CyberOS Privacy Policy
This policy covers the CyberOS applications - Android, iOS, desktop, and the web console at os.cyberskill.world. It is published by CyberSkill and is separate from the privacy notice for this website.
Who we are
CyberSkill Software Solutions Consultancy and Development JSC, 1st Floor, 207A Nguyen Van Thu Street, Tan Dinh Ward, Ho Chi Minh City, Vietnam. DUNS 673219568.
Contact for any privacy question or request: info@cyberskill.world.
What CyberOS is, and who controls your data
CyberOS is a private workspace application. You can only use it if your organisation holds a CyberOS account and an administrator has granted you access. There is no public sign-up and no public content.
Your organisation is the controller of the content inside its workspace. We process that content on its instructions, as its processor. Your administrator can see workspace content, manage your access, and revoke it.
What we collect
Account and profile. When you sign in with Google we receive your name, your email address, and your Google account identifier. We use these to create and identify your account. We never receive or store your Google password.
Workspace content. The messages you send, the files and images you attach, your reactions, your mentions of other people, and which messages you have read.
Device identifiers for notifications. If you allow notifications, we store the push token issued to that device and the platform it runs on (Android, iOS, or web), so we can deliver messages to it. Nothing else is read from your device.
Diagnostics. Server-side error and access logs, kept so we can operate and secure the service.
What we do not collect
We do not collect your location. We do not read your contacts, your photo library, your calendar, your SMS, or your call logs. We do not use advertising identifiers.
CyberOS contains no advertising, no third-party ad networks, and no analytics SDKs. We do not sell your data and we do not share it with data brokers.
Why we collect it
To create your account and let you sign in. To deliver your messages and files to the people in your workspace. To send the notifications you asked for. To keep the account secure and to operate the service.
We do not use your workspace content to train any AI model.
Who else processes it
Google, as the identity provider you sign in with. Vultr, which hosts our servers in Singapore. Supabase, which hosts our managed database. Each processes data only to provide that service to us.
If you use an AI feature inside CyberOS, the text you send to it is passed to the model provider that serves that feature, to generate the reply. Nothing else in your workspace is sent.
Security and retention
All traffic between the app and our servers is encrypted in transit with TLS. Access to the production database is restricted to the service accounts that need it.
We keep your account and its content for as long as your organisation keeps its CyberOS account, and then delete it. You can ask us to delete your data sooner at any time.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it. Email info@cyberskill.world from the address you sign in with and we will act within 30 days.
This applies wherever you are. We follow Vietnam's Personal Data Protection law and, for people in the EU and UK, the GDPR.
Deleting your account
You can request deletion of your CyberOS account and its data at any time. The steps, and exactly what is deleted and what is retained, are on the account deletion page linked below.
Children
CyberOS is a workplace tool. It is not directed at children and is not intended for anyone under 18.
Changes
If we change what we collect, we will update this page and change the date below before the change ships. Material changes are announced to workspace administrators.