This Privacy Policy explains how Wally OS (“Wally OS,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our website at wallyos.com, our applications, and related services (collectively, the “Service”). Wally OS is an AI assistant that helps home-service businesses run their operations — including, when you choose to connect them, your Google Business Profile, Google Calendar, and Google Ads accounts.
By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.
1. Information we collect
Account information
When you create an account, our authentication provider (Clerk) collects your name, email address, and authentication credentials. We receive your basic profile and a user identifier so we can sign you in and associate your data with your account.
Information you provide
We collect information you enter into the Service — for example, business details, the messages and instructions you send to Wally, the automations you configure, and any content you ask Wally to create or act on.
Information from services you connect
When you connect a third-party account (such as a Google account), you authorize Wally OS to access certain data from that service on your behalf through its official API. We only request access after you explicitly grant it through that provider’s consent screen, and you can revoke access at any time (see Your choices and controls). The specific Google data we access is described in Google user data below.
Usage and device information
We collect limited technical information needed to operate and secure the Service, such as log data, IP address, browser type, and interactions with features. We use this for security, debugging, and improving the Service.
2. Google user data
If you choose to connect a Google account, Wally OS requests access only to the scopes needed for the features you use. We act solely as your agent — accessing your Google data to perform the tasks you ask Wally to perform on your behalf. The scopes and how we use each:
Google Business Profile
Scope: https://www.googleapis.com/auth/business.manage
- What we access: your business locations, profile details, customer reviews, posts, and performance insights.
- How we use it: to show you an overview of your profile and reviews, and — only when you direct Wally to — to reply to reviews and publish posts on your behalf.
Google Calendar
Scope: https://www.googleapis.com/auth/calendar
- What we access: your calendars and events, and your availability (free/busy times).
- How we use it: to help you schedule work — viewing events, finding open time, and creating, updating, or deleting events when you ask Wally to.
Google Ads
Scope: https://www.googleapis.com/auth/adwords
- What we access: your advertising campaigns and their performance metrics.
- How we use it: to report on campaign performance and — only when you direct Wally to — pause or resume campaigns and adjust daily budgets.
We do not access any Google data beyond what these scopes permit, and we never use your Google data to serve advertising to you.
3. Limited Use disclosure (Google API Services)
Wally OS’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide and improve the user-facing features that are prominent in the Service and that you have requested.
- We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read your Google user data unless: (a) we first obtain your affirmative agreement to view specific data; (b) it is necessary for security purposes (such as investigating abuse) or to comply with applicable law; or (c) the data is aggregated and anonymized and used for internal operations.
- We do not use Google user data to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. Any AI processing is performed solely to carry out the specific task you requested (see AI processing and sub-processors).
4. AI processing and sub-processors
Wally OS is an AI assistant. To carry out a task you request — for example drafting a review reply or summarizing campaign performance — we may send the relevant data, which can include data from your connected Google account, to enterprise AI providers (such as Anthropic and OpenAI) acting as our sub-processors. These providers process the data only to return the requested result and, under their API terms, do not use data submitted through their APIs to train their models. We do not use your Google user data to train any generalized AI or machine-learning models.
5. How we use information
- To provide, maintain, and operate the Service;
- To perform the specific tasks and automations you ask Wally to carry out;
- To authenticate you and secure your account and our systems;
- To communicate with you about the Service, including support and important notices;
- To detect, prevent, and address fraud, abuse, security, and technical issues; and
- To comply with legal obligations.
6. How we share information
We do not sell your personal information. We share information only:
- With service providers and sub-processors who perform services on our behalf (such as hosting, authentication, and AI processing) under contractual confidentiality and data-protection obligations;
- At your direction — for example, when you ask Wally to publish a post or reply to a review on a connected account;
- For legal reasons, when required by law or to protect the rights, safety, and security of users, the public, or Wally OS; and
- In a business transfer, such as a merger, acquisition, or sale of assets, with notice to you as described in the Limited Use disclosure above.
7. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. When you disconnect a Google account, we delete the associated access and refresh tokens. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
8. How we protect your information
We take data security seriously. OAuth access and refresh tokens for connected accounts are encrypted at rest using authenticated encryption (AES-GCM) and are never exposed through our public APIs. Data is transmitted over encrypted connections (TLS), and access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.
9. Your choices and controls
- Disconnect a service: You can disconnect any connected account at any time from the Connectors page in the Service, which removes our stored tokens for that account.
- Revoke Google access directly:You can review and revoke Wally OS’s access to your Google account at any time at myaccount.google.com/permissions.
- Access, correct, or delete your data: You may request access to, correction of, or deletion of your personal data by contacting us at the address below.
- Delete your account: You may delete your account, which removes your personal data as described in Data retention.
10. International data transfers
We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
11. Children’s privacy
The Service is intended for businesses and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
12. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
13. Contact us
If you have questions about this Policy or our data practices, or to make a privacy request, contact us at privacy@wallyos.com.