1. Introduction
Zero-8 Solutions LLC (“we,” “our,” or “us”) operates Zero-8 OS, an AI-powered business operating system accessible at os.zero-8.io. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, including when you connect third-party accounts such as Google Workspace.
By using Zero-8 OS, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, and organization details necessary to provision your account and provide the service.
2.2 Third-Party Integration Data
Zero-8 OS allows you to connect third-party accounts including, but not limited to, Google Gmail and Google Calendar. When you authorize a connection, we access the following data solely to provide the features of the platform:
- Gmail: Email message metadata (sender, subject, date) and message content for the purpose of generating your daily Morning Brief and surfacing urgent communications. We do not store full email content beyond the processing window required to generate your brief.
- Google Calendar: Calendar event titles, times, attendees, and descriptions for the purpose of populating your Morning Brief and scheduling context. Event data is processed and displayed within the platform and is not retained beyond your active session except as needed to deliver the service.
- Other Providers: As we expand integrations to include additional email, calendar, CRM, or productivity providers, this policy will govern all such connections. The same access principles apply: we access only what is necessary to deliver the service features you have enabled.
2.3 Usage Data
We collect information about how you interact with the platform, including pages visited, features used, and actions taken. This data is used to improve the platform and troubleshoot issues.
2.4 Device and Technical Data
We may collect your IP address, browser type, operating system, and other technical identifiers to maintain platform security and performance.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To deliver the core features of Zero-8 OS, including the Morning Brief, Lead Pipeline, and AI Agents
- To process and display data from your connected third-party accounts within the platform
- To generate AI-powered summaries, drafts, and recommendations based on your connected data
- To maintain platform security, detect fraud, and enforce our Terms of Service
- To communicate with you about your account, support requests, and platform updates
- To improve the platform through aggregated, anonymized usage analysis
4. Google API Data — Limited Use Disclosure
Zero-8 OS's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We access Google account data only to provide and improve the features of Zero-8 OS that you have explicitly enabled.
- We do not use Google data to serve advertisements.
- We do not allow humans to read your Google data unless you explicitly request support assistance, it is necessary for security purposes, or we are required to do so by law.
- We do not transfer Google data to third parties except as necessary to provide the service, and only with your authorization.
- We do not use Google data for any purpose not disclosed in this Privacy Policy.
You may revoke Zero-8 OS's access to your Google account at any time through your Google Account permissions page (myaccount.google.com/permissions) or through the Integrations settings page within Zero-8 OS.
5. Data Storage and Security
Your data is stored on Supabase-managed infrastructure with row-level security policies that ensure strict organizational data isolation. No user's data is accessible to any other organization. We implement industry-standard security measures including encrypted data storage, secure HTTPS transmission, and OAuth 2.0 token management with automatic refresh and encrypted storage.
We do not store raw email content or calendar event bodies beyond the processing window required to generate platform features. Processed outputs (such as Morning Brief summaries) are stored within your organization's isolated data environment.
6. Data Retention
We retain your account information for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow for account recovery, after which it is permanently deleted. You may request immediate deletion of your data by contacting us at the address below.
Third-party integration tokens are deleted immediately upon disconnection of the integration or termination of your account.
7. Data Sharing
We do not sell your personal information. We do not share your data with third parties except:
- Service providers who assist in operating the platform (such as our database, hosting, and email infrastructure providers), under strict data processing agreements
- As required by applicable law, court order, or governmental authority
- To protect the rights, property, or safety of Zero-8 Solutions LLC, our users, or the public
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data, subject to legal retention requirements
- Portability: Request a machine-readable export of your data
- Revocation: Revoke access to any connected third-party account at any time
To exercise any of these rights, contact us at support@zero-8.io.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined under the CCPA. For a full description of your California privacy rights or to submit a request, contact us at the address below.
10. Children's Privacy
Zero-8 OS is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice within the platform at least 14 days before the change takes effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.
12. Contact
For questions, concerns, or requests related to this Privacy Policy, contact us at:
Zero-8 Solutions LLC
Redding, California
support@zero-8.io