BizOS ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our platform at trybizos.com. It also describes your rights and choices regarding your data.
BizOS acts as a data processor on behalf of our business clients (data controllers). When our clients use BizOS to interact with their own customers, those business clients are responsible for the lawful basis of processing their end-customers' data.
1. Information We Collect
1.1 Information You Provide
- • Account Information: Name, email address, company name, phone number, and billing information
- • Business & CRM Data: Customer contacts, companies, deals, conversation logs, campaign data, and analytics
- • AI Agent Configuration: Agent prompts, workflows, personas, and automation settings you create within the platform
- • Voice & Communication Data: Voice call recordings, transcripts, and call metadata (phone numbers, duration, timestamps) generated through our voice agent features
- • End-Customer Data: Information about your customers that you import or that is collected through your BizOS-powered agents, forms, and chat widgets
- • Integration Credentials: OAuth tokens and API credentials for connected services (e.g., Google Calendar, email providers)
- • Communications: Messages you send to our support team or through the platform
1.2 Information Collected Automatically
- • Usage Data: Pages visited, features used, time spent, and interaction patterns
- • Call Metadata: Call duration, timestamps, and phone numbers associated with voice agent interactions
- • Device Information: IP address, browser type, device type, and operating system
- • Cookies & Tracking: We use cookies and similar technologies to enhance your experience and analyze platform usage (see our Cookie Policy for details)
2. How We Use Your Information
We use the information we collect to:
- • Provide, operate, and maintain our services
- • Process transactions and send related information including invoices and receipts
- • Power AI agent features including scheduling, voice calls, CRM automation, and campaign management
- • Improve platform functionality and performance through aggregated usage analysis
- • Send administrative information, product updates, and security alerts
- • Respond to support requests and provide technical assistance
- • Detect, prevent, and address technical issues and security threats
- • Comply with legal obligations
A note on AI model training: BizOS does not use your business data or your customers' data to train shared AI models. Your data is used solely to operate and personalize your own agents within your account. You may opt out of even anonymous usage analytics by contacting us at [email protected].
3. Google Calendar Integration
BizOS integrates with Google Calendar to help you manage appointments and scheduling. We request access to the following Google Calendar scopes through OAuth 2.0:
calendar.events
Allows BizOS to create, update, and delete calendar events on your behalf. This permission enables:
- • Appointment Booking: When a customer books an appointment through BizOS, we automatically create a calendar event with the appointment details (date, time, participants, and description).
- • Rescheduling: When an appointment is rescheduled, we update the existing calendar event to reflect the new date and time.
- • Cancellation: When a customer cancels, we delete the corresponding calendar event to prevent double-booking.
calendar.readonly
Allows BizOS to read your calendar events and free/busy information. This permission enables:
- • Availability Checking: Before offering appointment slots to customers, we check your calendar to ensure we only propose times when you are free.
- • Conflict Detection: We cross-reference proposed appointment times against your existing calendar to prevent overlapping bookings.
Data Handling for Google Calendar
- • Limited Access: We only access calendar data necessary to provide the scheduling features you have enabled. We do not read, store, or process calendar events unrelated to your BizOS appointments.
- • No Human Review: Calendar data is processed solely by automated systems. BizOS personnel do not manually review your calendar events unless you explicitly request support. All support access is logged and audited.
- • Encryption: All calendar data is encrypted in transit (TLS 1.3) and at rest (AES-256). OAuth tokens are stored securely and never shared with third parties.
- • Revocable Access: You can revoke BizOS's access to your Google Calendar at any time through your Google Account permissions page. Upon revocation, BizOS will immediately cease creating, reading, or modifying your calendar events.
- • Retention: Event metadata (appointment IDs and timestamps, but not event content) is retained per our general data retention policy. Your actual calendar event content is only stored within your Google Calendar.
4. Third-Party Integrations
BizOS integrates with third-party services to deliver core platform functionality. These providers process data on our behalf and are bound by their own privacy policies:
- • Twilio – Powers voice agent calls and SMS. Call recordings and transcripts may be processed through Twilio's infrastructure. Twilio Privacy Policy
- • Stripe – Handles payment processing. BizOS does not store full payment card details; all payment data is managed by Stripe. Stripe Privacy Policy
- • Postmark / Email Providers – Used for transactional and campaign emails sent through the platform
- • Google – Calendar integration as described in Section 3. Google Privacy Policy
- • OpenRouter / LLM Providers – Powers AI agent intelligence. Prompts and responses may be processed through these providers in accordance with their data processing agreements
We maintain Data Processing Agreements (DPAs) with all third-party processors. A full list of sub-processors is available upon request at [email protected].
5. AI Agents & Automated Decision-Making
BizOS enables you to deploy AI agents that interact with your customers automatically. You should be aware of the following:
- • Automated Interactions: BizOS agents respond to your customers using AI without human involvement in each interaction. Customers interacting with your agents may be informed of this at your discretion.
- • Human-in-the-Loop: BizOS supports human oversight features that allow your team to review, intervene, or take over agent conversations.
- • Your Responsibility: As the data controller, you are responsible for informing your end-customers about how their data is collected and used through your BizOS-powered agents, in accordance with applicable privacy laws.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your data in the following circumstances:
Service Providers
We work with third-party service providers for hosting, analytics, payment processing, and customer support. These providers access your data only to perform services on our behalf and are contractually obligated to protect it.
Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.
7. Data Security
We implement industry-standard security measures to protect your data:
- • End-to-end encryption for data in transit (TLS 1.3)
- • AES-256 encryption for data at rest
- • Role-based access controls and multi-factor authentication
- • Regular security audits and vulnerability assessments
- • Strict internal access controls with audit logging
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and enable MFA on your account.
8. Your Rights and Choices
Depending on your location, you may have the following rights:
- • Access: Request a copy of your personal data
- • Correction: Update or correct inaccurate information
- • Deletion: Request deletion of your data (subject to legal obligations)
- • Portability: Request your data in a machine-readable format
- • Opt-out: Unsubscribe from marketing communications at any time
Canadian residents (PIPEDA/CPPA): You have the right to access your personal information and challenge its accuracy. Contact us to exercise these rights.
EU/UK residents (GDPR): In addition to the above, you have the right to object to processing, restrict processing, and lodge a complaint with your local supervisory authority.
California residents (CCPA): You have the right to know what personal information is collected, to request deletion, and to opt out of any sale of personal information. We do not sell personal information.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations:
- • Account data is retained while your account is active
- • After account deletion, data is retained for 30 days for account recovery purposes, then permanently deleted
- • Voice recordings and transcripts are retained for 90 days by default; you may configure shorter retention periods in your account settings
- • Call metadata (timestamps, phone numbers, duration) may be retained for up to 12 months for analytics and compliance purposes
- • Payment records are retained for 7 years to comply with tax and accounting regulations
- • Aggregated, anonymized data may be retained indefinitely for platform analytics
10. International Data Transfers
BizOS is headquartered in Calgary, Alberta, Canada and primarily processes data on cloud infrastructure in Canada and the United States. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- • Standard Contractual Clauses (SCCs) for transfers to non-adequate countries
- • Adequacy decisions by regulatory authorities where applicable
- • Data Processing Agreements with all processors
11. Children's Privacy
BizOS is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us immediately at [email protected] and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- • Posting the updated policy on this page with an updated "Last updated" date
- • Sending an email notification to registered users at least 14 days before changes take effect
- • For material changes, we may require your affirmative acknowledgment before you continue using the platform
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Data Protection Officer: [email protected]
Address: BizOS
14 Nolancrest Rise NW
Calgary, AB T3R 0T2
Canada