Privacy Policy

Effective Date: May 29, 2025

Deserve Studio, LLC ("Company," "we," "us," or "our") operates the DeserveOS platform available at app.deserveos.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using DeserveOS, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

Definitions

• Personal Data — Information that identifies or can be used to identify you (e.g., name, email address).

• Customer Data — Information you store within DeserveOS, including contacts, companies, emails, deals, notes, and other CRM records.

• Usage Data — Information collected automatically when you use the Service (e.g., IP address, browser type, pages visited).

• Account — Your registered account on DeserveOS.

• Workspace — An isolated environment within DeserveOS where your team's data is stored.

Information We Collect

Information You Provide

When you create an account or use the Service, you may provide:

• Name and email address

• Phone number

• Company or organization name

• Job title

• Billing and payment information

• Any other information you choose to submit through support or feedback channels

Customer Data

When you use DeserveOS as your CRM, you store and manage data such as:

• Contact names, email addresses, and phone numbers

• Company and deal information

• Email communications synced through connected accounts

• Notes, tasks, and activity records

You retain full ownership of your Customer Data. We process it solely to provide and improve the Service.

Usage Data

We automatically collect certain information when you access the Service, including:

• IP address

• Browser type and version

• Pages visited and time spent

• Device identifiers

• Timestamps and diagnostic data

Information from Third-Party Services

If you connect your Google account for authentication or contact import, we receive information authorized by those services, such as your email address, profile information, and the names and email addresses of people you have previously contacted from your Google "Other Contacts".

How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service

• Process your transactions and manage billing

• Send service-related cemail syncommunications and updates

• Provide customer support

• Analyze usage patterns to improve the Service

• Monitor for security threats and prevent fraud

• Generate AI-powered insights from your synced emails, including lead identification and email reply suggestions

• Comply with legal obligations

AI-Powered Features

DeserveOS uses artificial intelligence to enhance your experience:

• Lead Scanning: We analyze emails synced from your connected accounts to identify potential leads and opportunities. This processing uses third-party AI services (OpenAI) and is performed on metadata and content from your synced emails within your workspace.

• Email Reply Suggestions: We use AI to generate draft replies for email threads. The content of the relevant thread is sent to third-party AI services (OpenAI) to generate the draft.

These AI features process your Customer Data only to provide the requested functionality. We do not use your Customer Data to train AI models.

How We Share Your Information

We do not sell your personal information or Customer Data to third parties.

We may share your information with:

Service Providers

We use trusted third-party companies to help us operate the Service:

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Deserve Studio, LLC, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Cookies and Tracking Technologies

We use cookies to operate the Service:

• Session Cookies — Temporary cookies that maintain your login state and expire when you close your browser.

• Preference Cookies — Store your settings and preferences for future visits.

• Security Cookies — Help detect and prevent fraudulent activity.

We do not use advertising cookies, tracking pixels, or cross-site tracking technologies. We do not use Google Analytics.

You can manage cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service, such as staying logged in.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)

• Encrypted database connections

• Per-workspace data isolation

• Regular security monitoring and updates

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

Data Retention

We retain your information only as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

• Account Data — Retained while your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

• Customer Data — Retained while your workspace is active. You may delete individual records at any time through the Service.

• Usage Data — Retained in anonymized or aggregated form for analytics purposes.

Your Rights and Choices

All Users

You may:

• Access, update, or delete your account information through the Service

• Export your Customer Data at any time

• Disconnect third-party accounts (e.g., Google) to stop email sync

• Opt out of non-essential communications by using the unsubscribe link in emails

European Economic Area (EEA) Residents

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data

• Rectify inaccurate personal data

• Request erasure of your personal data

• Restrict processing of your personal data

• Data portability

• Object to processing of your personal data

• Withdraw consent at any time

California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect and how it is used

• Request deletion of your personal information

• Opt out of the sale of personal information (we do not sell your data)

• Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at the email address provided below. We will respond within the timeframe required by applicable law.

International Data Transfers

DeserveOS is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States.

By using the Service, you consent to the transfer of your information to the United States. We take appropriate measures to ensure your data is treated securely and in accordance with this Privacy Policy.

Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

Links to Other Sites

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and notify you through the Service or by email.

Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

Google API Services User Data

DeserveOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes we request

• https://www.googleapis.com/auth/userinfo.email and …/userinfo.profile — to identify you and create your account.

• https://www.googleapis.com/auth/contacts.other.readonly — to read the names and email addresses of people you have previously contacted from your Google account ("Other Contacts").

What we do with this data
We use the data solely to create and update People and Company records in your DeserveOS workspace, so your CRM reflects people you already know. We do not read your Gmail messages, calendar, or any other Google data.

What we do NOT do with Google user data

• We do not use it for advertising.

• We do not sell or rent it to third parties.

• We do not transfer it to others except as necessary to provide the DeserveOS service, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.

• We do not allow humans to read it, except (a) with your explicit consent, (b) for security purposes (e.g. investigating abuse), (c) to comply with applicable law, or (d) where the data is aggregated and used for internal operations in accordance with applicable policies.

• We do not use Google user data to develop, improve, or train generalized AI and/or ML models.

Storage and deletion
Imported contact data is stored in your workspace's database (hosted on Neon Postgres). You can delete individual records from your CRM at any time, or delete your entire workspace from Settings → General → Delete workspace, which removes all imported Google data. You can also revoke DeserveOS's access at any time from your Google Account → Security → Third-party apps.

Browser Extension (DeserveOS for LinkedIn & X)

DeserveOS offers an optional Chrome browser extension that lets you save people, companies, and conversations from LinkedIn and X (Twitter) into your own DeserveOS workspace. The extension is a companion to your DeserveOS account and is only active when you choose to use it.

Data the extension accesses

• Your DeserveOS session. The extension reads the authentication cookie set by the DeserveOS web app you are signed in to, so it can act on your behalf through the DeserveOS API. It does not read cookies from any other site, and it does not store your session token.

• Profile and company information you view. When you open a LinkedIn or X profile or company page, the extension reads information publicly displayed on that page — such as name, headline/bio, job title, location, profile and website links, and (for companies) employee count — so you can save it as a contact or company.

• LinkedIn conversation content (on your request). If you choose to sync a LinkedIn conversation, the extension reads the messages in the conversation you have open in order to add them to your CRM.

• A local preference. The extension stores the address of the DeserveOS workspace you are signed in to, locally in your browser, to reconnect on your next session.

How the extension uses this data

• This information is used solely to create and look up records (people, companies, messages) in your own DeserveOS workspace, and only when you explicitly click an action in the extension. The extension performs no background collection, browsing tracking, or keystroke logging.

• Data read by the extension is sent only to your DeserveOS workspace's API. It is not sold, and is not shared with any third party beyond the service providers that operate DeserveOS described elsewhere in this policy.

• The extension contains no remote code; all of its logic ships inside the extension package.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Deserve Studio, LLC
30 N Gould St, STE R
Sheridan, WY 82801

Email: privacy@deserveos.com
Phone: (302) 830-3003