BHN OS Privacy Policy - Global Business Management Consulting Firm

Home > BHN OS Privacy Policy

BHN OS — Privacy Policy

Version 1.0 | Effective June 1, 2026

Winning Edge Group LLC d/b/a Group50® Consulting

This Privacy Policy explains how BHN OS collects, uses, and protects information about you and your company when you use the BHN OS platform. We are committed to protecting your privacy and your company’s confidential information.

1. Information We Collect

1.1 Account Information

When you create a BHN OS account, we collect: your name, email address, password (stored as a cryptographic hash — we never store your actual password), and company affiliation.

1.2 Company and Business Data

To provide the Service, BHN OS stores business information you choose to enter, including: company name, industry, revenue, employee count, strategic foundation data (Mission, Vision, Values, MIG, Where To Play, How To Win), financial objectives, KPIs, business descriptions, strategic initiatives, and any other content you enter into the platform.

1.3 Usage Data

We automatically collect certain usage information including: login timestamps, features accessed, AI message counts (for usage limit tracking), and general platform activity. We do not track individual keystrokes or sell behavioral data.

1.4 Billing Information

Payment information is collected and processed exclusively by Stripe, Inc. BHN OS stores only non-sensitive billing metadata (subscription tier, status, renewal date). We never store credit card numbers, CVV codes, or full payment card details.

1.5 AI Conversation Content

Messages you send through Business Chat and other AI features are processed by third-party AI providers to generate responses. These conversations are stored in your company’s BHN OS workspace and are not accessible to other companies. See Section 4 for details on AI provider data handling.

2. How We Use Your Information

We use collected information solely to:

Provide, operate, and maintain the BHN OS Service
Personalize AI responses with your company context
Process billing and manage your subscription
Send service communications (account notices, billing receipts, material updates)
Monitor platform health, diagnose technical problems, and improve the Service
Comply with legal obligations

We do not use your business data to train AI models, sell advertising, create behavioral profiles for sale, or share with third parties for their commercial purposes.

3. How We Share Your Information

3.1 We Do Not Sell Your Data

We do not sell, rent, or license your personal or company data to third parties for any commercial purpose.

3.2 Service Providers

We share data with trusted service providers who help us operate the Service, under strict confidentiality agreements:

Stripe, Inc. — payment processing (subject to Stripe’s privacy policy)
Anthropic, OpenAI, Google — AI query processing (see Section 4)
People Data Labs — candidate search and professional profile data (Talent module only)
Web hosting and infrastructure providers

3.3 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or the public.

3.4 Business Transfer

If the Company is acquired, merges with another entity, or sells substantially all of its assets, your information may be transferred to the acquiring entity. You will be notified of any such change via email or in-app notice.

4. AI Providers and Your Data

BHN OS uses enterprise API access to process AI requests. This is meaningfully different from consumer AI products in the following ways:

API Data Use: Under Anthropic’s, OpenAI’s, and Google’s API terms, data submitted via API is not used to train their AI models. This is a contractual commitment in their enterprise API agreements.
No Persistent Storage by AI Providers: AI providers process your queries to generate responses but do not persistently store your conversations as linked to your identity within their systems.
What AI Providers Receive: When you send a message in BHN OS, the text of your message (and relevant company context) is transmitted to the AI provider to generate a response. The AI provider sees the content of the query but not your account identity.
Provider Privacy Policies: Anthropic — anthropic.com/privacy. OpenAI — openai.com/privacy. Google — policies.google.com/privacy.

BHN OS does not guarantee the privacy practices of third-party AI providers. We select providers based on their privacy commitments and enterprise API terms, but those policies may change. We recommend reviewing provider policies periodically.

5. Data Security

We implement industry-standard security measures to protect your data:

Passwords are stored as bcrypt cryptographic hashes — never in plain text
All data transmission uses HTTPS/TLS encryption
AI API keys are stored server-side and never exposed to client browsers
Company data is logically isolated — each company’s workspace is accessible only to that company’s users
Access to production systems is restricted to authorized personnel

No method of electronic transmission or storage is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we retain your data for 30 days to allow for account recovery, after which it is permanently deleted. You may request immediate deletion by contacting info@group50.com.

Billing records are retained as required by applicable law (typically 7 years). Anonymized, aggregated usage statistics may be retained indefinitely.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal and company data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data (subject to legal retention requirements)
Portability: Request an export of your data in a machine-readable format
Objection: Object to certain uses of your data

To exercise any of these rights, contact us at info@group50.com. We will respond within 30 days.

8. GDPR (European Users)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is: (a) contract performance — processing necessary to provide the Service you have subscribed to; (b) legitimate interests — usage analytics for service improvement; and (c) legal obligation — compliance with applicable law.

For GDPR inquiries or to exercise your rights, contact info@group50.com. You also have the right to lodge a complaint with your local data protection authority.

9. CCPA (California Users)

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact info@group50.com.

10. Cookies

BHN OS uses session cookies necessary for authentication and platform functionality. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics that share data with advertisers. You may disable cookies in your browser settings, but this will prevent you from logging in to BHN OS.

11. Children’s Privacy

BHN OS is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact info@group50.com and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to your registered address or via an in-app notice at least 30 days before taking effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. The current Policy version is always available at BHNOS.ai/privacy.