Security
How we handle your data
The design promises that let you trust the AI secretary with real work.
01
The whole system in one picture
Your data never leaves your own tenant.
02
Three promises
| We store no content | Your mail, calendar and files stay inside your own Microsoft 365 / Google Workspace. The secretary reads them through APIs on the spot and discards what it read — no copies on GOS servers. |
|---|---|
| We hold no passwords | Connections are made on the official Microsoft / Google consent screens (OAuth), where you approve the exact permissions yourself. GOS holds only access keys, stored encrypted. You can review and revoke the permissions at any time on Microsoft / Google's own pages. |
| You can cut it any time | On cancellation, GOS destroys the keys and you revoke consent — after that nothing can be read, physically. There is no "return my data" procedure because there is nothing to return. |
03
Common questions
| Is my data used to train AI? | Content is passed to the AI only to produce each reply, via a commercial API where inputs are not used for training. Conversations are not stored either. |
|---|---|
| Card details? | Payments are entered directly on Stripe's hosted page. GOS servers never touch your card number. |
| Could a staff member read my mail? | Human work (Premium) is done by a named person and every operation is logged. File changes follow propose → approve → execute; deletions go via the recycle bin. |
| How do I disconnect myself? | "Disconnect" in the settings deletes GOS's keys. You can also revoke consent any time at myapps.microsoft.com or in your Google Account security page. |
See also our Privacy Policy, or contact us with any question.
Start by reading one report.
The sample runs to six pages: an eight-KPI summary, three findings with what each one costs, and three next actions. It is built on synthetic data — no client figures — but the structure and the KPI definitions are the ones we use.
