What Management OS does with your Dropbox files.

• File and folder metadata — names, paths, timestamps, sizes — for the picker surface. Enables browse and search without downloading content
• Content of files you select — when you explicitly pick a file in the File Source Picker, that file's content is downloaded so it can become context for the output you're generating
• Shared-with-me files — the list of files and folders shared with you by other Dropbox users, so the picker reflects what you actually work with
• Account display name + email — for the connected-account UI

Management OS does not write to your Dropbox. We hold no write scopes. We cannot create, modify, share, move, or delete any file or folder in your Dropbox.

All Management OS outputs (Account Plans, Coaching Briefs, Forecast Locks, Meeting Prep dossiers, Pitch Decks) are generated and stored inside Management OS's own database and surfaced through the Management OS application — never written into your Dropbox.

The scope set is defined in lib/dropbox/oauth.ts → DROPBOX_SCOPES. Four scopes, all read-only.

Application database: Supabase Postgres (Management OS's production database, US East). Encrypted at rest (AES-256), encrypted in transit (TLS 1.3). Workspace-scoped row-level security (RLS) means one customer's data is never visible to another.

OAuth tokens: Stored in Supabase under workspace-scoped RLS. Dropbox issues short-lived access tokens (~4 hours) plus a long-lived refresh token; both are encrypted at rest and never returned to client browsers. Only the Management OS server-side runtime can read them.

File content: When you select a file through the picker, its content is read into memory for the inference call. We persist the extracted text used as context for the specific output you generated, alongside that output. We do not maintain a parallel copy of your Dropbox.

Inference layer: Anthropic API (Claude models). File content required for a specific output is passed to Anthropic at inference time; outputs are returned to Management OS and stored in our database. Anthropic does not train on customer data per their API terms.

Retention: We retain Dropbox-sourced extracts while your subscription is active. On disconnect we revoke the access token at Dropbox (best-effort) and delete the stored OAuth tokens immediately. On subscription cancellation, customer data is retained for 30 days for restoration, then permanently deleted. Data subject deletion requests are honored within 30 days per our Privacy Policy.

1. Sign up at mgmt-os.ai and complete onboarding to your workspace
2. Open Management OS → Settings → Integrations
3. Find Dropbox in the integration directory and click Connect Dropbox
4. You'll be redirected to Dropbox's authorization screen. Sign in with the Dropbox account you want Management OS to read from
5. Review the requested permissions and click Allow
6. You'll return to Management OS with a confirmation that the integration is connected. Dropbox will appear as a source in the File Source Picker

Dropbox Business / Team admins: this is a per-user connection. Each user on your Dropbox Business plan who wants to make Dropbox files available to Management OS connects their own account.

Universal File Source Picker: Dropbox shows up as a source alongside Google Drive, OneDrive, SharePoint, Box, and any other file source you have connected. When you generate an Account Plan, Pitch Deck, Coaching Brief, or Meeting Prep dossier, you can pick which Dropbox files feed in as context. Files you don't pick don't get read.

The Weekly Intelligence Brief uses three pillars that span every source:

• Develop Your Business — account plans and customer collateral pulled from Dropbox enrich the Brief's view of priority accounts
• Develop Your Team — coaching context and rep development plans stored in Dropbox become part of 1:1 prep
• Develop Yourself — board decks and strategic memos in Dropbox surface relevant decision context to the leader

Ask Anything (AMA) — you can reference Dropbox files in plain-English queries: "summarize the latest SOW in /Customers/Acme and tell me what we committed to."

1. Open Management OS → Settings → Integrations
2. Find Dropbox in the connected integrations list
3. Click Disconnect → confirm

On disconnect we revoke the access token at Dropbox (best-effort) and delete the stored OAuth tokens immediately. Previously generated outputs that used Dropbox content remain in your Management OS workspace as historical records.

To remove all Dropbox-sourced extracts and historical outputs after disconnect, email privacy@mgmt-os.ai with your workspace identifier. We process deletion requests within 30 days.

1. Sign in to dropbox.com/account/connected_apps with the Dropbox account that authorized Management OS (also reachable from Dropbox → Settings → Connected apps)
2. Find Management OS in the connected-apps list
3. Click the X (or Disconnect) next to the app name and confirm

Revoking from Dropbox's side invalidates our tokens immediately. Our next API call returns a 401 and we surface a re-connection prompt in Management OS Settings.

Security incident reporting: security@mgmt-os.ai
Privacy / data subject requests: privacy@mgmt-os.ai
Integration support: support@mgmt-os.ai

For general questions about Management OS, see our Support page or Manifesto.