AllinOS™

Privacy Policy

Effective July 13, 2026 · Last updated August 6, 2026

AllinOS is operated by Kovarra LLC, a Florida limited liability company. This policy explains what AllinOS ("we," "us") collects, how it is used, and the choices you have. The short version: your data exists to run your sales business inside the app. We do not sell it, we do not use it for advertising, and we do not let anyone train models on it.

1. Scope

This policy covers the AllinOS application and the pages on this domain. It applies to account holders and to the business records they create. Your customers' interactions with quote and portal pages you share with them are covered here as well.

2. Information we collect

  • Account information: your name, email address, phone number, and profile details you add.
  • Business records you create: customers, appointments, quotes, documents, photos, signatures, and notes.
  • Connected communications: if you connect an email account or the texting bridge, the messages needed to display your conversations and power features like reply drafts.
  • Payment information: handled entirely by Stripe. We receive your subscription status and the card's brand and last four digits, never full card numbers.
  • Usage and device data: app activity and diagnostics used to keep the service fast and reliable.

3. How we use information

Only to operate and improve the service: syncing your data across your devices, sending the notifications you enable, generating quotes and documents, processing payments, and powering AI features. AI processing runs through Anthropic's API and, for image features such as the house visualizer, Google's Gemini API, each under commercial terms that do not permit your data to be used to train their models. We never sell personal information and never use it for third-party advertising.

4. Google user data

If you connect a Gmail account, we access it through Nylas to display your email, send messages you compose or approve, and power email features inside the app. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to third parties except to provide these features, never sell it, never use it for advertising, and never allow humans to read it except with your permission, for security, or as required by law.

5. Text messaging (SMS/MMS)

Sales reps on AllinOS can text with their customers from a dedicated business number hosted by us. Customers provide their phone number when booking an appointment or requesting a quote, and in doing so agree to receive conversational text messages about their project: scheduling, quotes, documents, photos, and follow-ups. Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop receiving messages, or HELP for help.

Phone numbers collected for text messaging, and all text messaging originator opt-in data and consent, will not be shared with or sold to third parties or affiliates for marketing or promotional purposes under any circumstances. Messages pass through our telecom provider solely to deliver them.

6. Cookies and local storage

We use essential cookies and local storage only: keeping you signed in, remembering device preferences, and caching your own data so the app opens instantly and works offline. There are no advertising cookies and no third-party tracking.

7. Service providers

We rely on a small set of processors, each receiving only what it needs: Supabase (database and storage), Vercel (hosting), Stripe (payments), Anthropic and Google (AI processing), Nylas (email connectivity), Telnyx (business phone numbers, text delivery, call forwarding, and voicemail with transcription), Sentry (error diagnostics), and Resend (transactional email).

8. Data retention

Your data is retained while your account is active so the service can do its job. After cancellation, data is retained for a reasonable wind-down period so you can export it, then deleted in the ordinary course, except where the law requires longer retention (for example, billing records).

9. Your rights and choices

You may access and correct your account information in the app at any time, request a full export of your data, and request deletion of your account. We complete deletion requests within 30 days, subject to legally required retention. Depending on where you live, state law may give you additional rights (such as access, deletion, and the right to know); we honor these requests regardless of state. We do not discriminate against anyone for exercising a privacy right.

10. Security

Data is encrypted in transit, access requires an authenticated session, and payment credentials never touch our servers. Our practices are described in plain terms on the Security page.

11. Breach notification

If a security incident affects your personal information, we will notify you without undue delay and in accordance with applicable law, and tell you plainly what happened, what was affected, and what we are doing about it.

12. Children

The service is for business use and is not directed to, or knowingly used to collect data from, anyone under 18.

13. Changes to this policy

If this policy changes materially, we will notify you in the app or by email before the change takes effect, and update the dates at the top of this page.

14. Contact

Privacy questions or requests: email spencer@kovarra.com, or text or call (656) 204-5672.