Liberators OSLiberators OSBack to home

Privacy Policy

Last updated: April 2025

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and username. This information is necessary to provide you with access to the Platform.

Usage Data

We collect information about how you use the Platform, including agent configurations, conversation logs, and feature usage. This data helps us improve the service.

Content You Provide

We process documents, knowledge bases, and other content you upload to the Platform solely to provide the AI agent services you request.

API Keys

API keys you provide for third-party AI providers are encrypted using AES-256-GCM encryption and stored securely. We never access or use your API keys for any purpose other than making API calls on your behalf.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform
  • Process your AI agent requests and conversations
  • Send you service-related communications
  • Ensure the security and integrity of the Platform
  • Comply with legal obligations

3. Data Sharing

We do not sell your personal information. We may share data with:

  • AI Providers: Conversation content is sent to the AI provider you select (OpenAI, Anthropic, or Google) to generate responses
  • Payment Processors: Stripe processes payment information for paid features
  • Infrastructure Providers: Our hosting and database providers process data as needed to operate the Platform
  • Composio: when a workspace connects Gmail, Google Calendar, Google Sheets or Google Drive for its assistants, the sign-in and the assistant's requests to Google go through Composio (see below)
  • Langfuse: conversation text (the messages and the assistants' answers) is sent to Langfuse, hosted in the EU, for tracing, so that we can see what an assistant did and fix it

Google user data

If you connect a Google account, Liberators OS accesses only the Google data needed for the features you turn on:

  • Google Drive (drive.readonly, drive.file): the files and folders you choose are read, kept up to date when they change, and indexed so your assistant and your team can search them and answer questions from them. Liberators OS never edits or deletes your Drive files.
  • Gmail (gmail.readonly, gmail.send): when you or your assistant asks, Liberators OS searches your mailbox and reads the sender, recipients, subject, date and preview of matching messages to answer you, and sends emails you ask it to send. What the assistant shows you stays in that conversation until you delete it; Liberators OS does not keep a copy of your mailbox.
  • Google Calendar (calendar.events): your assistant checks your availability and creates the events you ask for.
  • Google Sheets (spreadsheets): your assistant reads and adds rows in the spreadsheets you point it to.

Google data is used only to provide these user-facing features. We do not sell it, do not use it for advertising, do not use it to train or improve AI or machine-learning models (ours or anyone else's), and no person at Liberators reads it unless you ask us to for support, it is needed for security or to comply with the law. To produce an answer, the relevant excerpts are sent to the AI provider your workspace uses (OpenAI, Anthropic or Google) under terms that do not allow them to train on it; search embeddings are created with OpenAI and results may be re-ranked with Cohere.

Access tokens are stored encrypted (AES-256-GCM). Disconnecting a Google source removes every file copy, index entry and token that came from it; you can also revoke access at any time at myaccount.google.com/permissions.

Liberators OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google services connected through Composio

A workspace can connect its own Gmail, Google Calendar, Google Sheets or Google Drive for the assistants of that workspace. The connection is made through Composio, Inc. (USA), which signs in to Google with its own Google app and holds the sign-in. Liberators OS stores only a reference to the connected account, never the Google password or tokens.

  • The assistants get only the tools we offer: search mail and read messages, list calendars and events and check free time, read spreadsheets, and find files and their details. In Google Drive they can also create a file from text and replace a text file's content, and move a file to the Drive trash only if the workspace owner switches that on. That list is the limit. The Google sign-in that Composio holds may allow more, but we offer no tool that sends mail, changes events or spreadsheets, or deletes a file for good.
  • If the workspace owner makes a Google Drive account a source of the workspace's Company Brain, the files in the folders they choose are read through Composio and copied into that Company Brain (their text and its search index), as files from any other Brain source are. Removing the source removes them. Disconnecting the account stops the Company Brain reading it; the files already copied stay until the source is removed on the Company Brain page.
  • An account connected for one workspace is used only by the assistants of that workspace.
  • When an assistant reads something, the request and Google's reply pass through Composio, which processes them in the United States and may keep logs of them for up to one year. The relevant part is sent to the AI provider the workspace uses to produce the answer, under terms that do not allow training on it.
  • Liberators OS keeps no stored copy of what a tool read, except a file you ask an assistant to create from it. Such a file is private to you and is kept with your account. The record of a tool run holds only the tool's name and whether it worked, and files a tool returns are left out.
  • The assistant's answers can quote what it read. They are kept as part of the conversation. They are not used for automatic memory, conversation summaries or cached answers, and their traces in Langfuse carry no conversation text. If the workspace owner has set a webhook, the answers are also sent to that webhook.
  • When the account is disconnected, we ask Composio to revoke it and to delete it. You can also remove Composio's access in your Google account at myaccount.google.com/permissions.

4. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • AES-256-GCM encryption for API keys
  • Row-level security (RLS) in our database ensuring data isolation between users
  • HTTPS encryption for all data in transit
  • Regular security audits and updates

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law. Conversation logs and knowledge base content are deleted when you remove them from the Platform.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability (export your data)

7. Third-Party Services

The Platform integrates with third-party services. Each has its own privacy policy:

  • OpenAI, Anthropic, and Google for AI processing
  • Stripe for payment processing
  • Supabase for authentication and data storage
  • Composio for the Google services a workspace connects for its assistants
  • Langfuse for tracing of conversations

8. Children's Privacy

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform.

10. Contact

For privacy-related inquiries, please contact us at hello@liberators.ai.