Privacy Policy

1. Who we are

StealthOS is an AI business operating system operated by Rope Digital LLC ("Rope Digital", "we", "us"). This policy explains how we handle personal data on www.stealthos.io (the "website") and in the StealthOS app at app.stealthos.io (the "app").

Questions or requests about your data: stealthos.io@gmail.com.

2. What we collect

• Waitlist, contact and demo forms: your name, email address, company, team size, message, preferred demo times, time zone, and the page or referring site you came from.
• Demo bookings: when you book a demo through our Cal.com calendar, Cal.com collects your name, email address, chosen time and any notes, and creates a Google Calendar event with a Google Meet link.
• App accounts: your name, email address, password (stored hashed by our authentication provider), profile photo, job title and phone number, and your business details such as logo, name, website, email, phone, address and brand colour.
• Content you put in the app: for example companies, contacts, leads, deals, proposals, projects, tasks, invoices, documents, SOPs, content, candidates, notes and messages. This often includes personal data about your own clients and contacts.
• Connected services: if you connect email, WhatsApp Business, social accounts, Notion or an AI client, we store the settings and access needed to act on your behalf.
• Technical data: our hosting provider records standard server logs (such as IP address, browser and time of request) to run and secure the service.

3. Cookies and tracking

The website doesn't use advertising or analytics cookies, and we don't sell or share your data for advertising. The app stores your sign-in session and a few preferences in your browser's local storage so you stay signed in. If we add analytics later, we'll update this policy first.

4. How we use it

• To run the waitlist, reply to messages and arrange demos, including a confirmation email and, if you joined the waitlist, emails about your access. Newsletter and waitlist emails include an unsubscribe link.
• To provide the app: storing your workspace, running the features you use, and sending the emails and messages you or your automations send.
• To run AI features you ask for, such as drafting, scoring, summarising and writing proposals.
• To keep the service secure, prevent abuse, fix problems and improve the product.
• To meet legal obligations and enforce our terms.

5. AI processing

When you use an AI feature, the relevant content (for example a deal, your Company Memory or a prospect's public website) is sent to our AI provider to produce the result. We use Anthropic's API, whose commercial terms don't allow your inputs and outputs to be used to train its models. We don't use your workspace content to train AI models.

6. Who we share it with

We use these service providers (sub-processors) to run StealthOS. They process data only on our instructions:

• Vercel: website and app hosting.
• Supabase: database, file storage and authentication.
• Resend: sending email.
• Anthropic: AI features.
• Google (PageSpeed Insights): website audits in AI Website Proposals. Only the website address you enter is sent.
• Cal.com and Google Calendar/Meet: demo scheduling and video calls.
• YouTube (Google): our demo video is embedded in privacy-enhanced mode (youtube-nocookie.com) and only loads when you scroll to it. If it can't play, a copy hosted on our own site plays instead.
• Meta (WhatsApp Business), social platforms and Notion: only if you connect them, to send or fetch what you ask for.
• Stripe: payment processing, once paid plans open.

7. Your clients' data in the app

For personal data you store about your own clients, contacts and candidates, you're the controller and we're your processor: we handle it only to provide the app to you. You're responsible for having a lawful basis to store and contact those people. If you need a data processing agreement, email us.

8. Where data is stored

Our providers store and process data in the United States and other countries where they operate. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses for international transfers.

9. How long we keep it

• Waitlist and enquiries: until you ask us to delete them, or once they're no longer needed to reply or offer you access.
• App data: for as long as your workspace is active. When a workspace is closed, we delete its data within 90 days, except where we must keep records by law (for example billing records).
• Backups and logs: kept for a limited period by our providers, then overwritten.

10. Security

Each workspace's data is isolated with database row-level security, traffic is encrypted in transit (HTTPS), passwords are never stored in plain text, and API access keys are stored only as fingerprints. No system is perfectly secure; if a breach affects your personal data, we'll tell you without undue delay.

11. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent. You can unsubscribe from emails at any time with the link in each email. Email stealthos.io@gmail.com and we'll reply within 30 days. You can also complain to your local data protection authority.

If you're a client or contact of a StealthOS customer, please contact that business first, as they control that data. We'll help them respond.

12. Children

StealthOS is a business tool and isn't directed at anyone under 18. We don't knowingly collect children's data.

13. Changes

We'll update this page when our practices change and change the date at the top. For significant changes affecting app customers, we'll also email account owners.