[RO] Privacy Policy

[RO] Last updated: May 2026

[RO] 1. Information We Collect

[RO] We collect information you provide directly: name, email address, company name, and workspace configuration. We also collect usage data including pages visited, features used, and AI strategy generation metadata.

[RO] 2. How We Use Your Information

• [RO] Provide, maintain, and improve WarroomOS services
• [RO] Generate AI-powered business strategies customized to your inputs
• [RO] Process payments and manage subscriptions via Stripe
• [RO] Send transactional emails (verification, export completion)
• [RO] Enforce rate limits and prevent abuse

[RO] 3. Data Processing & AI

[RO] Your business inputs are processed through our AI agent pipeline (powered by OpenRouter LLM routing). Strategy outputs are stored in your tenant-isolated database. We do not use your business data to train AI models.

[RO] 4. Data Storage & Security

[RO] Data is stored in Supabase (PostgreSQL) with Row Level Security (RLS) enforcing tenant isolation. Exports are stored in Cloudflare R2 with time-limited signed URLs. All data is encrypted in transit (TLS 1.3) and at rest.

[RO] 5. Multi-Market Compliance

[RO] WarroomOS supports 33 markets with 24 compliance regimes including GDPR (EU), CCPA (California), LGPD (Brazil), APPI (Japan), PDPA (Singapore/Thailand), and POPIA (South Africa). Data residency options are available on Enterprise plans.

[RO] 6. Data Retention

[RO] Active account data is retained for the duration of your subscription. Audit logs are retained 1-7 years based on your pricing tier and applicable regulations. You may request data deletion at any time.

[RO] 7. Third-Party Services

• Supabase — [RO] Supabase — database hosting and authentication
• Stripe — [RO] Stripe — payment processing
• OpenRouter — [RO] OpenRouter — LLM API routing
• Cloudflare R2 — [RO] Cloudflare R2 — file storage
• Vercel — [RO] Vercel — application hosting
• Inngest — [RO] Inngest — background job orchestration

[RO] 8. Your Rights

[RO] Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Contact us at privacy@warroomos.com to exercise these rights.

[RO] 9. Contact

[RO] For privacy inquiries, contact us at privacy@warroomos.com.