Your data, handled with care.

ChiefOS provides an AI Chief of Staff that turns operating signals into evidence-backed briefs, decisions, and accountable actions. This notice applies to our marketing site, product workspace, and related services. For the purposes of applicable data-protection law, ChiefOS is the controller of personal data processed about visitors and account users, and a processor of the customer content our customers place in their workspace.

We collect information you provide, information generated as you use the product, and limited technical information from your device.

• Account and contact details you submit — name, work email, phone number, and organization.
• Workspace content your organization connects or creates — evidence, briefs, decisions, and actions.
• Product usage — metadata-only events such as feature used, run identifiers, and timestamps.
• Technical data — IP address, browser type, and security/diagnostic logs.

We use information to provide and secure the service, respond to requests, and improve reliability and quality.

• Deliver, maintain, and secure the ChiefOS workspace and its integrations.
• Authenticate users and enforce organization membership and access controls.
• Communicate about access, support, security, and service changes.
• Improve performance and quality using metadata — never customer content.

Where required, we rely on one or more legal bases to process personal data: performance of a contract with you or your organization; our legitimate interests in operating and securing the service; your consent (for example, optional analytics); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

We do not sell personal data. We share information only with service providers who process it on our behalf under contract, with your organization's administrators, and where required by law or to protect rights and safety. Sub-processors are bound to confidentiality and security commitments consistent with this notice.

Product analytics are consent-gated and metadata-only. We do not use session replay or autocapture, and we never place customer content, source text, prompts, brief content, email addresses, or document names into analytics. Essential cookies keep your session secure; optional analytics run only after you accept them.

We keep personal data only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements. Customer workspace content is retained per the customer agreement, with a defined recovery window, after which it is deleted or irreversibly de-identified.

We apply administrative, technical, and organizational safeguards including least-privilege access, encryption in transit, audit logging, and multi-factor authentication for privileged access. Every high-impact action is recorded with an actor, timestamp, and provenance. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing.

• Request a copy of the personal data we hold about you.
• Ask us to correct or delete your personal data.
• Object to or restrict certain processing, or withdraw consent.
• Lodge a complaint with your local supervisory authority.

We may process and store information in countries other than where you live. Where we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses or an equivalent lawful transfer mechanism.

ChiefOS is a business product not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this notice to reflect changes to our practices or for legal reasons. We will post the updated version with a new effective date and, where appropriate, provide additional notice.

Questions or requests

Contact our privacy team at privacy@chiefos.cloud. We may need to verify your identity before acting on a request. Authorized agents may submit requests where permitted by law.