Privacy is Capability

Always: your email address, your password (hashed), your plan, usage counts (never content), and the profile details you choose to give.

Only what you connect or switch on:

• Google or Microsoft: your mail, calendar and contacts, read when a request needs them, plus one first read when you connect (section 13).
• The OSQR Mac app: texts from people you know, the mail in Apple Mail, and your calendar (section 10).
• The OSQR iPhone app: arrivals at places you name, and your spot while you talk to OSQR (section 11). The microphone, camera, photos and contacts are used only when you press, pick or tap.
• A business phone line or website chat: the calls, texts and chats that come to it (section 12).

No ad tracking. No selling. No shadow profiles: what OSQR knows about you comes only from what you connected, and Burn It deletes all of it.

Reading is quiet. Acting asks. When OSQR wants to send an email, text someone, add a guest to your calendar, post, buy something or change files on your Mac, it shows you a card with exactly what it will do, and nothing happens until you press Approve.

You decide what goes on its own. Tell OSQR in your own words (“you can handle my calendar without asking me”) and that kind of action goes without a card from then on; say stop, or press Stop under Settings → What OSQR handles, and it asks again. What you ask for in the moment goes now. How much it may spend without asking starts at $0. In Settings → Integrations each connected service can be Off, Ask first, or Auto.

Some things are never handed over: money, the first sign-in to a website, messages to people outside your circle, public posts, and any job that changes files or runs commands on your Mac. Each of those asks when it is OSQR's own idea, and a purchase asks even when you asked for it.

On a business line, answering callers, texters and website visitors live is the job the business switched on, so those replies go without a card.

Words from outside are not orders. Email, texts, customer messages and web pages from other people reach OSQR marked as coming from outside your account, so an instruction hidden in someone else's message is read as their words, not yours.

The OSQR Mac app is optional. It lets OSQR work with what lives on your Mac. To do that, macOS asks you for Full Disk Access (so it can read Messages) and for permission to work with Messages, Mail and Calendar.

• Texts: new texts in Messages are read. OSQR keeps the ones from people you know (your circle, people it texted for you, people a task is waiting on). Everyone else's texts are counted and dropped, not kept.
• Mail: the mail in every account signed in to Apple Mail is copied to your OSQR account, so OSQR can find it again. The message bodies are encrypted; the sender, subject and date stay readable for search.
• Calendar: your events from yesterday to two weeks ahead.
• Jobs: OSQR can do work on your Mac, using its own Chrome window with the sites you signed in to. A job that only looks starts when you ask for it. A job that changes files or runs commands waits for your Approve.

You stay in charge of it. Disconnect it from Settings → Reach on the web and OSQR can no longer reach that Mac. From the Mac app's next version, its menu at the top of your screen also has Pause (it stops reading and stops taking jobs until you resume) and Unpair. You can also turn off any of the macOS permissions in System Settings → Privacy & Security, or quit the app.

OSQR uses your location only for things it does for you:

• Places you name. Tell OSQR “this is the job site” and it notices when you arrive or leave, so it can have the right things ready when you pull up. Those arrivals and departures are kept for 30 days.
• Near me (from the app's next update). Each message you send from the app carries where the phone is, so OSQR can find a place nearby or tell you how far the job is. The spot is used to answer that message and is not saved; Google Maps sees it, to name the area and find places. OSQR's answer is saved like any message, so if the answer names where you are, the answer keeps that.
• Driving. The phone notices when you are driving, so OSQR answers out loud and keeps it short.

Anywhere else you go is not kept: a stop that is not one of your places is thrown away, and from the app's next update it is not sent at all. OSQR cannot see anyone else's location. You can turn location off in your iPhone's Settings, and from the app's next update, from its person menu too (named places, near me and the driving watch all stop).

Some businesses use OSQR to power the chat on their own websites, the text lines on their own phone numbers, and — where they have switched it on — to answer those numbers when somebody calls. If you chat, text or speak with one of those assistants, you are talking to that business, not to OSQR: the business is the controller of your data. Its privacy policy governs the conversation, and OSQR processes it on their behalf under our Data Processing Agreement.

The first time you call one of those numbers and an assistant answers: before the assistant picks up, a short automated notice tells you that the call is recorded and that you are speaking with an AI assistant: “This call is recorded and answered by AI.” If you have called that business before and already heard that: the notice is a short reminder that the call is recorded: “This call is recorded.” Here “recorded” means the call is written down as it happens: the words are kept as a transcript, and the live audio of your conversation with the assistant is not kept. The owner of a number may turn off the words about recording; the call is still written down, and the notice still says the call is answered by AI. Nothing else changes on a later call — you are still speaking with an AI assistant, and whenever you ask whether you are talking to a person, on that call or any other, it will say plainly that you are not. Your voice reaches that assistant live, as you speak, through one of the two AI providers we have approved for that job — one is in use at a time, and every provider we use is on our subprocessor list. The words of the conversation are written down and kept with the business's record of you. The live audio of that conversation is not kept. If the assistant puts you through to a person at the business, that part of the call is recorded so it can be transcribed, and the audio is deleted once it has been.

A voicemail is different. If nobody answers and you leave a message, that message is an audio recording. It is held by the telephony company that carries the call, transcribed so the business can read it, and today nothing deletes that audio on a schedule — we keep the transcript, they keep the recording.

How long it is kept: for now, until the business closes its OSQR account and deletes its workspace. There is no expiry date on a conversation and no automatic clean-up that removes one: a typed chat, a text thread, a voicemail transcript and the written record of a call all stay while the account exists. We are building a proper deletion tool — a way to erase one person's records on request — and until it ships we do it by hand. Write to us at info@osqr.ai and we will carry it out and tell you when it is done.

To exercise privacy rights over one of those conversations, contact the business you were talking to — they hold the relationship, and we support them in honoring your request. For text lines, reply STOP at any time and messaging ends immediately. On a call, saying you do not want to be contacted again is enough — the assistant writes it down, and from then on that business cannot text you or dial you through OSQR on any of its lines, not just the one you were on.

When you connect your Google account (Gmail, Calendar, Drive, Contacts, Tasks) to OSQR, OSQR receives a scoped OAuth grant from Google that lets OSQR act on your behalf inside your Google account. This section describes exactly what OSQR does with that access and what it does not do.

When you connect, OSQR reads your sent mail and the last 90 days of your inbox one time, to learn who your people are. He keeps a label and one line about each person, never the mail itself.