Bosmos

Privacy Policy

Effective Date: May 8th, 2026

This Privacy Policy explains how Bosmos, Inc. (“Bosmos,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our websites, applications, software, integrations, AI features, workflows, and related services (collectively, the “Services”). Bosmos helps users identify, organize, and act on business opportunities across their connected work systems. This may include email, calendar, CRM, invoicing, payment, and other business tools that you choose to connect. We take privacy seriously. We use your information to provide and improve Bosmos, not to sell your data.

1. Information We Collect

We collect information in the following ways. Information You Provide When you create an account, use Bosmos, configure your profile, or contact us, you may provide information such as:

name
email address
company name
role or title
business description
services or offerings
ideal customer profile
target industries or roles
workflow preferences
writing style preferences
excluded contacts or domains
prompts, commands, instructions, or messages you enter
support communications
billing and subscription information We use this information to personalize Bosmos to your business, goals, communication style, and workflow needs. Information From Connected Email Accounts If you choose to connect an email account, such as Gmail or Outlook, Bosmos will request access through the applicable provider’s authorization process. Before you connect an account, the provider will show the permissions being requested. Depending on the permissions you approve and the features you enable, Bosmos may access email-related information such as:
email address
sender and recipient information
subject lines
timestamps
thread history
message metadata
message content or excerpts needed to provide the Services
labels, folders, or mailbox structure where applicable
reply history and conversation context Bosmos uses this information to provide features such as opportunity detection, relationship summaries, evidence snippets, Deep Search, suggested replies, writing-style learning, and workflow support. Where Bosmos only requires read access for a feature, we use read access. If you enable features that require additional permissions, such as sending messages or operating workflows, we may request additional permissions through the applicable provider. Information From Other Connected Tools If you connect additional business tools, Bosmos may receive information from those tools based on the permissions you grant. These tools may include:
calendars
CRMs
invoicing tools
payment-related tools
communication platforms
business productivity tools Depending on the integration, Bosmos may access information such as calendar events, meeting details, contact records, deal status, invoice status, payment status, customer information, activity history, and workflow outcomes. We use this information only to provide, personalize, and improve the Services you enable. Product Usage and Analytics Information We collect product usage information to understand how Bosmos is used, improve the product, troubleshoot issues, and make the Services more reliable. This may include:
pages viewed
features used
buttons clicked
onboarding steps completed
commands submitted
workflows started or completed
session activity
device type
browser type
operating system
approximate location derived from IP address
timestamps
error and performance data We use PostHog for product analytics and user behavior tracking. PostHog may use cookies, local storage, session storage, or similar technologies depending on our configuration and your browser settings. Billing Information If you purchase a subscription, credits, add-ons, or other paid Services, payment information is processed by our payment processor. We may receive billing-related information such as:
billing name
billing email
billing address
plan type
subscription status
payment status
invoice history
transaction history
card brand and last four digits We do not store full payment card numbers unless expressly stated by the payment processor. Technical and Security Information We may collect technical information to operate and protect the Services, including:
IP address
device identifiers
login timestamps
authentication events
access logs
API activity
error logs
integration connection status
security events

2. How We Use Information

We use information to provide, secure, personalize, and improve Bosmos. This includes using information to:

create and manage accounts
authenticate users
connect authorized integrations
perform initial scans
perform Deep Searches
identify opportunities and relationship signals
classify contacts and conversations
generate summaries, evidence, and recommendations
generate draft messages or suggested replies
support workflows and autonomous actions you enable
maintain relationship and opportunity history
learn and apply writing-style preferences
improve product quality, accuracy, and performance
provide customer support
process billing and subscriptions
prevent abuse, fraud, or security threats
enforce our Terms of Service
comply with legal obligations

3. AI Features and Processing

Bosmos uses AI to provide features such as:

opportunity detection
relationship summaries
contact classification
evidence extraction
Deep Search
suggested replies
writing-style learning
recommended next actions
workflow execution support To provide these features, Bosmos may process relevant prompts, instructions, email excerpts, conversation context, user profile information, and connected integration data. AI-generated outputs may require review. You are responsible for reviewing, editing, approving, sending, or relying on AI-generated outputs unless you have enabled autonomous workflows. Bosmos does not sell your email content, connected account data, prompts, or AI outputs. Bosmos does not use connected email content for advertising.

