolate organization data; perform requested operational workflows and integrations; diagnose errors; prevent abuse; and comply with law.

We do not sell personal information or Google user data. We do not use Google user data for advertising, credit decisions, or data-broker activities.

We use infrastructure and service providers to host the application and database, authenticate users, deliver communications, monitor service reliability, and operate requested integrations. They may process information only as needed to provide their services to us. We may also disclose information when required by law, to protect users or the service, or in connection with a business transfer subject to appropriate safeguards.

We use reasonable technical and organizational safeguards, including encrypted network transport, organization-level access controls, database row-level security, and application-layer encryption for Google OAuth refresh tokens. No system can guarantee absolute security.

We retain information while an account or organization uses the service and as reasonably needed for operations, security, dispute resolution, and legal obligations. Retention may vary by record type and an organization's requirements.

An authorized owner or manager can disconnect Google Calendar from the Business OS Settings page. Disconnecting removes the stored connection credential and event mappings from Business OS. Users may also revoke Business OS access from their Google Account permissions.

You may request access, correction, export, or deletion of personal information by emailing ilan.b@outlook.com. We may need to verify your identity and authority for the relevant organization. Some information may be retained where required by law or legitimate security and recordkeeping needs.

Information may be processed in Israel and in other countries where our service providers operate. Applicable privacy rights vary by location. We will respond to valid requests in accordance with applicable law.

Business OS is a business operations service and is not directed to children under 13. It must not be used to create an account for a child where prohibited by applicable law.

We may update this policy as the service or legal requirements change. Material changes will be communicated through the service or other appropriate means, and the effective date above will be updated.