Privacy Policy

What We Collect

When you sign in with Google, we receive and store the following information from your Google account:

• Your name
• Your email address
• Your profile picture URL

You may also choose to set a display name and claim a username within OS8. These are stored alongside your account.

What We Don't Collect

• We do not use analytics or tracking scripts
• We do not sell or share your data with third parties
• We do not store your Google password or OAuth tokens
• We do not track your behavior on the site

How We Store Your Data

Your account information is stored in a PostgreSQL database hosted on Neon (neon.tech) in the US. Data is encrypted in transit via TLS.

Cookies

We use only essential cookies required for authentication:

• Session cookie — managed by NextAuth.js to keep you signed in. HTTP-only and encrypted.
• Desktop auth cookie — a temporary cookie (expires in 5 minutes) used during the desktop app sign-in flow.

We do not use advertising, analytics, or third-party tracking cookies.

Your Rights

You can request deletion of your account and all associated data at any time by contacting us at leo@os8.ai. We will delete your data within 30 days of your request.

Changes

We may update this policy from time to time. If we make material changes, we will update the date at the top of this page.

Contact

Questions about this policy? Email us at leo@os8.ai.