Last updated: October 21, 2026. Pending legal review.
BusinessOS is a product of Nexus Data & AI Limited, a company registered in England and Wales under company number 17066175 ("Nexus", "we", "us"). Nexus is the data controller for personal information processed through BusinessOS, with one exception: when someone sends an enquiry through a website we host for a business, that business is the controller of the enquiry and we process it on the business's behalf. See Websites and domain names we provide below.
This Privacy Policy describes how we collect, use, and share information when you use BusinessOS (the "Services"). The Services are the BusinessOS web app, the BusinessOS apps for iPhone and Android, this website, and the interfaces we publish for connecting other software to your workspace. By using the Services, you agree to the collection and use of information in accordance with this policy.
Information we collect
We collect information in three categories:
- Account information: email, name, organization, authentication identifiers, and your phone number if you connect WhatsApp.
- Workspace data: content you connect, upload, or create in the Services, such as email, calendar, contacts, and documents.
- Usage data: product analytics, request logs, and error reports.
Cookies and analytics on this website
This public website uses PostHog to understand how visitors move through our pages and which of them lead people to try BusinessOS. PostHog processes this data in the EU on our behalf.
Analytics cookies are optional: no analytics cookies or identifiers are stored on your device unless you accept them. The one exception is your answer to this banner itself: if you make a choice, we store that small preference so we can honour it on later visits. Before you answer, we still count the pages you open, but only in a way that cannot follow you: each page load is recorded on its own and cannot be linked to your other page loads, to a later visit, or to you.
If you accept, we store a pseudonymous identifier: a random ID that is not your name, but does let us recognise the same visit across pages and across to the BusinessOS app, which is what lets us tell how many people who read a page go on to sign up. Alongside each event our analytics provider records standard technical details such as your browser and device, the page address and the link you arrived from, and an approximate location derived from your IP address. We never place your name, email address, or any other identifying detail into that record.
If you decline, we record only that choice (a single event noting that you opted out) and send nothing further after that. Analytics does not run on any later visit for as long as that choice stays stored on your device, which is the only thing we keep. You can change your mind at any time by clearing this site's data in your browser, which removes the stored choice and brings the banner back.
We also use HeyCatch to see which links and channels bring visitors here. HeyCatch waits for your answer to the banner: until you accept analytics cookies, it stores nothing on your device and records nothing at all, and if you decline it stays off.
Analytics in the BusinessOS web app
The web app, including its sign-in and sign-up pages, also uses PostHog, so that we can see which parts of the product people use and where they get stuck. We record the pages you open and the buttons and links you click, linked to your account and your workspace once you are signed in. We record none of the text on the page, none of your workspace content, and no part of a web address after the page itself, so search terms and sign-in links stay out of it. We do not record your screen.
The web app also uses HeyCatch on the same terms: the pages you open and what you click, with none of the page text, none of your workspace content and nothing after the page in a web address. So that we can tell which account the activity belongs to, HeyCatch also receives your name and email address once you are signed in.
The web app stores no analytics cookies or identifiers on your device. If you accepted analytics cookies on this website, the app reads the identifier you agreed to there, so that we can connect your visit to the account it led to. Pages that a business shares with its own clients, such as a proposal link or a newsletter confirmation, contain no analytics at all.
The apps for iPhone and Android
The app is another way into the same workspace. It signs you in to the same account and shows the same data, so everything else in this policy applies to it. This section covers what is specific to running on a phone.
Your sign-in session is held in the device's own secure storage: the keychain on iOS, the keystore on Android. We store it so that it can only be read while the device is unlocked, and so that it is left out of device backups. Your passcode or biometric lock is therefore what protects it, and restoring a backup onto a new phone does not carry a live session across. Signing out is what removes it. Deleting the app is not the same thing: on an iPhone the stored session can outlive the app and come back if you reinstall on that same device, so sign out first if you want it gone.
Workspace content is fetched as you use the app and kept only in memory while the app is running. Opening an attachment is the exception: the app writes a copy into the temporary area the operating system manages, so that it can be handed to whichever app you choose to open or share it with. The operating system clears that area on its own schedule. Once you have shared a file into another app, it belongs to that app and this policy no longer governs it.
The app asks for no device permissions. It does not use your location, contacts, photos, camera, or microphone. It contains no analytics or advertising software, reads no advertising identifier, and shows no advertising. The analytics described above are this website's and the web app's, not the phone app's.
Signing in with Google or Microsoft opens your device's own browser rather than a window inside the app, so your password is never typed into our software. We receive the same details from them as we do on the web.
We distribute the apps through the App Store and Google Play. What Apple and Google collect when you download or update the app is covered by their own privacy policies rather than this one. What they pass back to us are counts, such as installs, crashes and ratings, and none of it identifies you.
Websites and domain names we provide
If your business adds a website to BusinessOS, we register a domain name for it and host the website on that domain. This section covers the personal information involved in doing that. "This website" elsewhere in this policy means our own site, not yours.
Registering your domain. We register the domain through Cloudflare Registrar with the owner of your workspace as the registrant, so we pass Cloudflare their name and email address. Cloudflare passes registration details on to the registry that runs your domain ending, as every registrar must.
Public lookup services such as WHOIS and RDAP show some details of every domain. Where the registry allows it, Cloudflare redacts the registrant's name, email address and postal address from them. The domain's dates, name servers and lock status stay public, and so, for most endings, do the registrant's state or province and country. Instead of publishing an email address, Cloudflare lets people send a message about the domain, which it forwards to the registrant. For domains ending in .uk, the registry, Nominet, does not publish the registrant's name or address unless the registrant agrees, but it can release them to law enforcement and to people who show a legitimate reason for asking. Other registries set their own rules.
