Privacy policy
Last updated: 2026-10-04
Who we are
ClientOS is a cloud service for running companies. In this policy, “we” means the operator of ClientOS, “the customer” means the company that created the workspace, and “users” means everyone who signs in to it.
Our role
Data a customer enters into its workspace (customers, invoices, employees, payroll, conversations and so on) belongs to the customer. We process it on the customer's behalf, only to provide the service. The customer is responsible for having a lawful basis to collect data about its employees and clients.
What we collect
- Account data: name, email, interface language and password (stored hashed; we can't read it).
- Technical usage data: IP address, browser and sign-in times, for security and abuse prevention.
- Workspace content entered by the customer and its users.
How we protect it
- Each workspace is isolated in the database itself.
- Encrypted connections, and encryption of sensitive employee fields (such as national ID and bank account) in the database.
- Encrypted backups stored off the server.
- Role-based permissions, an audit log of changes, and two-step verification.
Service providers
We rely on providers for hosting, file and backup storage, email delivery, network protection and payment processing. When a customer connects WhatsApp, messages pass through Meta's platform under Meta's terms. We send Mixpanel a short list of usage events about each workspace so we can improve the product: what happened (such as an invoice issued), the app, the country and the plan. No names, emails, amounts, customers or anything typed into the service. We don't sell data or use it for advertising.
Retention
We keep workspace data for the life of the subscription. If the trial ends or the subscription stops, the workspace becomes read-only and the customer can export all of its data; the data is kept for at least 30 days. A workspace's owner can delete all of its data from Settings at any time: it's deleted for good after a 14-day grace period in which they can change their mind, and cancelled workspaces are deleted automatically after 90 days. After a deletion we keep only the billing records the law requires of us.
Your rights
Users can change their account details inside the service. For access, correction or deletion of data inside a workspace, contact the company that owns it, or write to us and we'll coordinate with them.