Privacy and connected accounts

Updated 9 October 2026. Retainly OS is operated by Boatify Rentals LLC and helps people organize projects and record work. Questions about data or deletion can be sent to mfhijazin@gmail.com.

What we collect

We store your registration name, email and a password hash, your workspace records, and messages you authorize us to read. Google access starts with read-only Gmail access. You may enable Gmail read sync through separate Google consent for gmail.modify; opening an email then removes its UNREAD label. This scope technically permits other Gmail changes, but read sync only changes read status. You can separately enable Gmail sending through Google consent to send only replies you explicitly approve. Slack access is limited to public channels selected by a workspace administrator where the Retainly OS app is a member. We do not request Slack direct messages, private channels or Slack posting permissions.

Hostinger Email connects through encrypted TLS IMAP. We store the mailbox password encrypted on our hosting server to read your Inbox. IMAP credentials technically permit mailbox changes, but importing never deletes or moves email. Opening an email marks it as read using the IMAP Seen flag. Clicking Send reply explicitly sends your reviewed reply over encrypted Hostinger SMTP. Disconnect removes the stored password and imported emails. Automatic checking polls while our server process is running; it is not instant push.

How messages are used

Connected messages appear in a conversation inbox. Gmail and Hostinger messages are visible only to the account that connected them. You may explicitly share a message with a team project; its text and source link then become visible to that project’s workspace members. Selected Slack channel posts are visible to members of the Retainly OS workspace whose admin enabled them. Local rules suggest projects and next steps for your review; only approval or an explicit sharing rule publishes personal email into a team project. Messages are not automatically used to score employees or make promotion decisions.

Local Inbox sorting does not send message contents to an external AI model. If you click Draft with Claude, the selected email (and current Gmail thread) plus relevant saved project context is sent to your workspace’s connected Anthropic API to prepare an unsent reply. The draft stays private in Retainly OS until you send or discard it. Never suggest a reply disables replies for that conversation without hiding its emails. Internal chat AI analyzes channels only, never private DMs. Google and Slack data are not sold, used for advertising, or used to train general-purpose AI models. Retainly OS’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Office meetings

While you use your company floor, your avatar location is shared with joined members of that workspace. Taking a seat joins its meeting. Microphone and screen access require your separate browser permission, and media is sent only to other seated participants through encrypted WebRTC connections. Retainly OS does not record these calls. Connection signals are retained for up to one minute and inactive seats expire after 30 seconds. Stand up, leave the Office tab, or close meeting controls to stop your microphone and screen sharing. Direct calls can reveal your network address to other seated participants; configured relay services may carry encrypted media.

Community lounge

Joining the community is optional. When you publish a request, your chosen display name, company name, brief, acceptance criteria and any product link become visible to signed-in community members from other companies. Joining a request shares your community name and company with its requester. Submitted work and review feedback are visible only to that requester and the contributor. Your company floor, member directory, internal projects, emails and chats are not shared with the community. Accepted contributions earn cosmetic office coins in the contributor’s chosen workspace; coins have no cash value and are not used for performance or employment decisions. Product test links open external websites under their own privacy policies. You can close your requests to new contributors and contact us to request removal of community records.

Storage, control and retention

Provider credentials and access tokens are encrypted on the hosting server. Workspace records and imported messages are stored in our server database with authenticated access controls. Imported messages remain until you disconnect or request deletion. Disconnecting removes the stored token and imported source messages; updates you explicitly shared into projects remain unless separately deleted. Revoke the provider grant in Google or Slack to withdraw permission at the provider as well. Hosting backups may retain deleted records until their retention period ends.

Your choices

You can choose channels, mute conversations, disconnect sources, and request account or workspace deletion by contacting us. Your company may impose its own access and retention rules. We request only permissions necessary for the enabled connector. Managers review work evidence; the service does not decide employment outcomes.