Privacy Policy

Effective: June 15, 2026

ValuationOS (“we,” “our,” or “the Service”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Google Sign-In Data

When you sign in with Google we receive your Google account name, email address, and profile image. We use this data solely to authenticate you and personalise your experience.

Account Data

Email addresses used for one-time passcode (OTP) sign-in, organisation membership, and role assignments.

Usage Data

Queries you run, filters you apply, exports you download, and chat messages you send. This data is used to operate the Service and improve its features.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and provide access to the Service
• Personalise your session and remember your preferences
• Process your valuation queries and AI chat requests against our transaction database
• Operate, maintain, and improve the Service
• Communicate with you about your account or important service changes
• Detect and prevent fraud or abuse
• Comply with applicable law

3. Google User Data — What We Don’t Do

We do not:

• Sell your Google account data to third parties
• Use your Google account data for advertising or ad targeting
• Use your Google account data to train machine-learning models
• Allow humans to read your Google data unless you give explicit consent or it is necessary for a verified security investigation
• Transfer your data to third parties except as needed to deliver the Service

4. Data Sharing

We share your information only with the sub-processors required to operate the Service:

• Convex — database and backend runtime (convex.dev)
• Vercel — application hosting and edge delivery (vercel.com)
• Google — OAuth 2.0 authentication (accounts.google.com)
• OpenAI — AI chat feature (openai.com). Chat messages are processed by OpenAI subject to their data-processing agreement.

We may also disclose data when required by law, court order, or to protect the safety of users.

5. Data Security

All data is encrypted in transit (TLS 1.2+). Session tokens are short-lived and stored as HttpOnly cookies. Database access is role-scoped and logged. We use Better Auth for session management and Convex’s built-in security controls for database access.

6. Data Retention

We retain your account data as long as your account is active. If you request account deletion we will remove your personal data within 30 days, subject to legal holds. Chat history can be deleted at any time from within the application.

7. Your Rights

Depending on your jurisdiction you may have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Revoke Google account access at any time via Google Account Permissions
• Opt out of non-essential communications

To exercise any of these rights, email us at support@valuationos.com.

8. California Privacy Rights (CCPA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request contact support@valuationos.com.

9. EU/UK Residents (GDPR)

If you are located in the European Economic Area or UK, our lawful bases for processing your data are contract performance (operating the Service) and legitimate interests (security and fraud prevention). You have the rights listed in Section 7 and may lodge a complaint with your local supervisory authority.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Your continued use of the Service after the effective date of changes constitutes acceptance.

11. Contact

Privacy questions: support@valuationos.com