Privacy Policy

Effective Date: March 15, 2026

Introduction

EmergentOS Inc. (“EmergentOS,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our EmergentOS platform and services (collectively, the “Services”). This Privacy Policy is hosted at emergentos.ai/privacy.

Information We Collect

Account Information

When you register for an account, we collect:

• Email address
• Name
• Company name (for business accounts)
• Password (stored using industry-standard hashing)
• Billing information (processed through third-party payment processors)

Usage Data (Metadata)

We collect technical and usage information that does not include your content:

• Device information
• IP address
• Log data
• Performance metrics
• Feature usage statistics
• Integration connection data

Your Content

Data that you manually upload directly to our secure vault is encrypted using your encryption keys before leaving your device; we store this encrypted content but cannot access, read, or process it. However, to provide our core AI-driven features (such as the Chief of Staff and Briefing Agents), data fetched via authorized third-party integrations (like Google Workspace) must be actively processed by our systems and our secure Large Language Model providers (for example, Google Gemini).

Google User Data

When you connect your Google account to EmergentOS, we may access certain Google user data based on the permissions you grant. This may include:

Gmail

Email messages, metadata, labels, and attachments that you authorize EmergentOS to access for the purpose of surfacing priorities, generating briefings, and organizing your communications within the platform.

Google Calendar

Calendar events, schedules, and attendee information for the purpose of time management, scheduling intelligence, and priority surfacing within the platform.

Google Drive

Documents, files, and metadata that you explicitly authorize for the purpose of knowledge management, document organization, and contextual intelligence within the platform.

Google Contacts

Contact information for the purpose of relationship intelligence and communication prioritization within the platform.

We access only the Google data scopes that you explicitly authorize during the OAuth consent flow. You can review and revoke our access at any time through your Google Account permissions page at myaccount.google.com/permissions.

How We Use Your Information

We use the information we collect to:

• Provide and improve the Services
• Create and manage your account
• Process transactions
• Send technical notices and security alerts
• Respond to support requests
• Monitor usage trends
• Detect security threats
• Comply with legal obligations
• Develop new features

How We Use Google User Data

Google user data is used exclusively to provide and improve user-facing features that are prominent in the EmergentOS platform, including:

• Surfacing priority communications and action items from your email
• Generating executive briefings and daily digests
• Providing scheduling intelligence and calendar management
• Organizing and contextualizing documents for knowledge management
• Enabling natural-language search across your connected services

We do not use Google user data for any purpose other than providing or improving the user-facing features described above.

Google API Services Limited Use Disclosure

EmergentOS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We limit our use of Google user data to providing or improving user-facing features that are prominent in the EmergentOS platform’s user interface.
• We do not transfer Google user data to third parties except: (a) to provide or improve user-facing features that are visible and prominent in EmergentOS and only with the user’s consent; (b) for security purposes (for example, investigating abuse); (c) to comply with applicable laws; or (d) as part of a merger, acquisition, or sale of assets of the developer after obtaining explicit prior consent from the user.
• We do not allow humans to read Google user data unless: (a) we first obtained the user’s affirmative agreement to view specific messages, files, or other data; (b) it is necessary for security purposes (for example, investigating a bug or abuse); (c) it is necessary to comply with applicable law; or (d) the data (including derivations) is aggregated and used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not transfer or sell Google user data to third parties like advertising platforms, data brokers, or any information resellers.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• Our employees, agents, contractors, and successors comply with this Google API Services User Data Policy.

How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service providers (cloud hosting, payment processors, analytics, and secure AI model providers)
• In connection with business transfers
• When required by law

We do not share Google user data with third parties except as described in the Google API Services Limited Use Disclosure section above.

Data Security

We implement appropriate technical and organizational security measures, including:

• TLS 1.3 for data in transit
• AES-256 encryption at rest
• Regular security assessments
• Strict access controls
• Active security monitoring

Where applicable for direct user uploads, we utilize zero-knowledge encryption architecture. Data processed by our AI models is strictly used to generate your requested insights, is protected in transit and at rest, and is never used to train foundational AI models.

Data Retention

• Account information: Retained for the duration of your account plus any legally required retention period.
• Encrypted content: Retained until you delete it or close your account (followed by a 30-day grace period).
• Usage data: Retained for up to 24 months for analytics purposes.
• Billing records: Retained for 7 years for tax and legal compliance.
• Google user data: Retained only for as long as necessary to provide the features you have authorized. Deleted within 30 days of you revoking access or disconnecting your Google account.

Your Rights

You may:

• Access and update your account information
• Export your data
• Delete your account
• Opt out of marketing communications

For GDPR (EU/UK) and CCPA (California), additional rights apply including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise any of these rights, contact us at privacy [at] emergentos.ai.

Revoking Google Account Access

You may revoke EmergentOS’s access to your Google account at any time by visiting myaccount.google.com/permissions and removing EmergentOS from the list of authorized apps. Upon revocation, EmergentOS will cease accessing your Google user data and will delete cached Google user data within 30 days.

Children’s Privacy

The Services are not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the “Effective Date.” If we make changes that materially affect how we use Google user data, we will prompt you to consent to the updated Privacy Policy before continuing to access your Google data through EmergentOS.

Contact Us

• Email: privacy [at] emergentos.ai