OS Chat Logoos chat
Privacy PolicyTerms of ServiceSecurity Policy

Privacy Policy

Last Updated: September 9, 2025
Effective Date: September 9, 2025

At OS Chat, we're committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use our AI application.

Important: You're interacting with AI systems that process your messages to generate responses. While we strive for accuracy, AI content may not always be correct.

1. Information We Collect

When you create an account:

  • Name, email address, and profile image (via Google OAuth)
  • Optional profile information like occupation and preferences
  • Your AI model preferences and settings

When you use OS Chat:

  • Your chat messages and any files you upload
  • API keys you provide (encrypted with AES-GCM 256-bit encryption)
  • Usage statistics like message counts and model usage
  • Technical information like browser type and IP address

Analytics data:

  • We use Vercel Analytics, Umami, and PostHog (EU servers) for service improvement
  • Personal identifiers are removed from analytics data

2. How We Use Your Information

  • Provide AI services: Process your messages through AI models
  • Account management: Create and manage your account and preferences
  • Rate limiting: Enforce usage limits (5/day anonymous, 20/day registered)
  • Customer support: Respond to your questions and provide help
  • Service improvement: Analyze usage patterns to improve our service
  • Legal compliance: Comply with applicable laws and regulations

3. Information Sharing

AI Providers: Your messages are processed by third-party AI services including:

  • OpenAI, Anthropic, Google, Mistral, xAI, Together AI, Meta, and others
  • These providers may be located outside your country, including in the US

Other Third Parties:

  • Analytics: Vercel Analytics, Umami, PostHog (EU servers)
  • Search: Exa, Tavily, Brave Search for enhanced AI responses
  • Authentication: Convex Auth for secure login
  • Payments: Stripe Managed Payments (Sold through Link, LLC, merchant of record) for subscription billing and tax
  • Infrastructure: Convex for backend services

Legal Requirements:

We may disclose information if required by law or to protect our rights and users' safety.

4. Data Security

  • Encryption: API keys encrypted with AES-GCM 256-bit encryption
  • Secure transmission: All communications use TLS 1.3 encryption
  • Access controls: Server-side authentication and authorization
  • Rate limiting: Protection against abuse and unauthorized access

5. Data Retention

  • Account information: Until you delete your account
  • Chat messages: Retained for service functionality; you can delete chats
  • Analytics data: Aggregated data kept up to 3 years
  • Legal records: As required by law

6. Your Rights

General Rights:

  • Access: Request information about your data
  • Correction: Fix inaccurate information
  • Deletion: Request deletion of your data
  • Portability: Receive your data in machine-readable format

California Residents (CCPA):

  • Right to know what personal information is collected and shared
  • Right to delete personal information
  • Right to opt-out of sale/sharing (we don't sell your data)
  • Right to non-discrimination for exercising your rights

EU Residents (GDPR):

  • Right not to be subject to automated decision-making
  • Right to human review of automated decisions
  • Right to lodge complaints with supervisory authorities

7. Automated Decision-Making

Our AI systems automatically generate responses and may flag inappropriate content. You can request human review of automated decisions by contacting us at support@oschat.ai.

8. International Transfers

Your data may be transferred to countries outside your jurisdiction, including the US. We ensure appropriate safeguards are in place for these transfers.

9. Data Breach Notification

If a data breach affects your information, we'll notify relevant authorities within 72 hours (where required) and inform affected users without undue delay when there's high risk.

10. Children

Our Site and the Services are not intended for children under 13 years of age, and you must be at least 13 years old to have our permission to use OS Chat. We do not knowingly collect, use, or disclose personally identifiable information from children under 13. If you believe that we have collected, used, or disclosed personally identifiable information of a child under the age of 13, please contact us using the contact information below so that we can take appropriate action.

11. Cookies and Tracking

We use cookies for:

  • Authentication and session management
  • User preferences and settings
  • Analytics and performance monitoring
  • Security and fraud prevention

You can control cookies through your browser settings.

12. Do Not Track

We currently do not support the Do Not Track browser setting or respond to Do Not Track signals. Do Not Track (or DNT) is a preference you can set in your browser to let the websites you visit know that you do not want them collecting certain information about you. For more details about Do Not Track, including how to enable or disable this preference, visit https://www.allaboutdnt.com.

13. Updates to This Privacy Policy

We reserve the right to change this Privacy Policy at any time. If we make any material changes to this Privacy Policy, we will post the revised version to our website and update the "Effective Date" at the top of this Privacy Policy. Except as otherwise indicated, any changes will become effective when we post the revised Privacy Policy on our website.

14. Contact Us

Questions about privacy? Contact us:

Email: support@oschat.ai
Website: https://oschat.ai

California residents: You may also contact the California Attorney General at oag.ca.gov/contact/consumer-complaint-against-business-or-company

EU residents: You can lodge complaints with supervisory authorities in your jurisdiction.