Hosting your website. Your website is stored and served by Cloudflare, using their R2 storage and Workers, on our behalf. To deliver a page, Cloudflare necessarily processes each visitor's IP address and the details of their request. Cloudflare also keeps a log of each request our serving software handles, for no more than seven days, which we use only to find and fix problems. We keep no other record of visitors to your website.
Our serving software sets no cookies, and the websites we host contain no analytics or advertising code. A website we design individually for you may load content from another provider, such as fonts from Google or posts embedded from Instagram. That provider then receives the visitor's IP address, and an embedded post may set cookies, so a site that embeds one asks the visitor before loading it.
Pictures for your website are kept in our own storage while you edit, and copied to Cloudflare when a version is published. If we design your website individually, each published version is built on GitHub, which keeps a copy of the built pages, including your words and pictures, for one day and then deletes it.
Enquiries through your website. If your website has a contact form, what a visitor sends through it (their name, email address, message, and the page they were on) goes to your BusinessOS workspace. It is saved there as a lead in your contacts, and your team is told about it by notification and by email. That information is your workspace data: your business is its controller and decides what to do with it, and we process it on your behalf. We use the sender's IP address to limit how many messages one person can send, and do not store it with the enquiry. If you sent an enquiry through a business's website and want to know what happens to it, ask that business.
When it ends. If you close your workspace, we take your website offline (normally straight away, and otherwise as soon as our hosting provider allows), switch off automatic renewal of your domain, and email you to explain how to move the domain to another provider before it expires. If the closure is cancelled within the 30-day grace period, we put your website back online and switch automatic renewal back on. Otherwise, when the workspace is erased as described under Data retention, we delete your website's published copy and its images. The registration, and the contact details held with it, stay with Cloudflare and the registry until the domain lapses or you move it.
How we use information
We use the information we collect to operate, maintain, and improve the Services, to provide AI-assisted features within your workspace, and to communicate with you about your account. Where you have asked for it, we also use your email address to send marketing. See Marketing email below.
Marketing email
We send marketing email only to people who have asked for it. You can ask by ticking the box when you sign up, by answering the one-off prompt inside the product, or from the Notifications tab in Settings. The box is never ticked for you.
Our lawful basis is your consent, and you can withdraw it at any time: use the unsubscribe link at the bottom of any marketing email, or untick the option in Settings under Notifications. Both take effect straight away.
This choice belongs to you rather than to your workspace. Nobody else on your team can make it for you, and it is separate from the morning briefing, which is a product feature you control in the same place.
Withdrawing consent does not stop email about your account. Password resets, team invitations and billing notices are not marketing, and we will keep sending them for as long as you have an account.
When you unsubscribe we keep a record of your email address and the fact that you opted out. Deleting it outright is the one thing that would let us contact you again by mistake, so we retain the minimum needed to honour your choice. We also keep a record of when consent was given or withdrawn and what wording you were shown, which is how we can demonstrate that we had your permission. You can ask us to remove even this by emailing [email protected].
We use Resend to send marketing email and to hold the mailing list. If you are on the list, your email address is shared with them for that purpose.
How we share information
We do not sell your personal information. We share information only with service providers under contract (e.g., cloud hosting, payment processing, AI model providers) under strict confidentiality obligations, and where required by law. If you add a website, we also share the details described above with Cloudflare, which registers your domain and hosts your website.
AI and third-party services
Providing the Services depends on a suite of third-party services, including AI services, cloud hosting, and other infrastructure. To deliver AI-assisted features we send relevant context to the AI services we use. We select these services at our discretion, and we may add, replace, or remove them as the Services evolve.
We make that choice subject to one condition: your data is never used to train AI models. We will not use a service that trains on your data, and this applies to every service we use, now or in the future.
Agent actions are recorded in the activity log within the product, which shows what the agent did and whether it acted autonomously or on your behalf.
Data retention
We retain your data for as long as your workspace is active.
The owner of a workspace can close it at any time. Closing a workspace schedules it for deletion: 30 days later we permanently erase its data, including files you uploaded, the email and calendar content you connected, your website and its images, and the sign-in accounts of everyone in it. The 30 days are a grace period: if you close a workspace by mistake, contact us within that window and we can stop the deletion. Once it has run, it cannot be undone.
Two things outlive that deletion, neither of which identifies you or contains your content: a record that the workspace existed, and a log of when actions took place in it, stripped of all personal information. Separately, our backups may hold data for a further period before they expire on their own schedule.
You can also delete your own account without closing the workspace, from the Profile tab in Settings. That takes you out of every workspace you belong to and erases your name, email address and phone number straight away. It has no grace period. The workspaces themselves stay, and so does the work you did in them, no longer carrying your details. If you are the only owner of a workspace you are asked to close it or hand it over first, because it holds other people's data as well as yours.
If you would rather we did it, or you want something the screen does not cover, email [email protected] and we will action it within 30 days.
Your rights
Depending on your jurisdiction you may have the right to access, correct, delete, or port your personal information. Contact us at [email protected] to exercise these rights.
Security
We use industry-standard encryption in transit and at rest. Workspace data is isolated per organization. Report security concerns to [email protected].
Contact
Questions about this policy? Email [email protected], or write to Nexus Data & AI Limited (company number 17066175).