ComOS privacy & data

Name, email address, phone number

Billing information and payment details

IP address and approximate location

Browser type and version

Pages visited and features used

Support requests and correspondence

Create and manage your account

Detect and prevent fraud and abuse

Power in-Platform AI features (search, recommendations, automation, brand voice, policy enforcement)

Marketing communications (with consent)

MCP audit logs are retained for **90 days**, then automatically deleted by a database time-to-live (TTL) policy.

**30 days**: Data available for export

**90 days**: Data deleted from production systems

**1 year**: Data purged from backups

Tenant data is stored in Google Cloud and MongoDB Atlas in the United States.

We rely on Standard Contractual Clauses approved by the European Commission to protect EEA/UK/Swiss personal data.

This is the complete list of ComOS sub-processors, and it is identical to Appendix A of the [Data Processing Agreement](https://comos-federation.com/dpa), which also gives each one's location.

Our [Data Processing Agreement](https://comos-federation.com/dpa) ("DPA") is **incorporated by reference into the [Terms of Service](https://comos-federation.com/terms) and applies automatically**

Request deletion of your account and data

Request a copy of personal data we hold about you

Request correction of inaccurate data

Request deletion of your account and data

Export your data in standard formats (CSV, JSON)

Request the categories and specific pieces of personal information collected

Object to processing based on legitimate interests

Withdraw consent at any time