Privacy Policy

Last updated: February 26, 2026

Introduction

SVC OS ("we," "our," or "us") operates the SVC OS web application at ops.svcos.app and the SVC OS Chrome Extension (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Information We Collect

Account Information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name and email from Google's OAuth service.

Application Data

Data you create within SVC OS — including projects, tasks, contacts, companies, deals, notes, and time entries — is stored in our database and associated with your organization account.

Chrome Extension

The SVC OS Chrome Extension collects and processes the following:

  • Authentication tokens — stored locally in your browser via chrome.storage.local to keep you signed in. These never leave your device except to authenticate API requests to our server.
  • Page context — when you choose to capture content (e.g., creating a note or contact), the extension reads the current page title, URL, and any text you have selected. On Gmail, it can read email subject, sender, date, and body content when you explicitly use the capture or AI reply features.
  • UI preferences — theme setting, panel position, and expanded/collapsed state are stored locally in your browser.

The extension does not track your browsing history, inject ads, or send data to any third party. All API communication is exclusively with our server at api.svcos.app.

AI Features

When you use AI-powered features (AI Project Manager, email drafting, status reports), relevant project data and email thread content is sent to OpenAI's API for processing. We do not use your data to train AI models. OpenAI's data processing is governed by their enterprise privacy policy.

How We Use Your Information

  • To provide and operate the Service
  • To authenticate your identity and maintain your session
  • To generate AI-powered content at your request
  • To send transactional emails (e.g., password resets, project updates you configure)

Data Storage and Security

Your data is stored on Cloudflare's infrastructure (Workers, D1, and R2) with encryption at rest and in transit. Authentication uses industry-standard session tokens and JWTs. We do not store passwords in plain text.

Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We share data only in the following cases:

  • Service providers — Cloudflare (hosting), OpenAI (AI features), Resend (transactional email), and Google (OAuth authentication, calendar integration)
  • Legal requirements — if required by law, regulation, or legal process
  • With your consent — such as integrations you explicitly connect (e.g., Google Calendar)

Google Calendar Integration

If you connect Google Calendar, we store OAuth tokens (encrypted) to read and create calendar events on your behalf. You can disconnect this integration at any time from the Settings page, which immediately deletes all stored Google tokens.

Cookies and Local Storage

The web application uses a session cookie to maintain your login state. The Chrome Extension uses chrome.storage.local for authentication tokens and UI preferences. We do not use tracking cookies or analytics cookies.

Your Rights

You have the right to:

  • Access, update, or delete your account and data
  • Export your data
  • Disconnect third-party integrations at any time
  • Uninstall the Chrome Extension, which removes all locally stored data

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via email or an in-app notice. The "last updated" date at the top reflects the most recent revision.

Contact

If you have questions about this Privacy Policy or your data, contact us at support@svcos.app.