Privacy Policy

SelahOS is operated by Emotion Media, located at Costa Mesa, California 92626. We build personal operating system software for professionals, operators, and teams — read-first, with you approving every action. If you have questions about this policy, contact us at support@emotionmedia.io.

This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. By using SelahOS, you agree to the practices described in this policy.

A. Information you provide directly:

• Account data: Your name, email address, and password when you register
• Profile data: Your role, company, timezone, OS name, and preferences you configure in the app
• Content you create: Brain dumps, quick captures, meeting notes, voice recordings, uploaded files, and text you enter into the Service
• Billing data: Handled entirely by Stripe. We do not store full credit card numbers or financial account details

B. Information from connected integrations:

• OAuth credentials: Access tokens for connected tools (Gmail, Google Calendar, Slack, Notion, ClickUp, etc.) stored securely to enable syncing
• Synced content: Emails, calendar events, tasks, messages, and documents accessed via your integrations — processed to generate your AI briefs, responses, and intelligence layers

C. Behavioral and intelligence data (the Brain system):

A core part of SelahOS is the AI Brain — a persistent intelligence layer that learns how you work over time. This system collects and stores:

• Entity data: People, companies, projects, and relationships extracted from your content and interactions, stored to personalize your experience
• Behavioral patterns: How you prioritize tasks, what you act on, what you defer, how quickly you respond, and how your decisions and habits evolve over time
• Interaction signals: Which AI suggestions you act on, what content you engage with, what you ignore, and how long you spend on different types of work
• Temporal patterns: When you are most productive, what times of day you capture ideas, and how your behavior varies across contexts
• Extracted intelligence: Tasks, decisions, action items, key facts, and obligations extracted from your uploaded content, voice notes, and meeting recordings

This data is what makes SelahOS genuinely useful over time. It is stored in your personal Brain profile, and you can view and delete it from within your account settings.

D. Usage and technical data:

• Feature interactions, session data, device type, browser type, and IP address
• Error logs and performance data used to improve the Service
• Cookies and similar technologies (see Section 9)

To provide and operate the Service:

• Generate your personalized AI morning briefs, responses, and intelligence
• Sync and surface relevant context from your connected tools
• Build and maintain your AI Brain — the persistent intelligence layer that makes the Service smarter over time
• Process voice recordings and uploaded files to extract tasks, events, and insights
• Send transactional emails (account confirmation, billing receipts, security alerts)
• Respond to your support requests
• Comply with legal obligations

To improve and develop the Service:

• Analyze usage patterns to improve features, AI accuracy, and user experience
• Train and improve our internal AI models and behavioral intelligence systems using aggregated, anonymized data (never your identified personal data)
• Conduct internal research on productivity patterns and professional workflow intelligence

We do not use your personal content to train AI models that will be used to serve other users. Your emails, documents, and personal content are processed only to generate responses for you.

SelahOS collects behavioral and usage data across its user base. When this data is aggregated and stripped of all personally identifiable information — such that no individual can be identified — it becomes a distinct category of data that Emotion Media has the right to use and commercialize.

What “anonymized and aggregated” means: Data that has been irreversibly de-identified using industry-standard techniques and combined with data from multiple users such that it does not relate to or identify any specific individual.

How we may use anonymized and aggregated data:

• Product improvement: Improving AI algorithms, feature design, and platform intelligence
• Research: Internal and potentially published research on professional productivity, workflow patterns, and behavioral intelligence
• Business partnerships: Licensing or sharing aggregated behavioral datasets with research institutions, enterprise technology companies, or strategic partners under data sharing agreements that prohibit re-identification
• Commercial data products: Creating, licensing, or selling aggregated intelligence products derived from collective usage patterns
• Business transactions: As part of a merger, acquisition, asset sale, or similar corporate transaction, aggregated data may transfer as a business asset

What we will never do with your personal data:

• Sell your name, email address, or personally identifiable information to third-party advertisers or data brokers
• Share your raw personal content (emails, documents, messages) with any third party without your explicit, specific consent
• Use your individual identified data in any way that is inconsistent with this policy without notifying you and obtaining your consent

Under California law (CCPA), you have the right to opt out of the sale or sharing of your personal information. However, our commercialization activities apply only to anonymized and aggregated data — not personal information — which is consistent with CCPA requirements. California residents may still submit a request to understand our data practices by contacting support@emotionmedia.io.

Your data is stored on Supabase (PostgreSQL) with row-level security policies enforced at the database level. Integration tokens are stored with row-level security isolation per account. All data is transmitted over HTTPS/TLS.

We employ industry-standard security measures including encryption at rest and in transit, strict access controls, and regular security reviews. No method of transmission over the Internet or electronic storage is 100% secure, but we take commercially reasonable steps to protect your data.

Your Brain data (entities, patterns, interactions) is stored in your isolated account environment. No other user can access your data.

We share data with the following trusted third-party services to operate SelahOS:

• Supabase — Database, authentication, and file storage (United States)
• Stripe — Payment processing and subscription management
• Anthropic — AI language model processing. Your context is sent to Anthropic's API to generate responses. Under our agreement with Anthropic, they do not store or train on your data beyond the immediate request.
• OpenAI — Audio transcription via Whisper API for voice features. Under our agreement, OpenAI does not train on submitted audio.
• Vercel — Hosting and deployment infrastructure
• Google — OAuth sign-in and Workspace API access
• Resend — Transactional email delivery

We do not sell your personal information to third parties. We may share aggregated and anonymized data as described in Section 4.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, billing, or compliance purposes.

Integration tokens are revoked when you disconnect an integration or delete your account. Brain data (entities, patterns) associated with your account will be deleted upon account deletion, except where it has already been incorporated into anonymized, aggregate datasets.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we limit how we process your data
• Portability: Request a machine-readable copy of your data
• Objection: Object to certain types of data processing
• Opt-out (California/CCPA): Opt out of sale or sharing of personal information — note our commercial data activities apply only to anonymized/aggregated data
• Withdraw consent: Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at support@emotionmedia.io. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

EU/EEA users: If you are located in the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your personal data is: (a) performance of a contract when providing the Service, (b) your consent for behavioral intelligence collection, and (c) legitimate interests for product improvement and aggregate analytics. You have the right to lodge a complaint with your local data protection authority.

SelahOS uses cookies and similar technologies to:

• Maintain your session and authentication state (strictly necessary)
• Remember your preferences and settings
• Analyze usage patterns to improve the product (analytics)

You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent you from using the Service. We do not use third-party advertising cookies.

If you use voice features (voice input, voice notes, or meeting transcription), audio is processed as follows:

• Browser-based voice input: Processed entirely on your device using your browser's built-in speech recognition. No audio is sent to our servers.
• Uploaded audio files and meeting recordings: Sent to OpenAI's Whisper API for transcription. Under our agreement, audio is not retained or used for training by OpenAI. Transcripts are stored in your account and processed by our AI to extract tasks, decisions, and insights.

You may delete any voice transcripts or meeting notes from within your account at any time.

SelahOS is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at support@emotionmedia.io.

Your data is stored and processed in the United States. If you are located outside the United States, by using the Service you consent to the transfer of your data to the United States, where data protection laws may differ from those in your jurisdiction.

For EU/EEA users, we rely on standard contractual clauses and other appropriate safeguards for international data transfers where required.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the app at least 7 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

For significant changes to how we use your data — particularly relating to Section 4 (Aggregated and Anonymized Data) — we will provide additional notice and, where required by law, seek your renewed consent.

For any privacy questions, data requests, or concerns: