Privacy Policy

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

When you register for an account, purchase a subscription, contact support, or otherwise interact with our Services, you may provide us with:

• Name, email address, and password
• Billing information (processed securely via our third-party payment processor — we do not store full card numbers)
• Business name, address, and phone number
• Google Ads account credentials or OAuth2 authorization tokens (for BDOS AI tool users)
• Communications and correspondence you send us
• Survey responses, feedback, and contest entries

1.2 Information Collected Automatically

When you visit our Website or use our Services, we automatically collect:

• IP address and approximate geographic location
• Browser type and version, operating system, device type and identifiers
• Pages visited, time spent, referring URLs, and clickstream data
• Log files, error reports, and crash data
• Cookie identifiers and pixel tag data (see Section 5 — Cookies)

We may combine automatically collected data with information you provide to improve our Services and personalize your experience.

1.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms (LinkedIn, Facebook, Twitter/X) if you connect your account or interact with our content
• Payment processors and financial institutions
• Analytics and advertising partners
• Other users or business partners who refer you to our Services

BDOS AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1.4 Data Processed Through the BDOS AI Tool

When you use the BDOS AI software tool, the following data may be processed:

• Google Ads campaign metrics, account configurations, and performance data
• Prompts and conversation data submitted to the AI language model

Please note: conversation data and campaign metrics are transmitted to Anthropic PBC (USA) for processing by the Claude language model. BDOS AI does not control Anthropic's data practices. You are responsible for ensuring that any data you submit through the tool complies with applicable law, including GDPR where you act as a data controller for your clients' data.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide you with access to our Services
• To process payments and fulfill your orders for subscriptions
• To operate, maintain, and improve the Website and the BDOS AI tool
• To send transactional communications (purchase confirmations, account notices, support responses)
• To send marketing and promotional communications, where you have consented or where permitted by applicable law
• To personalize content and advertisements based on your interests and activity
• To analyze usage patterns and measure the performance of our Services
• To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service
• To comply with legal obligations and enforce our agreements
• To resolve disputes and protect the rights and interests of BDOS AI and our users

We will not rent, sell, lease, or barter your personal information to third parties for their own marketing purposes without your explicit consent.

3. Legal Basis for Processing (GDPR — Non-U.S. Users)

If you are located in the European Economic Area, we rely on the following legal bases to process your personal information:

• Contract performance: processing necessary to fulfill our agreement with you (e.g., delivering a purchased subscription)
• Legitimate interests: operating and improving our Services, preventing fraud, and communicating with you about our offerings
• Consent: where you have given explicit consent (e.g., marketing emails, cookie placement)
• Legal obligation: where processing is required to comply with applicable law

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party vendors and service providers who perform services on our behalf, including payment processing, hosting, analytics, email delivery, customer support, and security monitoring. These parties are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate security.

4.2 AI Processing — Anthropic PBC

Data submitted through the BDOS AI tool (campaign metrics, prompts) is transmitted to Anthropic PBC, 548 Market St PMB 90375, San Francisco, CA 94104, USA, for AI processing. Please review Anthropic's privacy policy at https://www.anthropic.com/privacy for information about their data practices.

4.3 Business Transfers

If BDOS AI, Inc. is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 Legal Requirements and Safety

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of BDOS AI, our users, or the public

Under 18 U.S.C. §§ 2702(b)(8) and 2702(c)(4), BDOS AI may disclose user account information to law enforcement without a subpoena or court order in response to a valid emergency where we believe disclosure is necessary to prevent death or serious physical harm.

4.5 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

4.6 Aggregated / De-identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for analytics, research, and business purposes.

5. Cookies and Tracking Technologies

We and our partners use cookies, pixel tags, web beacons, and similar technologies to collect information about your use of our Website and Services. The types of cookies we use include:

• Essential cookies: necessary for the Website to function (login sessions, security)
• Performance cookies: help us understand how visitors use the Website (e.g., Google Analytics)
• Functional cookies: remember your preferences and settings
• Advertising/targeting cookies: used to deliver relevant advertisements (e.g., Google Ads remarketing, Facebook Pixel)

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our Website. We do not currently respond to browser "Do Not Track" signals, as there is no industry-standard protocol for doing so.

