Privacy Policy

1. Introduction

AgencyOS ("we", "us", "our"), operating via marketingagencyops.com, is committed to protecting the privacy and confidentiality of our customers, agency users, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, mobile applications, and associated services.

By accessing or using AgencyOS, you consent to the data collection and usage practices described in this policy.

2. Information We Collect

We collect information you provide directly to us as well as automated telemetry data:

• Account Registration: Full name, corporate email address, company/agency name, job title, and password credentials.
• Single Sign-On (Google OAuth): When you choose to sign in with Google (including personal Google accounts and company Google Workspace accounts), we receive your verified email address, full name, and profile picture URL as permitted by your Google account settings.
• Billing & Payment Data: Transaction records, subscription tier, billing contact details, and payment receipts. All credit/debit card transactions are securely processed through PCI-DSS certified payment gateways (e.g. PayHere, Stripe). AgencyOS does not store or handle your raw credit card numbers or CVV.
• Agency Operations & Workspace Content: Client profiles, project deliverables, task boards, team rosters, leave requests, attendance logs, and internal messages generated during your team's use of the software.
• Desktop Telemetry & Workstation Client: When the optional native client is linked, lightweight performance metadata (active window title, productivity velocity metrics, time tracking duration) is synced to your agency's workspace.
• Technical & Log Data: IP addresses, browser types, operating system versions, access timestamps, and session tokens.

3. How We Use Your Information

We use the collected information strictly for legitimate business and operational purposes:

• To provision, operate, and maintain the AgencyOS platform.
• To authenticate your identity and authorize role-based access control (RBAC).
• To process subscription billing, issue invoices, and manage recurring payments.
• To send critical transactional notifications (such as leave approvals, invoice reminders, and system alerts).
• To provide responsive technical support and diagnose system performance issues.
• To detect and prevent fraudulent transactions, unauthorized access, and security breaches.

4. Information Sharing & Third Parties

We respect your privacy and never sell, rent, or trade your personal or business data to third-party advertisers or data brokers. Information is only shared under the following conditions:

• Authorized Payment Processors: We partner with certified payment providers (including PayHere and Stripe) to securely process card payments and recurring subscriptions under strict contractual confidentiality.
• Infrastructure & Cloud Hosts: Cloud hosting, database, and storage providers (such as Microsoft Azure and Supabase) operating under enterprise-grade security protocols.
• Legal Obligations: We may disclose information if required to do so by lawful request, court order, or applicable government regulation.

5. Data Security & Retention

We employ industry-standard administrative, physical, and technical safeguards to protect your data. All communications are encrypted in transit using TLS 1.3. Stored database assets and telemetry are protected by row-level security (RLS) and strict tenant isolation.

We retain customer data for as long as your workspace account remains active. Upon workspace cancellation or termination, you may request permanent deletion of your agency records.

6. Your Rights & Choices

Depending on your jurisdiction (including GDPR and international privacy standards), you have the right to:

• Access, review, or export your personal and agency data.
• Update or correct inaccurate account information in your user settings.
• Request the complete deletion of your account and personal identifiers.
• Revoke third-party authentication permissions (such as Google OAuth access) at any time.

7. Policy Updates

We may update this Privacy Policy from time to time to reflect system enhancements or legal requirements. The updated version will be indicated by the "Effective Date" at the top of this page. Continued use of the platform after changes constitutes acceptance.