Privacy policy

This policy explains what Erre OS does with your information. It covers the erreos.com website, the Erre OS web app at app.erreos.com, and the Erre OS mobile app.

Erre OS is a product of Erre Agency LLC, a limited liability company in the State of Georgia, United States. Erre Agency LLC is the controller of the information described here. Our separate agency services are covered by the policy at erreagency.com/privacy-policy.

You can reach us any time at [email protected] or +1 (470) 266-9294.

What we collect

Information you give us

• Your account. Your name and email address. A password, which we store hashed and never in readable form, or a Google sign-in instead of a password. Optionally a profile photo and a phone number.
• What you put in your workspace. Tasks, messages, notes, documents, proposals, company and contact records, schedule blocks, and any files you upload. This is your business data and it is yours.
• Billing details. A billing contact name and email address. Card payments go straight to Stripe. We never see or store your full card number, and we do not store your billing address. We keep only the card brand and the last four digits so you can tell which card is on file.
• What you send us. The contact form on this website asks for your name, email address, company, industry, and team size. Anything you write to support reaches us as an email.

Information we collect automatically

• Sign-in cookies. A session cookie keeps you signed in. It lasts 30 days, or until you close the browser if you turn off the remember-me option on the sign-in form.
• Session records. Each sign-in stores the IP address and the browser user agent it came from, so you can be told when something looks wrong.
• Basic technical data. Our hosting and infrastructure providers log IP addresses, browser and device type, and request timestamps, as any web service does.
• A push token, on mobile only. If you install the Erre OS app and allow notifications, we store the push token your device issues so we can send you a notification. Signing out removes it.
• Share link opens. If you share a file by link, we record when that link was opened and the browser user agent that opened it, so you can see whether it was used.

This marketing website sets no analytics cookies and no advertising cookies. It loads nothing from a third party, not even a font. We do not run ad pixels, and we do not track you across other sites.

How Google data is used

Erre OS uses two separate Google permissions. They are asked for at different times and you can hold one without the other. Both belong to the web app at app.erreos.com. The iOS app signs in with an email address and a password only, and it never asks for a Google permission of any kind.

Sign in with Google

If you choose Continue with Google, Google gives us your basic profile and your email address, which is your name, email address, profile picture, and the identifier Google uses for your account. We use it for one thing, to create your Erre OS account and to sign you in. It is not used for anything else.

Signing in with Google asks for nothing beyond that. Erre OS does not request calendar access at sign-in.

Google Calendar

Erre OS can show your meetings alongside your tasks in a view called the Itinerary. That is optional. It only happens if you connect your calendar, and nothing reads your calendar until you do.

When you connect it, we ask for one scope, https://www.googleapis.com/auth/calendar.events.readonly. It is read only. Erre OS cannot create, edit, or delete anything on your calendar.

We read the following, from your primary calendar only.

• The events on the single day the Itinerary is showing, and no other day.
• Each event's title, start time, end time, and whether it lasts all day.
• The video call link on the event, so the Itinerary can offer a join button.
• Your own accepted or declined status on the event.

We do not read event descriptions, locations, attachments, or the guest list. We do not read your other calendars.

We do not store your calendar. There is no copy of your events in our database. Each time you open the Itinerary, the app asks Google for that one day, draws it on screen, and keeps nothing. Close the view and the data is gone. There is no background sync and no cache.

What we do store is the access token and refresh token Google issues when you connect, so the view can load again tomorrow without asking you to sign in every time. Those tokens are encrypted at rest in our database.

How to disconnect

Open Settings, go to Calendar, and choose Disconnect. That asks Google to revoke the token and deletes our copy of it in the same step. You can also revoke access from your Google account at myaccount.google.com/permissions. Either way, the Itinerary stops reading your calendar immediately, and because we never stored any events, there is nothing left to delete.

Limited Use

Erre OS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, we do not do any of the following with your Google data.

• We do not sell it. Not to anyone, ever.
• We do not use it for advertising, and we do not build ad profiles.
• We do not use it to train artificial intelligence or machine learning models.
• We do not let humans read it, except where you ask us to for support, where we need to for security, or where the law requires it.
• We do not transfer it to anyone else, except the infrastructure providers listed below that we need to run the app.

