Privacy Policy

Data we collect

• Account and workspace identifiers from Clerk, including user id, organization id, role, and sign-in email used for account access.
• Files uploaded by workspace members, including company-shared files and personal files uploaded by an individual user.
• File metadata, object keys, AI Search indexing metadata, MCP tool-call inputs, and operational logs needed to run and debug the service.

How we use data

• To authenticate users, enforce workspace membership, and scope each request to the selected organization.
• To store files in the correct company-shared or personal scope.
• To index uploaded files and return relevant file chunks or full file text through read-only MCP tools.
• To provide support, investigate abuse, maintain reliability, and comply with legal obligations.

Recipients

• Cloudflare hosts the web app, Worker, R2 file buckets, AI Search index, and runtime used by CompanyOS.
• Clerk provides authentication and organization management.
• PostHog EU Cloud provides privacy-conscious frontend web analytics, error tracking, masked session replay for the signed-in app, feedback collection, and support conversations (in-app chat and email tickets).
• OpenAI ChatGPT or another MCP client receives only the specific file chunks, file ids, or file text returned by a tool call initiated in that client.

Frontend telemetry

• CompanyOS uses PostHog EU Cloud to understand public site visits, app page activity, support link clicks, client-side errors, API failure counts, and in-app feedback reports.
• Session replay is enabled only in the signed-in app. Inputs and visible page text are masked, and sensitive file-list areas can be excluded from capture.
• Telemetry excludes file names, folder names, file contents, document text, upload body text, MCP query text, object keys, authorization headers, cookies, bearer tokens, and raw request or response bodies.
• CompanyOS sends Clerk user id and sign-in email for support correlation, plus Clerk organization id and organization slug for workspace grouping. Organization names are not sent to PostHog in this phase.
• Local development hosts and dev.companyos.cc disable PostHog by default to avoid collecting development sessions.

Support and feedback

• When you contact us through the in-app support chat or by emailing support@companyos.cc, your messages — including your name, email address, and the contents of what you send — are processed and stored on our behalf by PostHog EU Cloud so we can operate our support inbox and reply to you.
• A support conversation may be linked to a recording of your app session (see Frontend telemetry) to help us diagnose the issue.
• We do not use the contents of your support messages for advertising. Please do not include passwords, API keys, or confidential file or workspace contents in support messages.
• You can request access to, or deletion of, this data by emailing support@companyos.cc.

Retention

Workspace files are kept while the workspace is active or until an authorized user deletes them. Search index entries are derived from stored files and may persist until the next index sync after deletion. Operational logs are retained only as needed for security, debugging, and service operation.

User controls

• Workspace admins can upload and delete company-shared files.
• Members can upload and delete their own personal files.
• Users can revoke MCP access from the connected client and can request export or deletion by emailing support@companyos.cc.

Boundaries

• CompanyOS does not request payment card data, government identifiers, health data, passwords, API keys, or MFA codes through MCP tools.
• CompanyOS MCP tools are read-only and do not post, publish, send messages, modify files, or delete data.
• CompanyOS does not sell personal data and does not serve advertising in the ChatGPT app surface.

Contact

Questions, deletion requests, export requests, and security concerns can be sent to support@companyos.cc.