1. Scope and operator

This Privacy Policy applies to MBI-OS and the services that link to it. MBI-OS is operated by a Wisconsin sole proprietorship. In this Policy, “MBI-OS,” “we,” “us,” and “our” refer to the operator of the Service.

This Policy should be read together with the MBI-OS Terms of Service. It does not govern third-party websites, platforms, or services that maintain their own privacy practices.

2. Information we collect

Account and contact information

We may collect your name, email address, account credentials in protected form, organization name, job title, contact preferences, and information you provide when requesting support or contacting us.

Billing and subscription information

We may collect plan selection, subscription status, billing history, transaction identifiers, usage charges, billing contact details, and limited payment-method information supplied by our payment processor. MBI-OS does not store full payment-card numbers or card security codes.

Prospect, lead, and research information

You may provide or request information concerning business contacts, prospects, organizations, and research subjects. This may include names, company names, roles, business contact details, locations, profile URLs, notes, campaign details, screening inputs, and other information you choose to enter, import, or upload.

The Service may return business contact information, company data, public-source information, sanctions and Politically Exposed Person information, research observations, risk indicators, and related data from third-party or public sources.

Content and reports

We may process outreach instructions, message drafts, generated messages, sequence content, notes, screening results, risk notes, reports, exported content, feedback, and support communications.

Usage, device, and technical information

We may collect feature usage, requests, searches, message-generation events, screening events, plan-limit consumption, timestamps, log-in events, audit events, browser type, device information, IP address, approximate location derived from IP address, referring pages, error information, and security signals.

Cookies and local storage

We may use cookies, session storage, local storage, and similar technologies that are necessary for authentication, security, account preferences, billing flow, and basic Service operation. We do not use third-party advertising cookies through the Service unless this Policy is updated to disclose that practice.

3. Sources of information

We may obtain information:

• Directly from you when you register, subscribe, use a feature, enter a lead, request a screening, generate content, contact support, or otherwise provide information
• From your organization or an authorized account administrator
• From public websites, public records, sanctions and PEP datasets, search results, company websites, and other publicly available sources
• From licensed enrichment, research, compliance, geolocation, infrastructure, and data providers
• Automatically from your browser, device, account activity, and interaction with the Service
• From payment, communications, hosting, security, and authentication providers

Third-party and public-source information may be incomplete, delayed, outdated, inaccurate, or associated with the wrong person or organization. Users must independently verify material information.

4. How we use information

We may use information to:

• Create, authenticate, maintain, and secure accounts
• Provide lead enrichment, company research, outreach drafting, sequences, reminders, Today View, sanctions and PEP screening, reports, and related features
• Generate, personalize, and improve user-requested content
• Process subscriptions, calculate usage, apply plan limits, collect disclosed charges, manage cancellations, and maintain transaction records
• Respond to support requests and Service communications
• Detect, investigate, prevent, and address abuse, fraud, security incidents, technical problems, and violations of our Terms
• Maintain audit records, troubleshoot errors, monitor reliability, and improve performance
• Comply with legal obligations, enforce agreements, establish or defend legal claims, and protect users, MBI-OS, and others
• Create aggregated or deidentified statistics that do not reasonably identify an individual

We do not use MBI-OS screening data to make employment, housing, credit, insurance, licensing, or other regulated eligibility decisions.

5. LinkedIn information and account boundaries

MBI-OS does not request your LinkedIn password, log into your LinkedIn account, connect directly to your account, send connection requests, send messages, publish content, or perform LinkedIn account activity on your behalf.

MBI-OS does not use automated means to scrape information directly from a user’s LinkedIn account. Information displayed in the Service may come from user input, licensed data providers, public sources, search providers, or other sources described in this Policy.

If you provide a LinkedIn profile URL or information copied from a profile, we process it as user-provided information under this Policy. A feature may copy user-reviewed text to your device clipboard and open a user-selected LinkedIn profile URL. MBI-OS does not inspect the opened page, paste into LinkedIn, click page elements, or send anything.

6. Artificial intelligence and automated processing

MBI-OS may send information needed to fulfill a request to artificial-intelligence providers. Depending on the feature, this may include prompts, lead or company information, message instructions, screening context, or other content submitted by the user.

AI processing may generate outreach drafts, summaries, research observations, risk notes, suggested next steps, and other content. Generated output may be inaccurate and must be reviewed by the user.

MBI-OS does not use automated output to make final employment, housing, credit, insurance, licensing, or other regulated eligibility decisions. Users are prohibited from using the Service for those decisions as explained in the Terms.

Providers used for AI-assisted features may include OpenAI, Anthropic, or Google, depending on configuration and feature availability. Their processing is governed by applicable service agreements and privacy terms.

7. Enrichment, screening, and reports

Lead enrichment and research may use information provided by users, public sources, search services, and commercial data providers. Providers or tools may include Serper, BuiltWith, LocationIQ, Breadcrumbs, or similar services, depending on the requested feature and current configuration.

Sanctions and PEP screening may use OpenSanctions and other compliance datasets or service providers. Research and infrastructure intelligence may use providers such as Censys where relevant to a requested feature.

Screening inputs and results may include names, organizations, identifying details, match information, status, risk level, source references, timestamps, and generated notes. Screening results and saved reports are informational, may contain false positives or false negatives, and may become outdated.

