Privacy Policy
BusinessOS is a product of Nexus Data & AI Limited, a company registered in England and Wales under company number 17066175 ("Nexus", "we", "us"). Nexus is the data controller for personal information processed through BusinessOS.
This Privacy Policy describes how we collect, use, and share information when you use BusinessOS (the "Services"). By using the Services, you agree to the collection and use of information in accordance with this policy.
Information we collect
We collect information in three categories:
- Account information: email, name, organization, and authentication identifiers.
- Workspace data: content you connect, upload, or create in the Services, such as email, calendar, contacts, and documents.
- Usage data: product analytics, request logs, and error reports.
Cookies and analytics on this website
This public website uses PostHog to understand how visitors move through our pages and which of them lead people to try BusinessOS. PostHog processes this data in the EU on our behalf.
Analytics cookies are optional: no analytics cookies or identifiers are stored on your device unless you accept them. The one exception is your answer to this banner itself — if you make a choice, we store that small preference so we can honour it on later visits. Before you answer, we still count the pages you open, but only in a way that cannot follow you: each page load is recorded on its own and cannot be linked to your other page loads, to a later visit, or to you.
If you accept, we store a pseudonymous identifier — a random ID that is not your name, but does let us recognise the same visit across pages and across to the BusinessOS app, which is what lets us tell how many people who read a page go on to sign up. Alongside each event our analytics provider records standard technical details such as your browser and device, the page address and the link you arrived from, and an approximate location derived from your IP address. We never place your name, email address, or any other identifying detail into that record.
If you decline, we record only that choice — a single event noting that you opted out — and send nothing further after that. Analytics does not run on any later visit for as long as that choice stays stored on your device, which is the only thing we keep. You can change your mind at any time by clearing this site's data in your browser, which removes the stored choice and brings the banner back.
How we use information
We use the information we collect to operate, maintain, and improve the Services, to provide AI-assisted features within your workspace, and to communicate with you about your account.
How we share information
We do not sell your personal information. We share information only with service providers under contract (e.g., cloud hosting, payment processing, AI model providers) under strict confidentiality obligations, and where required by law.
AI and third-party services
Providing the Services depends on a suite of third-party services, including AI services, cloud hosting, and other infrastructure. To deliver AI-assisted features we send relevant context to the AI services we use. We select these services at our discretion, and we may add, replace, or remove them as the Services evolve.
We make that choice subject to one condition: your data is never used to train AI models. We will not use a service that trains on your data, and this applies to every service we use, now or in the future.
Agent actions are recorded in the activity log within the product, which shows what the agent did and whether it acted autonomously or on your behalf.
Data retention
We retain your data for as long as your workspace is active.
The owner of a workspace can close it at any time. Closing a workspace schedules it for deletion: 30 days later we permanently erase its data, including files you uploaded, the email and calendar content you connected, and the sign-in accounts of everyone in it. The 30 days are a grace period — if you close a workspace by mistake, contact us within that window and we can stop the deletion. Once it has run, it cannot be undone.
Two things outlive that deletion, neither of which identifies you or contains your content: a record that the workspace existed, and a log of when actions took place in it, stripped of all personal information. Separately, our backups may hold data for a further period before they expire on their own schedule.
You can also ask us to erase your personal information without closing your workspace. Email [email protected] and we will action it within 30 days.
Your rights
Depending on your jurisdiction you may have the right to access, correct, delete, or port your personal information. Contact us at [email protected] to exercise these rights.
Security
We use industry-standard encryption in transit and at rest. Workspace data is isolated per organization. Report security concerns to [email protected].
Contact
Questions about this policy? Email [email protected], or write to Nexus Data & AI Limited (company number 17066175).