Across Fractional, ClawPilot, and Career Desk
Clear about data.
Accountable for its use.
We do not sell or rent personal information, use it for targeted advertising, or use customer content to train BPO's own shared AI models. The details below explain the processing involved in delivering the services.
01Who this policy covers
This Privacy Policy explains how BPO Supply Chain ("BPO," "we," "us," or "our") handles personal information in connection with our website, consulting services, and the Fractional, ClawPilot, and Career Desk applications.
For website inquiries, account administration, and our own business and security activities, BPO determines how information is used. When an organization provides information for us to process on its behalf, that organization generally determines the purpose of the work and who may access its workspace. Our handling of that information is also governed by its instructions and the applicable service agreement. This policy does not replace a customer agreement or data-processing agreement.
Career Desk currently opens on jarrett.suburbiasandwichco.com/career. This policy covers the Career Desk service; unrelated pages and services on a linked website may have their own notices.
02Information we handle
We receive information you provide, information an authorized customer or workspace member supplies, information returned by connected services, and technical information generated when our services are used. The categories depend on the product and features involved.
Accounts, inquiries, and support
Name, email address, business and contact details, organization and role, account permissions, sign-in and integration authorization records, and the messages or attachments you send us. Identity providers may supply a verified email address, name, account identifier, and profile image.
Fractional
Carrier agreements, shipping-account identifiers, invoices and charge lines, shipment and tracking identifiers, package characteristics, origin and destination addresses, locations and carrier events, customer contacts, uploaded documents, analysis, reports, and audit evidence. Carrier tracking and proof-of-delivery records can include recipient names or departments, coordinates, delivery photos, signatures, and other supporting attachments.
ClawPilot
Workspace members, customers and contacts, projects, tasks, documents, notes, conversations, and activity history. Enabled operational integrations can supply orders, inventory, delivery addresses, shipping details, sales, payouts, accounting information, and payment-related transaction details contained in provider records.
Career Desk
Career history, résumé and application materials, contact details, location and compensation preferences, target roles, job descriptions, opportunities, fit assessments, drafts, notes, and review or approval history. Supported Gmail and LinkedIn features can import relevant email content and metadata, professional-network content, and information you choose to capture from a supported page. These records may also contain information about recruiters and other people.
Usage, security, and generated records
IP addresses, browser and device information, session identifiers, timestamps, requested pages or actions, errors, access records, and audit events. We also retain workflow results, generated documents, AI inputs and outputs, and related task context where those features are used.
03How we use information
- Provide the requested consulting, transportation analysis, business operations, or career workflow.
- Authenticate users, administer accounts and permissions, and operate enabled integrations.
- Create reports, documents, drafts, recommendations, and supporting evidence.
- Respond to inquiries, deliver account and service communications, and provide support.
- Maintain task continuity, review feedback and workflow quality, investigate errors, and protect the services against misuse.
- Understand aggregate website traffic and how visitors find and use our marketing pages.
- Maintain appropriate business, financial, security, and audit records, meet legal obligations, and address disputes.
We do not sell or rent personal information, and we do not use personal information for targeted advertising.
04Connected accounts and external services
An authorized user or administrator can enable supported connections. Depending on the connection and its permissions, we receive relevant records and exchange information needed to perform the requested workflow. Authorization credentials or tokens may be retained so the connection can continue to operate.
Examples include Google sign-in, Gmail and Google Drive; email, calendar, accounting connections such as Intuit QuickBooks, and commerce connections; carrier and logistics services; and address or route analysis. Gmail and other integrations may operate through the Maton connection service and ClawPilot. Career Desk uses ClawPilot services for supported email, professional-network, and AI workflows.
For transportation features, shipment addresses, locations, or package details may be sent to the selected carrier or service. Where enabled, route and address analysis uses services such as Google Routes and the U.S. Census geocoder. Their processing is part of providing the requested location-based analysis.
Connections can retrieve records in response to an authorized import or configured synchronization; they do not always require a separate approval for every returned record. Disconnecting or revoking a connection can stop future access, but does not by itself delete information already imported, exported, or retained in another service. Provider account controls and terms also apply.
05AI features and application memory
ClawPilot and Career Desk provide AI-assisted features using configured providers, including OpenAI services. A requested AI task can send relevant instructions, document or résumé text, selected message content, job or business context, and recent conversation history to the configured provider. Some configurations also send document text for search embeddings. Supported research features may use external web search.