If you print, download, save, or share a report, you are responsible for its security, accuracy review, lawful use, retention, and disposal.

8. How information is disclosed

We may disclose information only as reasonably necessary for the purposes described in this Policy, including to:

• Hosting, infrastructure, database, storage, security, logging, and deployment providers
• AI, enrichment, search, research, sanctions, PEP, geolocation, and other feature providers
• Payment processors such as Stripe for subscriptions, transactions, fraud prevention, and billing support
• Communications providers, which may include Telnyx, Telegram, or email providers, when you enable or request a related notification or communication
• Professional advisers, auditors, insurers, and service contractors subject to appropriate obligations
• Government authorities, courts, or other parties when required by law or reasonably necessary to protect rights, safety, security, or the integrity of the Service
• A successor or prospective successor in connection with a merger, financing, reorganization, sale of assets, acquisition, or similar transaction, subject to appropriate safeguards

We may disclose aggregated or deidentified information that cannot reasonably identify you.

No sale of personal information

MBI-OS does not sell personal information for money. We do not share personal information for cross-context behavioral advertising and do not use prospect or screening data for targeted advertising.

9. Legal bases for processing

Where a law requires a legal basis, we process information as necessary to perform a contract with you, provide requested features, pursue legitimate interests such as operating and securing the Service, comply with legal obligations, protect vital interests, or act with consent when consent is required.

Legitimate interests may include preventing abuse, maintaining security, supporting users, improving reliability, enforcing plan limits and agreements, and developing requested business features. You may withdraw consent for future processing when processing depends on consent, but withdrawal does not affect earlier lawful processing.

10. Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Policy, comply with legal and accounting obligations, resolve disputes, enforce agreements, prevent fraud or abuse, and maintain security and audit records.

Retention periods vary by information type, account status, feature, legal requirement, and operational need. Billing and transaction records may be retained for tax, accounting, dispute, and legal purposes. Security, audit, backup, and fraud-prevention records may remain for a limited period after account deletion.

When information is no longer required, we may delete, anonymize, or securely isolate it. Deletion from active systems may not immediately remove residual copies from backups, logs, or legally required records.

Account and data deletion

You may request deletion of your account or personal information by contacting info@mbi-os.com. We may need to verify the request and may retain information when required or permitted by law.

11. Security

MBI-OS uses administrative, technical, and organizational safeguards designed to protect information. Depending on the system and data, safeguards may include encryption in transit, encryption at rest, access controls, credential protection, service isolation, audit logging, integrity controls, monitoring, backups, and restricted administrative access.

No method of transmission, storage, or processing is completely secure. We cannot guarantee that unauthorized access, loss, misuse, alteration, or disclosure will never occur.

You are responsible for protecting your account credentials, securing exported reports, limiting access to account data, and promptly notifying us of suspected unauthorized use.

12. Your choices and privacy rights

Depending on your location and applicable law, you may have the right to request access to, correction of, deletion of, or a copy of certain personal information. You may also have the right to object to or restrict certain processing, withdraw consent, or appeal a denied privacy request.

You may update certain account information through the Service. You may stop using the Service, cancel a paid plan through Billing, or request account deletion. Canceling billing does not automatically require immediate deletion of all account information.

To submit a privacy request, email info@mbi-os.com with enough information for us to understand and verify the request. We may request additional information to confirm identity or authority. Authorized agents may be required to provide written authorization.

We will not unlawfully discriminate against you for exercising an applicable privacy right. Some requests may be limited or denied when an exception applies, including when information must be retained for security, fraud prevention, legal compliance, recordkeeping, dispute resolution, or the rights of others.

13. Communications and preferences

We may send transactional or service-related communications concerning verification, security, billing, subscriptions, support, account activity, feature availability, and changes to our terms or policies.

You may opt out of nonessential promotional email by using an unsubscribe mechanism when provided or contacting us. You cannot opt out of communications necessary to operate, secure, or administer an active account.

Optional SMS, Telegram, or similar notifications are processed only when the feature is enabled or requested and remain subject to the settings and terms of the applicable provider.

14. International processing

MBI-OS and its service providers may process information in the United States and other countries. Privacy and data-protection laws may differ from those in your location. Where required, we use appropriate contractual or legal safeguards for international transfers.

15. Children

MBI-OS is a business service intended for adults. It is not directed to anyone under 18, and we do not knowingly collect personal information directly from children. If you believe a child has provided personal information to MBI-OS, contact us so we can investigate and take appropriate action.

16. Third-party services and links

The Service may link to or interact with third-party websites, platforms, and services. Their privacy practices are governed by their own policies. MBI-OS is not responsible for the privacy, security, availability, accuracy, or conduct of a third party.

Opening a LinkedIn profile, using a payment page, enabling a communication provider, or following another external link may cause the third party to collect information directly from you under its own terms.

17. Changes to this Policy

We may update this Privacy Policy to reflect changes in the Service, providers, technology, practices, or law. We will post the revised Policy and update its effective date. When required, we may provide additional notice through the Service, account email, or another reasonable method.

Your continued use of the Service after an updated Policy becomes effective is subject to the revised Policy, except where applicable law requires another form of notice or consent.

18. Contact

Questions, privacy requests, deletion requests, and concerns about this Policy may be sent to info@mbi-os.com.

Operator: MBI-OS, a Wisconsin sole proprietorship.