Privacy Policy

cOS is an enterprise platform. Your organization — not you personally — is the customer, and it decides what data reaches the platform, who inside it may see that data, and what the platform may do with it. Your organization's enterprise agreement with cOS Technologies, Inc., together with its data processing terms, is the document that governs that data. This policy explains, in plain language, how the platform handles data; where it and your enterprise agreement differ, the agreement controls.

Practically, that means your organization acts as the controller of its data and cOS acts as its processor: we handle enterprise data on your organization's documented instructions, not for our own independent purposes.

The platform processes four broad categories of data.

• Account and identity data — name, work email, organization, tenant, assigned roles and permissions. This comes from your organization's identity provider and is what authenticates you and enforces access control.
• Enterprise data — the files, records, database connections and integrations your organization uploads or connects to the platform. Your organization chooses what this includes.
• User-generated content — what you create while working in cOS: prompts, chat messages, uploaded files, workflow and agent definitions, and the outputs those produce.
• Technical and usage data — log, device and diagnostic records such as request timestamps, feature usage, and error traces, used to operate, secure, support and measure the reliability of the service.

We use the data above to:

• provide the platform and the AI features your organization has enabled;
• authenticate users and enforce the roles and permissions your organization assigns;
• keep the service secure — detecting abuse, investigating incidents, and preventing unauthorized access;
• provide support to your organization, including diagnosing issues it reports;
• meet legal and regulatory obligations; and
• maintain and improve the reliability and quality of the service.

We do not sell personal data, and we do not use enterprise data to target advertising.

Each organization's data lives in its own tenant and is isolated from every other tenant. Within a tenant, access follows the roles and permissions your organization assigns, so users see only what they are entitled to see — the platform enforces those permissions on every request, not just in the interface.

Your organization's admins provision and deprovision users, grant and revoke permissions, and can see how the platform is being used inside their tenant. Access by cOS personnel is limited to what is needed to run and support the service, and is restricted, logged and reviewed.

cOS is an open platform: your organization can install mini-apps and connect outside systems, and some of these are built by third parties rather than by cOS Technologies, Inc. When you use one, data you send to it — your prompts, the records it is given, the actions you ask it to take — is processed by that app and by any service it connects to.

Your organization's admins control which mini-apps and integrations are available in their tenant. A third party's handling of data is governed by that third party's own terms, not by this policy, so review them before connecting a system that holds sensitive data.

Data is encrypted in transit and at rest. Access to production systems is restricted to authorized personnel, granted on a least-privilege basis, and logged. We monitor for abuse and unauthorized access and maintain processes for responding to security incidents, including notifying affected organizations as required by the enterprise agreement and applicable law.

No platform can promise perfect security. Your organization's own configuration — who it grants access to, what it connects, and what it uploads — is a meaningful part of the overall picture.

We keep data for as long as it is needed to provide the service to your organization, and afterwards only as long as required for legitimate business or legal reasons such as security, dispute resolution, and regulatory obligations. Specific retention periods, and any deletion or export rights on termination, are set by your enterprise agreement.

Content you delete in the product stops being available to users in your tenant immediately; backups and logs age out on their own schedule.

We share data only in these circumstances:

• Service providers — cloud infrastructure, model hosting and similar vendors that we engage to run the platform, bound by contract to handle data only on our instructions and to protect it;
• Your organization — admins and other authorized users within your tenant, per the permissions your organization has set;
• Third-party mini-apps and integrations your organization chooses to connect, as described above;
• Legal and safety — where we are required by law, or where it is necessary to investigate abuse or protect the rights and safety of people and the platform; and
• Corporate transactions — in a merger, acquisition or sale of assets, subject to the protections in this policy.

The platform may process and store data in countries other than the one your organization operates in, including where our infrastructure providers operate. Where data crosses borders, transfers are made under appropriate safeguards, and any data residency commitments your organization has are set out in its enterprise agreement.

Depending on where you live, you may have rights to access, correct, export or delete personal data about you, or to object to or restrict how it is processed.

Because cOS processes enterprise data on your organization's instructions, those requests are handled by your organization rather than by us directly. Start with your organization's admin or privacy team — they can act on your request, and they can ask us for assistance under the enterprise agreement. If we receive a request from an individual user, we will refer it to the relevant organization.

We may update this policy as the platform evolves. When we make a material change we update the effective date above and communicate the change to your organization's admins, who are responsible for passing it on to their users. Continued use of the platform after a change means the updated policy applies.

See also our Terms of Service.