4. Google API Services

If you connect a Google account, Bosmos’ use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. Bosmos uses Google user data only to provide or improve user-facing features that you request or enable. Bosmos does not:

sell Google user data
use Google user data for advertising
allow advertisers to access Google user data
use Google user data for unrelated purposes Human access to Google user data is limited to situations where it is necessary for support, security, legal compliance, abuse investigation, or where you have given explicit permission. You may revoke Bosmos’ access to your Google account through your Google account permissions or through Bosmos account settings where available.

5. Microsoft and Outlook Data

If you connect a Microsoft, Outlook, or Microsoft 365 account, Bosmos will request access through Microsoft’s authorization and consent process. The permissions requested will be shown to you before you authorize access. Bosmos uses Microsoft account data only to provide the Services you request or enable, such as reading relevant mailbox data, analyzing conversations, generating drafts, surfacing opportunities, supporting workflows, and interacting with connected Microsoft services where authorized. You may revoke Bosmos’ access through your Microsoft account settings or through Bosmos account settings where available.

6. Cookies and Similar Technologies

Bosmos and our service providers may use cookies, local storage, session storage, pixels, SDKs, and similar technologies to operate, secure, analyze, and improve the Services. We use these technologies to:

keep users signed in
remember preferences
understand product usage
improve onboarding
measure feature performance
detect bugs and errors
support security and fraud prevention We use PostHog for product analytics and user behavior tracking. PostHog may use cookies or similar identifiers depending on our configuration and your browser settings. You can control cookies through your browser settings. If you disable certain technologies, some parts of Bosmos may not function properly. Where required by law, we will provide cookie notices, consent options, or opt-out controls.

7. How We Share Information

We do not sell your personal information. We may share information in the following limited circumstances. Service Providers We may share information with service providers that help us operate Bosmos, including providers for:

cloud hosting
databases
analytics
AI processing
payments
email and communications
logging and monitoring
customer support
security and fraud prevention These providers are authorized to use information only as needed to provide services to Bosmos. Connected Integrations If you connect third-party tools, Bosmos may exchange information with those tools as needed to provide the Services you enable. For example, if you connect a calendar, Bosmos may use calendar data to support scheduling workflows. If you connect an invoicing tool, Bosmos may use invoice status to support invoice-related workflows. Legal, Safety, and Compliance We may disclose information if we believe it is reasonably necessary to:
comply with law or legal process
enforce our Terms of Service
protect Bosmos, users, or others
investigate fraud, abuse, or security issues
prevent harm
protect rights, property, or safety Business Transfers If Bosmos is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to appropriate protections.

8. What We Do Not Do

Bosmos does not:

sell your personal information
sell your email content
use connected email content for advertising
allow advertisers to access your connected account data
access connected accounts without your authorization
process connected account data beyond what is needed to provide the Services you enable
knowingly collect personal information from children under 13

9. Data Retention

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, maintain security, enforce agreements, and support legitimate business needs. Retention periods may depend on:

account status
subscription status
connected integrations
workflow activity
legal requirements
security needs
support obligations
billing requirements You may request deletion of your account or certain personal information by contacting us. After deletion, some information may remain for a limited period in backups, logs, billing records, legal records, or security systems where necessary.