The AI connection may be configured by BPO or an authorized account or workspace owner. It is not necessarily a separate AI account belonging to each end user. Provider use, retention, and model-improvement settings depend on the service, account, configuration, and applicable agreement. A setting that disables response storage does not establish zero provider retention. We do not make a blanket zero-retention promise for external AI services.
BPO does not use customer content to train BPO's own shared AI models, and does not collect or sell personal information for that purpose. Processing a request through an external model is distinct from training a BPO model. For specific provider training or retention requirements, contact us before using that feature so the requirements can be addressed for your deployment.
ClawPilot and Career Desk can retain prompts, outputs, task history, feedback, and contextual memory to support ongoing work and internal review. Certain agent workflows also retain proposed reusable operational lessons for review, together with source context. Where general operating guidance is approved for shared use, it may be included in later agent runs across workspaces. This application memory is separate from model training and is not a promise that every retained record has been anonymized.
AI output can contain errors. Review generated materials before relying on or sharing them. Career analysis assists the user's review; it does not determine whether an employer hires someone.
08Retention and deletion
Retention varies by product and record. We consider the requested service, account and contract duration, the need to preserve financial or audit evidence, security and dispute requirements, applicable law, and customer instructions. There is no single automatic deletion period across all products.
Some temporary codes, access links, previews, and generated reports expire or are removed under feature-specific rules. Where a report has an expiry or a keep control, that setting applies to the report; it does not necessarily remove the original documents, shipment data, run metadata, or related audit evidence.
Original carrier evidence, published calculations, and audit records may be preserved to maintain their integrity. Deleting an item, dismissing a conversation, disconnecting an integration, or closing access does not necessarily erase all related records. Provider systems, backups, exported copies, and retained source materials may have separate retention and deletion processes.
Contact us for access, correction, or deletion. We assess the request against applicable rights, the customer relationship, and any permitted retention obligations or exceptions. Where we retain information following a request, we will explain the applicable reason as required by law.
09How we protect information
Our services use safeguards that include HTTPS, authenticated sessions, account and workspace permission checks, access controls for customer records, and audit history. Selected stored integration credentials and tokens are encrypted. The controls and configuration vary across applications and providers.
No transmission or storage system can be guaranteed completely secure. If your engagement requires particular security, residency, or regulated-data controls, those requirements should be agreed before the information is provided.
Provide only information needed for the workflow. Contact us before providing patient medical records, government identification, full payment-card details, or other sensitive information that is not required for the agreed service.
10Your choices and privacy requests
Depending on applicable law and our role, you may have rights to confirm whether we process your personal information; access or obtain a portable copy; correct inaccuracies; request deletion; withdraw consent; or object to or opt out of certain processing. Some laws also provide rights concerning significant automated decisions and an appeal if a request is denied.
Email support@bposupplychain.com with the subject "Privacy request," the product involved, and a description of your request. You do not need to create a new account. We may request information reasonably necessary to verify identity or authority, and will respond within the time required by applicable law. Please do not send passwords or unnecessary sensitive documents.
If the information is held in an employer's or another customer's workspace, contact that organization as well. We may need to refer the request to it or assist under its instructions. Applicable legal rights are not limited by this referral.
If we deny a request and an appeal right applies, reply to our response or email the same address with the subject "Privacy appeal." We will review the decision and respond within the applicable deadline. Connecticut residents may also contact the Connecticut Attorney General about privacy concerns.
We do not discriminate against people for exercising applicable privacy rights. You can revoke connected-account permissions through the relevant provider and use available application controls; existing imported copies are addressed under the retention and request process above.
11Processing locations and intended audience
BPO operates in the United States. Our providers and connected services may process information in the United States and other countries where they operate. This policy does not promise that every record stays in a particular country. Contact us if specific transfer or data-residency terms are required for your engagement.
Our services are intended for business and professional use and are not directed to children under 13. If you believe a child has provided personal information to us, contact us so we can review and address it.
12Policy updates and contact
We update this policy when our practices or requirements change and identify the most recent update above. Where required, we provide additional notice and obtain consent before a material change applies to previously collected information.
For privacy questions or requests, contact BPO Supply Chain, Trumbull, Connecticut, United States, at support@bposupplychain.com.