Optimize Business Systems Inc.
Privacy Policy
Effective November 11, 2026.
Who this policy covers
OBS Compass is a business planning, team collaboration, training, and meeting service provided by Optimize Business Systems Inc. ("OBS"), Box 3314, La Crete, Alberta T0H 2H0, Canada. This policy describes how information is handled when you use Compass. If your employer or another organization provides your account, that organization controls its workspace and decides who may access the business information in it. Contact compass@optimizebusinesssystems.com with privacy questions or requests.
Information we process
We process account and profile information, such as your name, email address, organization membership, roles, and authentication records; content you or your organization enters, such as plans, tasks, goals, scorecards, notes, attachments, training activity, and meeting information; subscription and transaction records; and technical information needed to operate and protect the service, such as session identifiers, IP addresses, device or browser information, errors, and security logs. Enabled recording, transcription, or AI features may also process audio, transcripts, prompts, and generated results.
How we use information
We use this information to provide and support Compass, authenticate users, apply workspace permissions, deliver requested integrations and communications, administer subscriptions, maintain security, diagnose problems, and comply with applicable obligations. Your organization’s settings and the features you choose determine which information is processed.
Google Sign-in
If you choose Google Sign-in, we request your Google account identity, primary email address, and basic profile information to authenticate you and associate you with an authorized Compass account. Signing in with Google does not by itself give Compass access to your calendar, Gmail messages, or Google Drive files. We do not receive your Google password.
Google Calendar connection
Connecting Google Calendar is a separate, optional authorization. Compass requests permission to view your calendar list and to view and edit calendar events. We use the calendar list to let you select a writable calendar. We use event access to create, update, and, when requested by the meeting workflow, cancel Compass meeting events. These events may contain the meeting title, schedule, time zone, recurrence, Compass meeting link, and attendee email addresses. Google may send invitations or updates to those attendees as part of the requested action. The Google permission covers events across your calendars; Compass uses it for the meeting-calendar features you request, rather than importing your unrelated calendar history.
Google data storage and limits
Compass stores the selected calendar identifier, connection and event references, delivery status, and OAuth credentials needed to maintain the connection. OAuth credentials are encrypted in application storage. Calendar delivery records can include the event details and invitee information needed to carry out the requested meeting action. Our use and transfer of Google-derived information follows the Google API Services User Data Policy, including its Limited Use requirements. Google-derived data is used only to provide or improve the user-facing integration. We do not sell it, use it for advertising, use it to determine creditworthiness, or use it to train generalized AI or machine-learning models. Transfers and human access are limited to what is needed to provide the integration, comply with law, address security or abuse, or act with the user’s specific consent, as permitted by Google’s Limited Use requirements.
Sharing and service providers
Workspace information is available to users, administrators, coaches, and support personnel according to their assigned permissions and the support requested. We use service providers for functions such as hosting, storage, authentication, payments, communications, video, and optional AI processing. They receive information needed for the services they provide. A feature that sends invitations, publishes content, or connects another service may share the information you select with its recipients. We may disclose information when legally required, to protect rights and security, or as part of a business transfer subject to appropriate protections.
Recording and AI features
When enabled and used, recording and AI features may send selected content, audio, or transcripts to the configured processing provider and return recordings, transcripts, summaries, or other outputs. The person or organization starting a recording is responsible for obtaining any required participant consent. Connecting Google Calendar does not itself authorize meeting recording or AI processing of Google Calendar data. Review generated results before relying on them.
Cookies and security
Compass uses cookies and similar browser storage for sign-in, session security, preferences, and service operation. Disabling essential cookies can prevent sign-in. We use access controls, encrypted connections, protected credential storage, and other safeguards intended to protect information. No system can guarantee absolute security.
Retention, deletion, and your choices
We retain information for the service and account relationship and as needed for security, backup recovery, dispute resolution, and applicable obligations. Retention varies by data type and your organization’s arrangements. You may request access, correction, export, or deletion through your organization administrator or compass@optimizebusinesssystems.com; we may need to verify your identity and authority. Applicable law may provide additional rights. Some records may need to be retained, and backup copies may remain until they expire under the backup process.
Disconnecting Google
You can revoke Compass access through your Google Account’s third-party connections settings at https://myaccount.google.com/connections. Revocation prevents future authorized API access once existing access tokens cease to be valid. To request deletion of stored connection credentials or Google-derived records, contact compass@optimizebusinesssystems.com and identify the affected account and organization. Disconnecting does not automatically delete events already placed in Google Calendar or copies already delivered to attendees; you can manage those in Google Calendar.
International processing and children
Information may be processed in countries where OBS and its service providers operate. Those countries may have different privacy laws. Compass is designed for business use and is not directed to children. Contact us if you believe a child has supplied personal information without appropriate authorization.
Changes and contact
We will update this policy when our practices change and provide additional notice or seek consent when required. New uses of Google data will be disclosed before that use begins, with renewed consent where required. For privacy requests, contact compass@optimizebusinesssystems.com.