Security
How we handle your data
The design promises that let you trust the AI secretary with real work.
01
The whole system in one picture
Your data never leaves your own tenant.
02
Three promises
| No permanent copies of your content | Your mail, calendar and files stay inside your own Microsoft 365 / Google Workspace. The secretary reads them through APIs and holds what it needs only temporarily, only while it is needed, and deletes it automatically when the period ends (what is held and for how long is in the table in our Privacy Policy). GOS creates no permanent copies on its servers. |
|---|---|
| We hold no passwords | Connections are made on the official Microsoft / Google consent screens (OAuth), where you approve the exact permissions yourself. GOS holds only access keys, stored encrypted. You can review and revoke the permissions at any time on Microsoft / Google's own pages. |
| You can cut it any time | When you disconnect, GOS deletes the keys it held (for Google, the permission is first revoked on Google's side). When your contract ends, GOS deletes the keys and your data, and anonymises the customer ledger down to the items needed for the contract record. Some things remain for a limited period or as long as needed for the contract, such as billing records (the Privacy Policy lists them). You can also revoke consent on the Microsoft / Google screens. |
03
Common questions
| Is my data used to train AI? | To produce each reply, your question and the content read from your accounts are passed to the AI (Anthropic's API). We use a commercial API where inputs are not used for training. Conversation content is held only temporarily while it is needed (for example, an action awaiting your approval) and deleted automatically when the period ends. If you have a paid plan and a connected drive, your consultation history is saved to your own drive. |
|---|---|
| Card details? | Payments are entered directly on Stripe's hosted page. GOS servers never touch your card number. |
| Could a staff member read my mail? | Human work (Premium) is done by a named person and every operation is logged. File changes follow propose → approve → execute; deletions go via the recycle bin. |
| How do I disconnect myself? | "Disconnect" in the settings deletes GOS's keys. You can also revoke consent any time at myapps.microsoft.com or in your Google Account security page. |
| How can I have my data deleted? | After your contract has ended, you can request it yourself from "Delete your data" on My Page (it runs after you review what will happen and confirm with a code sent to your e-mail). It cannot be run while your contract is active, and we never cancel a contract for you. |
See also our Privacy Policy, or contact us with any question.
Start by reading one report.
Choose from three: supply chain (inventory, service, forecast), financial (margin, collection, cash) or management review (strategy to this month’s decisions). Each runs to six pages: an eight-KPI summary, three findings with what each one costs, and three next actions. Synthetic data — no client figures — but the structure and the KPI definitions are the ones we use.
