Last updated · August 5, 2026
NatorOS, Inc. ("NatorOS", "we", "us") operates the AI operating system for fast-growing companies, available at natoros.com and through related products. This policy explains how we collect, use, store, and share personal information about you when you use our website, sign up for an account, or interact with our customer teams.
We collect information you provide directly to us and information we collect automatically when you use our services. Specifically:
We use this information to operate NatorOS, deliver the services you request, secure your account, communicate with you about your account, comply with legal obligations, and improve the product. We do not sell personal information and we do not use customer workspace data to train shared models.
We share personal information with a small number of service providers who operate parts of our infrastructure under written contracts: cloud hosting, authentication, observability, customer support tooling, payment processing, and email delivery. We also share information when required by law or to protect the rights and safety of NatorOS, our customers, and the public.
If you connect a Google account, NatorOS accesses Google user data only after you authorize the requested permissions. Depending on the integrations you connect and the actions you request, this data may include your Google account identity and profile picture; Gmail messages, threads, drafts, and labels; Google Calendar events and attendees; Google Contacts names and contact details; Google Drive file metadata and user-selected file content; and Google Docs, Slides, and Sheets content.
NatorOS uses this data only to provide or improve user-facing features you request, including inbox search and triage, drafting and user-confirmed email sending, calendar briefings and event management, contact import and matching, Drive search and analysis, and creating or editing requested Docs, Slides, and Sheets. NatorOS does not sell Google user data, use it for advertising, or use Google Workspace data to train generalized or shared AI models.
We share Google user data only with service providers acting as processors under contract when necessary to provide the feature you requested, or when required by law. We do not permit those providers to use Google user data for their own advertising or to train their general-purpose models. NatorOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
NatorOS uses administrative, technical, and organizational safeguards designed to protect personal information and Google user data. Data is encrypted in transit using TLS and encrypted at rest by our managed cloud infrastructure. Access is limited through authenticated, role-based, and tenant-scoped controls. Google OAuth credentials are stored in access-controlled server-side systems and used only to call the Google APIs authorized by the connected user. We also use environment-separated secret management, monitoring, access logging, and periodic access reviews.
No method of transmission or storage is completely secure, but we maintain and update these safeguards in light of the sensitivity of the data and the risks presented by its processing. If you believe your information has been compromised, contact privacy@natoros.com.
We store customer data in regional cloud environments. Enterprise customers may select a specific region (U.S., E.U., U.K., or Australia) at the start of a contract. We retain customer workspace content, including content derived from connected Google services, for the duration of the contract plus thirty days unless you ask us to delete it sooner or applicable law requires a different period.
You can disconnect Google from NatorOS at any time in Connected accounts. Disconnecting deletes the stored Google OAuth credentials and stops future Google API access. You can also revoke NatorOS from your Google Account permissions. To request deletion of Google-derived workspace content or other personal information, write to privacy@natoros.com.
Depending on where you live, you may have the right to access, correct, port, or delete personal information we hold about you, and to object to or restrict certain uses of it. To exercise these rights, write to privacy@natoros.com. We will respond within thirty days.
We use a small set of cookies to keep you signed in, remember your preferences, and measure how our site is used. You can disable cookies in your browser, though parts of the site may not work if you do.
If you opt in to receive text messages from NatorOS (for example, account alerts, workflow notifications, or two-factor authentication codes), we will use your mobile number solely to send you those messages. We do not share, sell, rent, or trade your mobile number or SMS opt-in consent with any third parties or affiliates for their marketing or promotional purposes. Mobile numbers are shared only with our SMS delivery provider, and only to the extent necessary to deliver messages to you.
Two-factor authentication and identity-verification codes are transactional messages: we send a one-time passcode only in direct response to a request you initiate, such as enabling SMS two-factor authentication in your security settings, signing in, or confirming a sensitive action like connecting a bank account. You enroll by entering your own mobile number and confirming it with the code we text you.
Message frequency varies depending on your account activity and notification settings. Message and data rates may apply. You can opt out at any time by replying STOP to any message, by removing your phone number under Settings → Security in the app, or reply HELP for help.
We will post any updates to this page and revise the "last updated" date above. If a change materially affects your rights, we will notify you by email at least thirty days before it takes effect.
Write to privacy@natoros.com. We answer within five business days.