Privacy Policy

INOSX, Inc. is responsible for the personal data described in this policy when it determines how and why that data is processed. This policy applies to INOSX websites, account services, the invitation-only AgentOS closed beta, and approved service workflows.

We process only data reasonably needed to provide, secure, support, and document the service. Depending on how you use INOSX services, this may include:

• Contact details you provide, such as name, work email, company, phone number, and message content.
• AgentOS account and security data, such as a password hash, email-verification status, session and recovery records, device-activation identifiers, and security or access audit events.
• Closed-beta invitation data, such as the account identifier, grant and expiration times, revocation status, and administrative reason and actor records. The invitation record does not need to duplicate your email address.
• LinkedIn account information made available through LinkedIn OAuth, such as your LinkedIn member identifier, name, profile information, organization or page identifiers, and permission status.
• Content you create, approve, schedule, or ask INOSX to publish to LinkedIn.
• Operational records such as approval status, publishing timestamps, basic service events, fraud-prevention signals, and troubleshooting logs.

We do not intentionally collect unnecessary personal data.

AgentOS is designed to keep conversation history, memory, and files in the user's local encrypted workspace. The Agent and Policy Catalog distributes signed configuration and policy bundles and is not intended to receive or store that local content.

When you ask an agent to respond, the prompt and any context you choose to include are sent from the application to the configured AI service for processing. In this closed beta, that path uses OpenRouter and a selected free model. The submitted content is then subject to the relevant provider's privacy practices. Do not include personal data you are not authorized to submit.

When a workflow uses LinkedIn, we may ask you to connect your LinkedIn account through LinkedIn OAuth. OAuth lets you authorize INOSX to perform specific actions, such as publishing approved content, without sharing your LinkedIn password with INOSX.

INOSX only uses LinkedIn access for the permissions you approve and for the workflow you requested. We do not publish to LinkedIn unless the content has been approved by you or by an authorized person in your organization.

You can revoke LinkedIn access through your LinkedIn account settings at any time.

We use data to create and secure accounts; verify email; administer, expire, or revoke beta access; activate AgentOS on an authorized device; provide requested AI or publishing workflows; communicate with you; prevent abuse; troubleshoot incidents; and maintain required operational and audit records.

Depending on the context, processing is based on performing our agreement with you, our legitimate interests in providing and securing the service, compliance with legal obligations, or consent where law requires it.

We do not sell user data.

We disclose data only as needed to operate the service, comply with law, protect rights and systems, or complete a transaction you request. Providers used for the AgentOS closed beta include Vercel for account-service hosting, Neon for account and access-control records, Resend for transactional account email, and OpenRouter and the selected model provider for AI requests.

These providers process data under their own terms and data-protection commitments. We do not share your local AgentOS archive with them as part of catalog distribution. We may also disclose information if required by law or in connection with a corporate transaction, subject to applicable safeguards.

We keep account, invitation, security, and workflow data only for as long as reasonably needed to provide the service, preserve security and audit history, resolve disputes, respond to requests, or comply with law. An expired or revoked beta invitation may remain in the audit history even though it no longer grants access.

When data is no longer needed, we delete or de-identify it where practical. Local AgentOS data remains under the user's control and is not removed by an INOSX account deletion unless it has separately been submitted to INOSX. LinkedIn OAuth access may also be revoked directly through LinkedIn.

We use technical and organizational safeguards appropriate to the service, including encrypted transport, access controls, email verification, scoped credentials, audit records, and integrity verification for AgentOS packages and catalog bundles. No method of storage or transmission is completely secure.

INOSX and its providers may process data in the United States and other countries. Where required, we use contractual or other lawful safeguards for international transfers.

Depending on where you live, including under Brazil's LGPD, you may have rights to confirmation of processing, access, correction, portability, deletion or anonymization, information about sharing, objection, restriction, or withdrawal of consent. These rights may be subject to lawful exceptions.

To submit a request, email support@inosx.com with the subject line "Privacy request" and enough information for us to identify the relevant account or workflow. We may verify your identity before acting. We will review the request, take the action required by applicable law, and confirm the outcome.

INOSX services are intended for adults and organizations and are not directed to children under 18. We do not knowingly collect children's personal data through the AgentOS closed beta.

We may update this policy as services or legal requirements change. We will post the revised date and provide additional notice when required.

For privacy questions, access requests, or deletion requests, contact:

INOSX, Inc.
131 Continental Dr Suite 305
Newark, DE 19713, United States
support@inosx.com