Why we use your information

• To give you the product you signed up for, and to keep your account working.
• To take payment and manage your subscription.
• To send you service email, such as the address verification we require at signup, invites, password resets, notifications, and billing warnings.
• To answer you when you contact support.
• To keep the service secure, and to investigate abuse or fraud.
• To meet our legal and accounting obligations.

If you are in a place with data protection law such as the UK or the EU, we rely on performing our contract with you for the first three, on your consent for the Google Calendar connection and for push notifications, on our legitimate interest in a secure and working product for security work, and on legal obligation for the rest.

Who we share it with

We do not sell your personal information and we never have. We share it only with the providers that make the product run, and only as far as each one needs.

• Convex. The application database and backend that Erre OS runs on.
• Vercel. Hosting for the Erre OS web app.
• Sevalla, on Cloudflare R2. Hosting for this website, and the object storage that holds uploaded files and message attachments.
• Stripe. Card processing.
• Autumn. Subscription and plan management on top of Stripe.
• Resend. Delivery of transactional email.
• Google. Sign-in, and Calendar if you connect it.
• Expo. Delivery of push notifications to the mobile app, and delivery of app updates.

Each of these is bound by its own contract to handle the data only on our instructions. We do not share your workspace data with anyone else.

We may also disclose information when the law, a court, or a government authority requires it, and in connection with a merger, acquisition, or sale of assets, with notice to you.

Where your data is held

Our providers process and store data in the United States. If you use Erre OS from outside the United States, your information is transferred there. We use providers that offer standard contractual clauses or an equivalent safeguard where one is required.

How we protect it

• Traffic between your device and our servers is encrypted in transit.
• OAuth tokens, including Google tokens, are encrypted at rest.
• Passwords are hashed and are never stored in readable form.
• Files in your workspace Drive sit in a private bucket that has no public address. Every download is a signed link that expires after 60 seconds, and we only issue one after checking that you belong to the workspace.
• Access to a workspace is decided by membership in it, checked on every request.

One thing to know. Message attachments, content images, profile photos, and task attachments are served from long, unguessable web addresses rather than from behind the sign-in wall. They are not listed anywhere and search engines do not index them, but anyone who has the exact link can open the file. Treat a link to one as the key to it. Files kept in the workspace Drive do not work this way and are always signed.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects you, we will tell you and the relevant authority as the law requires.

How long we keep it

• Calendar events. Not kept at all. They are read and rendered, never stored.
• Google tokens. Until you disconnect the calendar or delete your account, whichever comes first.
• Your account and workspace data. For as long as your account is open. If your subscription ends, your workspace becomes read only and your data stays there so you can get it back if you return.
• Files you delete. A deleted file goes to the workspace trash and is permanently erased from storage 30 days later by a nightly job.
• After a deletion request. We remove your data from our live systems within 30 days. Copies may sit in encrypted backups for a short period after that before they age out.
• Billing and tax records. Kept as long as accounting and tax law requires, which is longer than the rest.

Your rights

You can ask us to do any of the following.

• Show you the personal information we hold about you.
• Correct it if it is wrong.
• Delete it.
• Give you a copy in a portable format.
• Stop or limit a particular use.
• Withdraw a consent you gave, such as the calendar connection.

Erre OS seats are not self-serve. A workspace administrator creates your seat and can remove it, which ends your access immediately. To delete the underlying account and the personal information attached to it, email [email protected] from the address on the account. We will confirm who you are, and then act within 30 days. You will never be charged for asking, and we will not treat you differently for asking.

If you are in the EU or the UK and you think we have got something wrong, you can complain to your national data protection authority. We would rather you told us first.

Cookies

Erre OS uses cookies that are necessary for the product to work. The main one keeps you signed in. We do not use advertising cookies and we do not use third-party trackers. You can block cookies in your browser, but you will not be able to stay signed in if you do.

Children

Erre OS is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 13. If you think a child has given us personal data, write to us and we will delete it.

Other sites

Our site and our product link out to services we do not run. We are not responsible for what those sites do with your information. Read their policies before you hand anything over.

Changes to this policy

We may update this policy. When we do, we change the date at the top of this page. If a change matters to you, for example a new use of your Google data, we will tell you by email or in the app before it takes effect.

Contact us

Erre Agency LLC
Email [email protected]
Phone +1 (470) 266-9294
Web erreos.com