Privacy Policy

This Privacy Policy applies to the Connector OS website, progressive web application, subscription services, and related support interactions. Connector OS is a relationship intelligence tool that helps users organize professional contacts, projects, follow-ups, introductions, and communications.

By using Connector OS, you acknowledge the practices described here. If you use Connector OS for an organization, you are responsible for ensuring that your collection and use of contact information is lawful and consistent with your organization's obligations.

We process account information such as your name, email address, authentication records, subscription status, and service preferences. We also process relationship records you provide, including contact names, email addresses, phone numbers, organizations, titles, notes, capabilities, projects, reminders, and introduction history.

The primary application datastore is hosted in Supabase. Records are associated with the authenticated user and are accessed through user-scoped application controls. Authentication and database infrastructure may also generate security, access, and operational metadata.

We also process limited technical information needed to operate and secure the service, such as browser and device characteristics, IP-derived security data, timestamps, error logs, and session identifiers. Connector OS uses cookies or similar browser storage for authentication, security, and preferences, not for third-party behavioral advertising.

If you authorize an integration, Connector OS may receive and synchronize contact and calendar information through Microsoft Graph, the Google People API, and Google Calendar APIs. This may include contact identifiers, names, email addresses, phone numbers, organization information, notes, calendar event identifiers, and provider modification timestamps.

OAuth access and refresh tokens are stored in the user-scoped integrations datastore so that requested synchronization can continue. You can disconnect an integration from Settings. Disconnecting stops future access but does not automatically delete records previously synchronized into Connector OS.

Connector OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

When you request an email or SMS workflow, Connector OS sends the necessary recipient, sender, and message information to delivery providers. Email delivery is processed through Resend. SMS delivery is processed through Microsoft Azure Communication Services. These providers process message content and delivery metadata to transmit, secure, troubleshoot, and report on the communication.

You are responsible for having an appropriate legal basis and any required consent before sending a communication through Connector OS. We do not sell contact information or use your relationship records to advertise to your contacts.

Connector OS uses Hindsight Cloud to create semantic memory and retrieval capabilities from selected relationship records. Contact and project context may be processed to support search, recall, summaries, and relationship intelligence. Hindsight Cloud acts as a service provider for these functions and receives only the data needed to provide them.

Automated or semantic outputs may be incomplete or inaccurate. They should be reviewed before being used for legal, financial, employment, healthcare, or other consequential decisions.

• Provide, synchronize, secure, and support Connector OS.
• Authenticate users and enforce subscription entitlements.
• Deliver user-requested emails, SMS messages, reminders, and calendar events.
• Deduplicate, restore, and reconcile relationship records across connected services.
• Monitor reliability, prevent abuse, investigate errors, and improve performance.
• Comply with applicable law and enforce our agreements.

We disclose information to infrastructure and processing providers only as needed to operate the service. These providers currently include Supabase, Google, Microsoft, Resend, Azure, Hindsight Cloud, Stripe for billing, and Sentry for privacy-scrubbed reliability monitoring. Each provider processes information under its own terms and privacy commitments.

Stripe processes payment-card information directly. Connector OS receives billing status, plan, customer, and transaction references needed to administer subscriptions, but does not store complete payment-card numbers.

We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction, or with your direction or consent. We do not sell personal information.

We retain account and relationship information while your account is active and as reasonably necessary to provide the service, resolve disputes, maintain security, meet legal obligations, and enforce agreements. Backup, billing, and security records may remain for a limited period after deletion.

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, user-scoped database operations, encrypted transport, OAuth controls, and monitored background processing. No system can guarantee absolute security.

Connector OS and its providers may process information in countries other than your own. Where required, processing is supported by appropriate contractual or legal safeguards.

You can review and edit relationship records in the application, disconnect Google or Microsoft integrations, and control optional communication workflows. Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection concerning personal information.

To make a privacy request, contact support@connector-os.app. We may need to verify your identity before completing a request.

Connector OS is intended for business and professional use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this policy as the service, providers, or legal requirements change. Material revisions will be identified by a new last-updated date and, when appropriate, an in-product or email notice.