Privacy policy
Last updated October 1, 2026
OS DEPT (osdept.com) is run by STOODIOOS LLC (“we”). OS DEPT gives each business its own private workspace at its own address, such as yourbrand.osdept.com, that brings together its store, email marketing and website data. This policy explains what we collect, why, and the choices you have.
What we collect
- Account details. Your name, email address and the role you have in your workspace.
- Data from tools you connect. When you connect a tool, you approve exactly what we can read on that tool’s own sign-in screen. Depending on what you connect, this can include:
- Shopify: orders, products, customers and subscriptions.
- Klaviyo: campaigns, flows, lists, segments, profiles and their performance metrics.
- Google Analytics and Search Console: website traffic, pages, devices and search performance reports.
- Content you add. Notes, files, contacts, drafts and messages you create in your workspace.
- Basic usage data. Sign-in times and error logs we need to keep the service running and secure.
How we use it
We use this data only to run your workspace: to show your dashboards, reports and insights, to keep them up to date, and to provide support. We do not sell your data, we do not use it for advertising, and we do not combine one business’s data with another’s.
Google user data
OS DEPT’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only access to Google Analytics and Search Console, use it only to show reports inside your workspace, and do not use it to train AI models, for advertising, or share it with anyone else except as needed to provide the service or required by law.
Who we share it with
We share data only with the service providers that run OS DEPT for us, and only as needed to do so: hosting (Vercel), database (Supabase), email delivery (Resend) and AI features (Anthropic), when you use them. Each is bound to protect it. We may disclose data if the law requires it.
How we protect it
Each business’s workspace has its own separate database. Connection keys and sign-in tokens are encrypted and are never shown in a browser. Only people you invite can see your workspace.
How long we keep it
We keep your data while your workspace is active. If you disconnect a tool, we stop collecting from it, and you can clear what it brought in. If you close your workspace, we delete its data within 30 days, unless the law requires us to keep it longer.
Your choices
You can disconnect any tool at any time from your workspace’s Connections page or from the tool itself (for example, Google’s third-party access page). You can ask us to see, correct or delete your data by emailing os@osdept.com.
Changes
If we change this policy, we will update the date above and, for meaningful changes, tell workspace owners by email.
Contact
Questions about privacy: os@osdept.com.