10. Your Controls and Choices

Depending on your account and plan, you may be able to:

update your account profile
manage connected integrations
revoke email access
manage workflow settings
manage notification preferences
manage cookie preferences where available
request access to your personal information
request correction of inaccurate information
request deletion of personal information
cancel your subscription You can also revoke access directly through Google, Microsoft, or other connected provider account settings.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include:

encryption in transit
access controls
authentication controls
secure cloud infrastructure
logging and monitoring
least-privilege access practices
vendor review
incident response procedures No system is perfectly secure, but we work to protect user information using safeguards appropriate to the nature of the Services.

12. International Data Processing

Bosmos is operated from the United States. If you access the Services from outside the United States, your information may be processed in the United States or other countries where we or our service providers operate. Where required, we use appropriate safeguards for international data transfers.

13. Privacy Rights

Depending on where you live, you may have certain privacy rights, including the right to:

access personal information
correct inaccurate personal information
delete personal information
restrict or object to certain processing
request portability
opt out of certain uses
withdraw consent where processing is based on consent
appeal certain privacy decisions To exercise privacy rights, contact us using the information in the “Contact Us” section. We may need to verify your identity before fulfilling certain requests. We will not discriminate against you for exercising applicable privacy rights.

14. California Privacy Notice

If you are a California resident, this section provides additional information under applicable California privacy laws. Categories of Personal Information We May Collect We may collect:

identifiers, such as name, email address, account ID, or IP address
commercial information, such as subscription and billing history
internet or network activity, such as product usage and log data
professional or business information, such as company, role, services, and goals
user-generated content, such as prompts, commands, drafts, workflow instructions, and support messages
connected account information, such as authorized email, calendar, CRM, or invoicing data
inferences, such as opportunity classifications, writing-style preferences, and relationship signals How We Use This Information We use this information for the purposes described in this Privacy Policy, including providing the Services, personalization, analytics, security, billing, support, and legal compliance. Sharing We may share information with service providers and connected integrations as described in this Privacy Policy. We do not sell personal information. We do not knowingly share personal information for cross-context behavioral advertising. California Rights California residents may have the right to request access, correction, deletion, portability, and information about certain data practices. To exercise these rights, contact us using the information below.

15. EEA, UK, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we process personal information based on one or more legal bases, including:

performance of a contract
your consent
legitimate interests
legal obligations Our legitimate interests may include providing and improving the Services, securing the platform, preventing abuse, understanding product usage, and communicating with users. Where consent is required, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

16. Children’s Privacy

Bosmos is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it.

17. Business and Workspace Accounts

If you use Bosmos through a business, organization, or workspace, that organization or its administrators may have access to certain information associated with the account, including users, settings, connected integrations, usage, billing, workflows, and outputs. Your organization may have its own policies governing your use of Bosmos.

18. Information About Other People

When you connect an email account or other communication tool, Bosmos may process information about people who communicate with you. Bosmos processes this information only to provide the Services to you, such as identifying opportunities, summarizing relationship context, generating drafts, and supporting workflows. You are responsible for ensuring that your use of Bosmos complies with laws and obligations that apply to your communications and business relationships.

19. Autonomous Workflows

If you enable autonomous workflows, Bosmos may take actions through connected systems based on your settings, permissions, and integrations. Depending on the features you enable, these actions may include:

preparing or sending messages
creating reminders
updating workflow status
scheduling or coordinating meetings
preparing invoice-related actions
tracking replies or outcomes
moving opportunities forward Autonomous workflows operate only within the permissions and settings you configure. You can modify or disable autonomous workflow settings where available.

20. Communications From Bosmos

We may send administrative, transactional, product, billing, security, or service-related messages. We may also send optional marketing communications. You can opt out of marketing emails by using the unsubscribe link or contacting us. Even if you opt out of marketing communications, we may still send service-related messages.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, in-product notice, or by posting the updated Privacy Policy on our website. The updated Privacy Policy will be effective as of the date stated at the top unless otherwise required by law. Your continued use of the Services after the updated Privacy Policy becomes effective means you accept the updated Privacy Policy.

22. Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact us at: Bosmos, Inc. Email: info@bosmos.org Website: www.Bosmos.ai