Privacy policy

1. Scope

This policy covers information collected through the BaOS website, checkout and onboarding forms, paid customer portals, file uploads, scheduling, support, and delivery of a BaOS engagement.

2. Information we collect

• Contact and company information: name, work email, business name, website, and the departments or workflows selected.
• Engagement information: business processes, owners, tools, examples, instructions, review requirements, and materials you choose to provide.
• Uploaded files: completed workflow-audit CSV files and related delivery materials.
• Transaction information: purchased offer, payment status, amount, billing details made available by Stripe, and refund status. BaOS does not receive or store your full payment-card number.
• Scheduling information: meeting time, timezone, invitee details, and scheduling status received through Calendly.
• Technical information: information normally generated when a site is accessed, such as IP address, browser, device, request, security, and diagnostic logs.
• Communications: messages, support requests, feedback, and refund reasons you send us.

3. How we use information

We use information to process purchases; verify paid access; schedule calls; receive and validate uploads; map departments and workflows; create, test, deliver, and support your workspace; send service emails; process refund requests; prevent fraud and misuse; maintain records; and comply with legal obligations.

Customer intake files are not used to train an AI model.

We do not sell personal information or use customer business files for unrelated advertising.

4. Service providers

Information is handled by providers needed to operate the service, including Stripe for payment processing, Calendly for scheduling, Vercel for hosting and private file storage, and Resend for transactional email. If you use a delivered workspace with ChatGPT, Claude, or another AI service, that provider’s privacy terms also apply to information you submit there.

5. Sharing

We share information only with service providers acting for the purposes above, with professional advisers where necessary, when you direct or authorize us, to protect rights and security, or when required by law. If the business is reorganized or sold, information may transfer as part of that transaction subject to this policy.

6. Retention and security

Uploaded customer files are stored in a private Vercel Blob store connected to verified paid access. BaOS uses these files to deliver and support the engagement. Vercel processes them as our storage provider.

We retain information for as long as reasonably necessary to deliver and support the engagement, maintain transaction and tax records, resolve disputes, enforce agreements, and meet legal obligations. Handoff does not automatically delete intake files. You may request deletion through support, although we may retain records required for contracts, security, tax, disputes, or legal obligations. After a completed refund, the portal becomes read-only and further uploads and scheduling are disabled.

We use reasonable administrative and technical safeguards, but no method of transmission or storage is completely secure. Do not submit passwords, payment-card numbers, health records, government identifiers, or other highly sensitive information unless we have expressly agreed on an appropriate handling process.

7. Your choices and requests

You may ask to access, correct, or delete personal information, or object to certain uses, by contacting support. We may need to verify your identity and may retain information when required for contracts, security, tax, dispute, or legal purposes. Depending on where you live, applicable law may provide additional rights and an appeal process.

8. Cookies and external links

The BaOS site may use essential browser storage and hosting technologies required for security and operation. Embedded or linked services such as Stripe and Calendly may use their own cookies and tracking technologies under their privacy policies. External links are not controlled by BaOS.

9. Children

BaOS is a business service and is not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes and contact

We may update this policy as our practices or legal obligations change. The effective date above shows the latest revision. Contact support for privacy questions or requests.