Privacy Policy

AIO Media LLC ("AIO Media," "we," "us," or "our") operates AgencyOS, a business-to-business software platform available at agency.aio.fm. This Privacy Policy explains how we collect, use, store, and share information when you use our platform.

By using AgencyOS, you consent to the practices described in this policy. If you are using AgencyOS on behalf of an organization, you consent on behalf of that organization.

1. Information We Collect

Account Information

When you create an account or are invited to join an organization, we collect your name, email address, profile photo (if provided), and organizational role. For Customers, we also collect billing information such as company name, billing address, and payment method details.

Customer Data

Data you and your team upload or create within AgencyOS, including project details, task descriptions, client information, files, calendar events, notes, and any other content entered into the platform. Customer Data is owned by the Customer; we process it solely to provide the service.

Usage Data

We automatically collect information about how you interact with AgencyOS, including pages visited, features used, timestamps, device type, browser type, operating system, and IP address. This data helps us understand usage patterns and improve the platform.

Cookies and Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences (such as theme settings), and collect usage analytics. You can manage cookie preferences through your browser settings, though disabling cookies may affect platform functionality.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the AgencyOS platform
• Authenticate users and manage access controls
• Process payments and manage subscriptions
• Send transactional communications (account invitations, security alerts, billing notices)
• Analyze usage patterns to improve features and performance
• Detect, prevent, and address security issues and abuse
• Provide customer support
• Comply with legal obligations

We do not sell your personal information. We do not use Customer Data for advertising purposes or to train machine learning models.

3. Data Storage and Security

Customer Data and account information are stored using industry-standard cloud infrastructure providers based in the United States. We employ encryption in transit (TLS 1.2+) and encryption at rest for all stored data. For more details about our security practices, see our Security page.

We retain Customer Data for the duration of the Customer's subscription and for 30 days following termination to allow for data export. After this period, Customer Data is permanently deleted. Usage data and analytics may be retained in aggregated, de-identified form for longer periods.

4. Data Sharing and Third-Party Services

We share information with third parties only in the following circumstances:

Service Providers

We use trusted third-party services to operate AgencyOS. These providers process data on our behalf and are contractually obligated to protect it. Categories of service providers include database and backend infrastructure, application hosting, authentication and identity management, and payment processing. We do not store full payment card numbers.

Legal Compliance

We may disclose information if required to do so by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our users.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control.

5. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain types of processing of your personal data
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at privacy@aio.fm. We will respond within 30 days (or sooner if required by applicable law).

6. European Data Protection (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: we process personal data on the following legal bases as applicable: (a) performance of a contract (providing the service); (b) legitimate interests (improving the platform, preventing fraud); and (c) consent (where explicitly provided).

When we transfer personal data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission. You have the right to lodge a complaint with your local data protection authority.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) request disclosure of the categories and specific pieces of personal information we have collected; (b) request deletion of your personal information; and (c) opt out of the sale of your personal information. We do not sell personal information.

We will not discriminate against you for exercising your California privacy rights. To submit a request, contact us at privacy@aio.fm.

8. Children's Privacy

AgencyOS is a business platform and is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within AgencyOS or by email. The "Effective date" at the top of this page indicates when the policy was last revised.