Privacy Policy

1. Who We Are

Aperture OS ("we," "us," or "our") operates the website at aperture-os.com and the Aperture OS application. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

2. Information We Collect

Information you provide directly

• Account information: Name, email address, and password when you create an account, or name and email via Google OAuth.
• Business information: Business name, website URL, industry, role, team size, tools, and other operational details you share during conversations.
• Conversation content: Messages you send during sessions with our AI agents, including descriptions of your business processes and workflows.
• Payment information: When you subscribe, payment details are collected and processed by Stripe. We store your Stripe customer ID and subscription status but never store credit card numbers or payment credentials on our servers.

Information collected automatically

• Session data: Device type (mobile/desktop), browser user-agent, session timestamps, and session stage progression.
• Behavioral observations: Our AI observer (Captis) extracts engagement signals, emotional state indicators, and conversational patterns from your messages to improve the quality of your experience. These observations are stored as structured data associated with your session.
• Authentication tokens: We use cookies and local storage to maintain your login session via Supabase Auth.
• System logs: We log system events for debugging and monitoring purposes. These logs may include session identifiers, event types, and technical metadata.

3. How We Use Your Information

• Deliver the service: Facilitate AI-guided conversations, research your business, extract workflow processes, and generate implementation plans.
• Personalize your experience: Use conversational observations to adapt tone, pacing, and guidance to your engagement style and needs.
• Process payments: Manage your subscription through Stripe, including billing, renewals, and cancellations.
• Improve our service: Analyze usage patterns, conversation quality, and system performance to improve our AI agents and user experience.
• Communicate with you: Send transactional emails related to your account or subscription. We do not send marketing emails without your consent.

4. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

• AI model providers: Conversation content is sent to third-party AI providers (Anthropic, Google, OpenAI) to generate responses. These providers process data according to their respective privacy policies and data processing agreements.
• Payment processing: Stripe processes your payment information under their privacy policy.
• Business research: When you provide your website URL, our system accesses publicly available information about your business from the web to inform the conversation.
• Legal obligations: We may disclose information if required by law, regulation, or legal process.

5. Data Storage and Security

Your data is stored in Supabase (hosted on AWS) with row-level security policies that restrict access to authorized users. Payment data is handled entirely by Stripe and never stored on our servers. We use HTTPS for all data transmission and authenticate all API requests.

While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account information and conversation history for as long as your account is active. Session data and behavioral observations are retained to provide continuity across sessions and improve service quality. You may request deletion of your data at any time by contacting us.

7. Your Rights

All users

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Cancel your subscription at any time through your account settings

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to opt-out of sale: We do not sell personal information.

To exercise any of these rights, contact us at the email address below. We will respond to verifiable requests within 45 days.

8. Third-Party Services

Our service integrates with the following third-party services, each with their own privacy policies:

• Supabase: Database and authentication
• Stripe: Payment processing
• Anthropic (Claude): AI model provider
• Google (Gemini): AI model provider
• OpenAI: AI model provider

9. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Aperture OS
Email: support@aperture-os.com