CLARITY / OSACT APPLIED
What this platform collects, why it is used, and how to request access or deletion.
Review draft · 18 October 2026 · Not yet approved for production
OSACT Applied is the service platform of Not Rest Inc. Contact do@not.rest about privacy. This draft describes the current build; the operating entity, address, locations, retention schedule and connected providers must be verified before launch.
Discovery can include your name, company, email or phone number, goals, selected services and conversation when you explicitly include it. The workspace can hold appointments, project scope, tasks, notes, uploaded files, sharing permissions and payment records. Avoid credentials, payment-card details, health records and other sensitive personal information in forms or chat.
Information supports the request you submit, account access, meetings, delivery, payment reconciliation and security. A follow-up permission is about your request, not a marketing subscription. Connected AI receives only the context needed for the interaction; provider use and retention must be disclosed before connection. No model-training use is authorized by this notice.
Selected services and bounded chat history can remain in this tab until cleared or the session ends. Contact form fields remain in page memory until you submit; an explicit workspace handoff can also retain your company and project scope in this tab for up to one hour. Essential session cookies support access. Optional campaign attribution and public-site measurement require your choice in Privacy choices; they are off by default and blocked by Global Privacy Control. No advertising pixel or session replay is installed. See Cookies & storage for details.
Authorized people and delegated agents can access records within their permissions. Hosting, identity, communications, media and payment providers receive data only when connected for those purposes. Stripe is the planned payment processor; this local build has no live payment connection. The actual provider list, processing locations and contractual safeguards must be reviewed before production. Direct SMS and email open your chosen communications service.
The preview has no automatic deletion schedule; stored workspace records remain until managed by the owner. Production retention periods and backup deletion must be approved before collecting client data. To request access, correction, export, deletion or withdrawal of a permission, contact do@not.rest. Identity may need verification. Applicable legal, accounting and dispute obligations can limit deletion; an immutable financial history is not a promise to erase all records immediately.
This build has no data-sale, targeted-advertising or cross-context sharing integration. Depending on location and applicability, rights may include access, correction, deletion, portability, objection and complaint to a privacy regulator. Business contact data is still personal data. The operator must confirm applicable regional obligations and response deadlines before launch.
The service is intended for business users, not children. Do not submit information about children. Changes to connected processing must be reflected in this notice before they take effect.
LET’S MAKE SOMETHING GOOD