Our Website may use Google AdWords and similar remarketing services to advertise to previous visitors on third-party websites. You can opt out of Google's use of cookies for advertising by visiting https://adssettings.google.com.

6. Data Security

We implement commercially reasonable technical and administrative safeguards to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include SSL/TLS encryption for data in transit, access controls, firewalls, and pseudonymization where appropriate.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Data Retention

We retain your personal information for as long as your account is active, as needed to provide you with our Services, or as required by law. Following termination or deactivation of your account, we retain your information for a minimum of three (3) years for legitimate business and legal purposes, including dispute resolution and enforcement of our agreements.

We may retain certain information for longer periods where required by law or where we have a legitimate interest in doing so (e.g., to prevent fraud or to enforce our legal rights).

8. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are under 13, please do not use our Services or provide any personal information.

If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete such information from our records. If you believe we may have collected information from a child under 13, please contact us immediately at support@bdos.ai.

9. Your Privacy Rights

9.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Opt out of receiving promotional communications from us at any time
• Request deletion of your account by contacting us (subject to legal retention requirements)

9.2 California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share it
• Right to Delete: the right to request deletion of personal information we have collected about you, subject to certain exceptions
• Right to Correct: the right to request correction of inaccurate personal information
• Right to Opt Out of Sale or Sharing: we do not sell your personal information for monetary consideration. To the extent "sharing" for cross-context behavioral advertising applies, you may opt out by contacting us
• Right to Limit Use of Sensitive Personal Information: you may direct us to limit use of sensitive personal information to what is necessary to perform our Services
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA/CPRA rights

To exercise your California privacy rights, please submit a verifiable consumer request to:

Email: support@bdos.ai

Mail: BDOS AI, Inc., 390 Northeast 191st Street STE 58706, Miami, FL 33179, USA

We will respond to verifiable requests within 45 days, with a possible extension of an additional 45 days where reasonably necessary. We may not fulfill requests that we cannot verify or that are subject to statutory exemptions.

California Civil Code Section 1798.83 also entitles California residents to request information once per year, free of charge, about personal information disclosed to third parties for direct marketing purposes in the preceding calendar year. Please contact us to make such a request.

9.3 EEA / UK Users — GDPR Rights

If you are located in the European Economic Area or United Kingdom, you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten") in certain circumstances
• Restriction of processing in certain circumstances
• Data portability
• Object to processing based on legitimate interests or for direct marketing
• Lodge a complaint with your local supervisory authority

To exercise these rights, contact us at support@bdos.ai. We will respond within 30 days.

10. International Data Transfers

BDOS AI, Inc. is based in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States and potentially other countries, which may have different data protection laws than those in your country of residence.

For EEA/UK users, where required, we rely on appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

By using our Services, you acknowledge and consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

11. Third-Party Links and Services

Our Website and Services may contain links to third-party websites and services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites or services you visit. We are not responsible for the privacy practices of third parties.

12. Social Media

Our Services may integrate with social sharing features from LinkedIn, Facebook, Twitter/X, and other platforms. Your use of such features is subject to the respective platform's privacy policies. Information you share publicly through our Services or social platforms may be re-shared by others and remain accessible even after removal.

13. Marketing Communications / CAN-SPAM

We may send you promotional emails about our products and services. Each marketing email we send will include a clear and conspicuous unsubscribe mechanism. You may opt out of marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing us at support@bdos.ai with "Unsubscribe" in the subject line

Opting out of marketing communications will not affect transactional or account-related communications necessary to provide our Services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Website and updating the "Last Updated" date above. Where required by law, we will provide more prominent notice (such as email notification) of material changes. Your continued use of our Services after the posting of changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

BDOS AI, Inc.
390 Northeast 191st Street STE 58706
Miami, FL 33179
United States

Email: support@bdos.ai

General inquiries: support@bdos.ai

When you contact us, we may ask you to verify your identity before responding to your request.