Privacy Policy

Big Shot OS · Last updated July 5, 2026

Big Shot OS ("we", "us") provides a business operating system (CRM, invoicing, projects, scheduling, and related tools) to businesses ("you"). This policy explains what we collect, how we use it, and your choices. Questions: [email protected].

Information we collect

• Account data — name, email, workspace and user settings you provide.
• Business data you enter — customers, leads, projects, invoices, tasks, files, and messages.
• Connected-service data — when you connect a third-party service (for example Intuit QuickBooks Online, Plaid for bank connections, Google, Microsoft, or your bank), we access only the data needed to provide the features you enable: e.g. QuickBooks customers, invoices, payments, deposits/payouts, and fees; email/calendar for the inbox; and bank account balances and transactions via Plaid.
• Usage and device data — basic logs needed to operate and secure the service.

How we use it

• To provide and operate the features you turn on (e.g. sync invoices and reconcile fees).
• To secure the service, prevent abuse, and provide support.
• We do not sell your data, and we do not use data from any connected service (QuickBooks, Google/Gmail, Microsoft, or Plaid) for advertising.

QuickBooks / Intuit data

Data accessed through the Intuit QuickBooks Online API is used solely to deliver the connected features within your own workspace, is stored securely, is associated only with your account, and is never shared with other customers. You can disconnect QuickBooks at any time from Settings → Integrations; on disconnect we stop accessing your QuickBooks data and remove stored Intuit access tokens.

Google user data (Gmail)

If you choose to connect a Google account, Big Shot OS requests access to your Gmail so it can provide the in-app email features you turn on:

• Reading email (gmail.readonly) — to display your messages inside the app's unified inbox (subject, sender, body, attachments, folders/labels) so you can read and manage email without leaving Big Shot OS.
• Sending email (gmail.send) — to send messages, replies, and invoices that you compose and choose to send from within the app, from your own connected address.

How Google user data is handled. We access your Gmail data only to provide these features to you, within your own workspace. Message content and metadata are stored securely, are associated only with your account, and are never shared with other customers.

Limited Use disclosure. Big Shot OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Gmail data obtained through these scopes is never:

• used for advertising, or sold to anyone;
• used to train generalized or non-personalized artificial-intelligence or machine-learning models;
• read by humans, unless (a) you give explicit consent for specific messages (for example, to troubleshoot a support request), (b) it is necessary for security or to comply with applicable law, or (c) the data is aggregated and anonymized for internal operations; and
• transferred to third parties except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition with notice to you.

You can disconnect Google at any time from Settings → Integrations; on disconnect we stop accessing your Gmail and delete the stored Google access and refresh tokens.

Microsoft / Outlook data

If you connect a Microsoft account, we access your Outlook mail (read, read/write, and send) solely to power the same in-app inbox and sending features, under the same handling: stored securely, associated only with your account, never shared with other customers, and never used for advertising. You can disconnect at any time, which stops access and deletes the stored tokens.

Bank connections (Plaid)

We use Plaid Inc. to let you securely connect your bank and financial accounts. With your authorization, Plaid provides us your account balances and transaction history so we can display your accounts, forecast cash flow, and reconcile payments within your workspace. By connecting an account you also agree to Plaid's End User Privacy Policy. Plaid data is used solely to provide these features, is stored securely, is associated only with your account, is never shared with other customers, and is never used for advertising. You can disconnect a financial institution at any time; on disconnect we stop accessing it, instruct Plaid to remove the connection, and delete the stored access tokens.

Storage, security, and retention

Data is stored in access-controlled databases with tenant isolation; credentials and tokens are encrypted. We retain data while your account is active and delete or anonymize it on request or a reasonable period after account closure.

Sharing

We share data only with infrastructure providers that help us run the service (e.g. database, email delivery) under confidentiality obligations, and where required by law.

Your choices

• Disconnect any integration at any time.
• Request access to, correction of, or deletion of your data by emailing [email protected].

Changes

We may update this policy and will revise the date above. Continued use means acceptance of the updated policy.

Contact: [email protected]