Privacy notice

How ChiefOS handles information

Last updated 11 September 2026

Fotando Solutions operates ChiefOS and processes information needed to provide, secure, support, and bill for the service. Contractual privacy terms and an applicable data-processing agreement take precedence where agreed.

Information and purpose

ChiefOS may process account identity, governed organizational context, conversation text, uploaded files, source references, workflow and audit records, service telemetry, and commercial entitlement. Customer systems remain authoritative where they are the correct source of record.

Service providers

ChiefOS uses Microsoft Azure for application and data infrastructure, Azure OpenAI with EU Data Zone processing for the standalone conversational experience, and Stripe sandbox for the direct billing evaluation. Microsoft Graph is used only after a Team or Enterprise customer grants an approved connection. Actual provider and regional details are recorded in the applicable service agreement or data-processing documentation.

Conversation, files, and evidence

Authentication tokens remain in encrypted HttpOnly cookies. Conversation history is not durable company truth. An uploaded or connected item remains untrusted context until ChiefOS records its provenance and an authorized user completes the applicable evidence confirmation.

Retention and controls

Conversation history uses the configured service retention period; governed evidence and audit records follow contractual, security, and legal requirements. Authorized users may request access, correction, export, retention information, or deletion, subject to obligations that require specific records to be retained.

Contact

Privacy requests: privacy@chiefos.work. Product and account support: support@chiefos.work.