Home

Privacy Policy

1. Who We Are

MyOS (my-os.co.uk) is operated by Giju Ltd. We are the data controller for personal data collected through this service. Contact: theteam@giju.co.uk.

2. What We Collect

We collect the following data when you use MyOS:

• Account data: Email address and password (hashed) when you create an account
• Profile data: Role, organisation, industry, and other professional information you provide during onboarding
• Content data: Writing samples, preferences, brand information, and other inputs you provide for skill generation
• Generated data: Skill files produced by the system from your inputs
• Payment data: Processed by Stripe. We do not store card details

3. How We Use Your Data

• Service delivery: To generate personalised skill files from your inputs
• AI processing: Your inputs are sent to the Anthropic API (Claude) for skill generation. Anthropic does not use API inputs for model training
• Account management: Authentication and access control via Supabase
• Transactional email: Admin notifications via Resend SMTP

4. Data Storage

Your data is stored in Supabase (hosted infrastructure). Profile data, module inputs, and generated skill files are persisted in your user record. Data is retained for as long as your account is active.

5. Third-Party Services

• Supabase: Authentication and data storage
• Anthropic API: AI-powered skill generation
• Stripe: Payment processing
• Vercel: Hosting and deployment
• Resend: Transactional email

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data (skill files can be downloaded from the Skills Library)
• Object to processing

To exercise any of these rights, contact theteam@giju.co.uk.

7. Cookies

MyOS uses essential cookies for authentication session management only. We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and server-side API key storage. Payment processing is handled entirely by Stripe's PCI-compliant infrastructure.

9. Children

MyOS is not intended for users under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. Material changes will be communicated via the email address on your account. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact theteam@giju.co.uk.