How we handle your data, in plain language.

When you create a workspace, we store the email address you signed up with, the projects and content you create, and the activity that happens inside the workspace (decisions, agent runs, approvals).

Standard product telemetry: which features you use, which pages load, which API calls fail. We do not track you across the rest of the web.

We do not train any model — ours or anyone else's — on your projects, conversations, or documents.

We do not sell your data. We do not share it with advertising networks. We do not use it to build a separate product.

Data is encrypted at rest using AES-256 and in transit over TLS 1.3.

You choose between EU and US regions at signup. The data does not leave the region you pick.

Self-hosted deployment is on the roadmap. If you need it before it ships, contact us.

Model providers (Anthropic, OpenAI, and others we add) receive only the content needed to fulfil a specific request, and only when you trigger an agent action. They are bound to zero-retention API agreements.

Stripe processes payments. They see your billing details and nothing else.

We use Vercel for hosting and Postmark for transactional email. Both are GDPR-compliant subprocessors.

Export everything in your workspace at any time, in machine-readable form. No support ticket needed.

Delete your workspace from settings. We hard-delete within 30 days from primary storage and within 90 days from backups.

Request a copy of any personal data we hold by emailing privacy@jary.app. We respond within 14 days.

We use one essential cookie to keep you signed in. That's it. No analytics cookies, no ad cookies, no cookie banner.

If we change anything material, we email every workspace owner at least 30 days before the change takes effect. The version history is published at jary.app/privacy/history.