How we handle your data, in plain language.

When you create a workspace, we store the email address you signed up with, the projects and content you create, and the activity that happens inside the workspace (decisions, coaching sessions, approvals).

Standard product telemetry: which features you use, which pages load, which API calls fail. We do not track you across the rest of the web.

We do not train any model — ours or anyone else's — on your projects, conversations, or documents.

We do not sell your data. We do not share it with advertising networks. We do not use it to build a separate product.

Data is encrypted in transit over TLS, and at rest using the standard encryption provided by our cloud infrastructure.

Today, your data is hosted in the US. Choosing a specific region (including the EU) isn't self-serve yet — contact us if you have a requirement and we'll tell you what we can do.

Self-hosted deployment is on the roadmap. If you need it before it ships, contact us.

Model providers (Anthropic, OpenAI, and others we add) receive only the content needed to fulfil a specific request, and only when you trigger an AI action. We send the minimum required and don't permit them to train on your data.

Stripe processes payments. They see your billing details and nothing else.

We use Vercel for hosting and Resend for transactional email. Both are GDPR-compliant subprocessors.

Request an export of your workspace in machine-readable form by emailing privacy@jary.app.

Delete your workspace from settings. We hard-delete within 30 days from primary storage and within 90 days from backups.

Request a copy of any personal data we hold by emailing privacy@jary.app. We respond within 14 days.

We use one essential cookie to keep you signed in. That's it. No analytics cookies, no ad cookies, no cookie banner.

If we change anything material, we email every workspace owner at least 30 days before the change takes effect.