Privacy Policy

PRELUDE OS is operated by PRIMO DIGITECH SOLUTION (Registration No. 202603119698 (PG0587327-K)), a business registered in Malaysia, at Suite 4, Level 13, Menara Dato' Onn, World Trade Centre Kuala Lumpur, Jalan Tun Ismail, 50480 Kuala Lumpur, Wilayah Persekutuan, Malaysia.

PRELUDE OS is an office management system. Organisations use it to run casework, manage content and campaigns, keep documents, and schedule appointments. This policy covers the PRELUDE OS application at prelude-os.com.

Account information. Your name, username, email address and a password stored only as a cryptographic hash. We record when you sign in so that we can secure the account.

What you create in the app. Cases, notes, contacts, campaigns, content, appointments and the files you upload. This is your organisation’s working data.

Files, if you connect a file account. If you connect Microsoft OneDrive, we read the documents in the folders you connect so they can be searched and summarised inside PRELUDE OS.

Calendar, if you connect a calendar. If you connect Google Calendar or Outlook, we read the events on the calendars you connect — their titles, times, locations, descriptions and attendees — so they appear on your PRELUDE OS calendar alongside everything else.

Basic technical records. Ordinary server logs needed to operate and secure the service.

We do not collect payment card details in the application, and we do not use advertising trackers.

Connecting an account is always your choice. PRELUDE OS works without connecting anything; connecting simply lets it show you one calendar instead of two.

Google Calendar. We request only calendar.events — permission to read and manage calendar events. We ask for this so that appointments booked in PRELUDE OS appear on your own Google Calendar, and so your existing meetings appear in PRELUDE OS. We do not request full calendar administration, and we do not request access to Gmail, Google Drive, Contacts or any other Google service.

Microsoft. We request permission to read and write your calendar (Calendars.ReadWrite) and, for the document features, to read and write files you connect (Files.ReadWrite). These are delegated permissions: they apply to your own account, never to your organisation’s other users.

When you connect a calendar, all events on the calendars you select are imported — including personal ones. We are telling you plainly because it is a real consequence: a medical or family appointment on a connected calendar will be stored in PRELUDE OS and visible to you there. If you do not want that, do not connect that calendar.

PRELUDE OS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is:

• used only to provide the calendar features described in this policy;
• never sold, and never transferred to anyone except as described in section 6;
• never used for advertising, ad targeting, or building advertising profiles;
• never read by a human, except where you explicitly ask us to for support, where the law requires it, or where it is necessary for security.

To operate the features you use: showing your calendar, running casework, producing content, searching your connected documents, and keeping your account secure.

We do not sell your data, and we do not use it to train AI models.

People in your organisation. Your data is scoped to your organisation’s workspace. Other users in that workspace see it according to their role; users of other organisations never do.

Service providers we depend on. We use a small number of processors to run the service — hosting and database providers, and AI providers such as Anthropic and OpenAI. Where a feature uses AI— summarising a document, drafting content, or scheduling assistance — the relevant content is sent to that AI provider to produce the result. We use these providers under terms that prohibit them from training their models on our customers’ data.

Legal requirements. We may disclose information where the law requires it.

You can disconnect a connected account at any time from within PRELUDE OS. When you do, and confirm:

• Events we imported from that account are deleted from PRELUDE OS. They remain in your Google or Outlook calendar, which is where they live; reconnecting brings them back.
• Appointments your organisation created in PRELUDE OS are kept. They are your own records, not copies of someone else’s. They simply stop being sent outward.
• Events PRELUDE OS already added to your Google or Outlook calendar stay there. We do not reach into your calendar and remove them — we tell you how many there are when you disconnect, so you can remove them yourself if you want to.

A connection problem is not a disconnection. If your network drops, a login expires, or the provider is temporarily unavailable, nothing is deleted. We mark the connection as needing to be reconnected and leave your data alone. Deletion only ever follows a disconnection you performed and confirmed.

You can also revoke our access directly in your Google account settings or your Microsoft account settings. If you do, we stop being able to read your calendar; we will ask you to reconnect rather than assuming you meant to delete anything.

We keep your organisation’s data for as long as the account is active, because it is the working record the organisation relies on.

You can delete individual records in the app at any time. To delete an account and the data belonging to it, write to [email protected] and we will action it. Ordinary backups and server logs are kept for a short period afterwards before rotating out.

Traffic to PRELUDE OS is encrypted in transit (HTTPS). Passwords are stored only as hashes, never in a readable form. Access to data is scoped by organisation and by role, and credentials for connected accounts are held server-side and never exposed to the browser.

No system is perfectly secure. If we become aware of a breach affecting your data, we will tell you.

Under Malaysia’s Personal Data Protection Act 2010, you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave — including by disconnecting a connected account.

Write to [email protected] and we will respond.

PRELUDE OS is a tool for organisations and is not directed at children. We do not knowingly create accounts for anyone under 18.

If we change how we handle your data, we will update this page and the “last updated” date above. If a change is significant — particularly one that widens what we collect — we will tell account holders directly rather than relying on you to re-read this page.

Questions about this policy, or about your data, go to [email protected], or write to us at Suite 4, Level 13, Menara Dato' Onn, World Trade Centre Kuala Lumpur, Jalan Tun Ismail, 50480 Kuala Lumpur, Wilayah Persekutuan, Malaysia.