Privacy Policy

1. Who we are and what this policy covers

NuSphere is a business workspace operated by BPN Solutions LLC ("BPN", "we", "us"). It connects business information so authorized people and AI assistants can search it, understand its history and work with it. This policy covers only BPN's private internal testing of NuSphere, including its web application, API and connected-client interfaces, and iOS companion.

Only BPN team members and testers specifically authorized to act on BPN's behalf may participate. There is no public signup or external-customer access under this pilot. This policy does not govern deployments for external customer organizations. For other organizations, see the existing organization privacy notice. This BPN-only policy does not replace that notice for those organizations.

In this policy, "your organization" means BPN. BPN chooses the pilot's members, connected sources and workspace permissions and uses account, security and support information to operate it. Information about BPN's customers, coworkers and business contacts may still appear in authorized business records; private testing does not remove their privacy rights or the requirements for source authorization.

2. Information we receive

• Identity and access: work email, display name, organization, role, permissions and authorization tokens. Google sign-in does not give us your Google password.
• Workspace content: documents, notes, files, transcripts, messages, links and the business relationships your organization saves or authorizes us to import.
• Connected sources: depending on what is enabled and authorized, Gmail message content and attachments; Calendar events and participants; Granola notes and transcripts; Discord messages and channel metadata; and configured repository records. We receive only data available through the authorized connection and configured capture rules.
• QuickBooks, when enabled: company identifiers, customer records, invoice details, balances and payment records needed for account-status evidence. The planned integration is read-only. It does not initiate payments or create, change or delete accounting records, and does not connect to the Payments or Payroll APIs.
• AI interactions and derived records: prompts, relevant retrieved content, generated answers, summaries, proposed relationships and source references.
• Operations and support: change history, timestamps, connection status, technical request and error records, and information you send when asking for help.

Not every integration is enabled in this pilot. Connecting a source is separate from granting other people access to its captured content. Content may contain information about coworkers, customers and other people supplied by your organization.

3. Why we use information

We use information to authenticate users, apply permissions, import and organize authorized content, search and link records, preserve provenance and history, provide requested AI features, support users, and protect and troubleshoot NuSphere. Account timelines and summaries help people review business evidence; they are not authoritative accounting records or autonomous financial decisions.

We do not sell personal information, share it for cross-context behavioral advertising, or use workspace content to target advertising. We do not use connected Google or QuickBooks data to train general-purpose AI models.

4. Who can receive information

• Your organization: members and administrators according to workspace permissions. Administrators may manage access and handle requests about organizational records.
• Service providers: Google Cloud hosts the service and its data storage. Configured AI services, including Anthropic models and Google Cloud AI services where enabled, process relevant inputs to generate results. These providers process information under the applicable service agreements; this policy does not promise zero provider retention.
• Clients and destinations you authorize: using an external AI assistant, connected application, export or configured notification destination can send permitted content to that service. Your organization must choose appropriate permissions and review that service's terms and privacy settings.
• Necessary human access: authorized support or security personnel may access information as needed for authorized support, investigating abuse or incidents, or legal obligations. Additional restrictions on Google data are described below.
• Legal requirements: we may disclose information when legally required or as necessary and permitted by law to protect the service, people or legal rights.

We do not make BPN's pilot workspace public or grant external customer organizations access under this pilot. Content returned to an independently selected client is also subject to that client's practices, which BPN does not control.

5. Google data and AI limitations

NuSphere's use and transfer of Google API data follows the Google API Services User Data Policy, including Limited Use requirements.

Google data is used for authorized, user-facing workspace features, not advertising, resale, creditworthiness decisions or generalized AI training. Transfers are limited to providing those features or other uses permitted by Google's policies. Human reading is limited to specific affirmative consent, necessary security purposes, legal requirements, or permitted internal operations involving aggregated, anonymized data.

See the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy. A policy page is not a substitute for source authorization: the required connection disclosures and consent still apply.

6. Retention, disconnection and deletion

NuSphere keeps workspace information to provide your organization's service, including its approved business history. Retention depends on the data, organizational instructions, security needs and applicable legal obligations. Not every source has automatic age-based deletion.

Disconnecting or revoking a source stops future authorized access; it does not by itself erase information already captured in the workspace. Removing a member ends their access, not the organization's ownership of its records. Uninstalling the mobile app also does not delete the workspace.

Ask your administrator or contact BPN to request access, correction, export or deletion. We verify the requester's authority and coordinate requests involving organizational data with its administrator. We will explain any applicable retention exceptions, including limited security, legal or backup records, when handling a deletion request. Revocation can also be performed through the connected provider's account settings.

7. Security, sessions and the iOS app

We use HTTPS, identity-based permissions and audit history to protect data. No service can guarantee absolute security. The web app uses session cookies for authentication and local storage for preferences such as theme; it does not use advertising trackers.

The iOS app signs in through the system browser and stores authentication tokens in the iOS Keychain. Sharing or capturing sends the text or link you choose to your workspace, where the processing described in this policy applies. The app does not independently collect your contacts, photo library or location. Optional Face ID or Touch ID checks stay on your device; BPN does not receive biometric data. Signing out clears the app's tokens and web session.

8. Location and privacy requests

BPN operates in the United States. Hosting, authorized providers and support may process information in the United States and other locations where their services operate; this policy does not promise a particular data-residency boundary.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, or withdraw consent. Contact us or your administrator to exercise applicable rights. You may also contact your local privacy regulator. We do not penalize you for exercising legally protected privacy rights.

9. Children and policy changes

NuSphere is a business service, not directed to children under 13. Contact us if you believe a child has provided information that should be removed.

We will date policy updates and notify affected organizations of material changes. Where required, new uses of connected data will need additional disclosure and consent before they begin.

10. Support and contact

Privacy requests and app support: support@bpnsolutions.com. BPN Solutions LLC, 11989 Windpointe Pass, Carmel, IN 46033, USA. Please do not email passwords, API keys or complete accounting records when requesting help.