Privacy Policy

Directive Operating Systems Pty Ltd (“DOS”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect personal information, in compliance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1. What we collect

• Account data: business name, contact name, email, phone, billing details and subdomain.
• Customer data: the conversations, calls, bookings and lead records that flow through your DOS — including caller IDs, call recordings, transcripts and message content.
• Operational data: usage logs, error logs and performance metrics needed to run and improve the Services.

2. How we use it

We use personal information to:

• Provide, configure and operate the Services for you and your customers.
• Bill, support and communicate with you.
• Detect, prevent and respond to abuse, fraud and security incidents.
• Improve our products (using de-identified, aggregated data only).

3. AI processing

Voice, SMS and chat content may be processed by third-party AI providers (e.g. large language model and speech providers) to power Micah, COS and BOS. We use providers that contractually commit not to train on your content. We never sell your data.

4. Sharing

We share personal information only with:

• Sub-processors necessary to deliver the Services (hosting, AI, payments, telephony).
• Authorities, where required by law.
• Successors, in the event of a merger, acquisition or restructure.

5. Storage and security

Customer data is stored on Supabase (PostgreSQL) and Vercel infrastructure, with encryption in transit (TLS 1.2+) and at rest. Data is hosted primarily in Australian and US regions; we'll tell you the exact location on request.

6. Retention

We retain customer data for the life of your subscription. After cancellation, we retain records for up to 90 days to support reactivation, then delete or anonymise unless we are required to keep them by law.

7. Your rights

You can:

• Access the personal information we hold about you.
• Request correction or deletion.
• Withdraw consent for non-essential processing.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

8. Cookies

Our marketing site uses minimal first-party cookies for session and analytics. The DOS HUB uses session cookies required for authenticated features.

9. Contact

Privacy enquiries: privacy@directiveos.com.