Privacy Policy

1. Introduction

JetResponder ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI email drafting service. We believe your data belongs to you, and we design our systems accordingly.

2. Information We Collect

2.1 Information You Provide

• Account information (email address, name) when you sign up
• Documents and files you upload to build your knowledge base
• Email drafts and content you create using our service
• Communications with our support team
• Payment information (processed securely by third-party providers)

2.2 Information We Collect Automatically

• Usage data (features used, frequency of use)
• Device information (browser type, operating system)
• IP address and location data (for security purposes)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information solely to provide and improve our service:

• To provide AI email drafting services
• To maintain and improve your personal knowledge base
• To process payments and manage your account
• To provide customer support and respond to inquiries
• To analyze usage patterns and improve our service
• To ensure security and prevent fraud
• To comply with legal obligations

4. How We Protect Your Data

4.1 Security Measures

• SOC 2 Type II compliant infrastructure
• End-to-end encryption for data in transit and at rest
• Regular security audits and penetration testing
• Multi-factor authentication for all accounts
• Secure data centers with physical access controls
• Zero-trust architecture and least-privilege access

4.2 Data Minimization

We collect only the minimum data necessary to provide our service. We don't store your emails after processing, and we don't retain data longer than required for service delivery.

4.3 No AI Training on Your Data

Unlike other AI companies, we do not use your personal data, emails, or documents to train our AI models. Your content remains private and is only used to provide your specific service.

5. Data Sharing and Disclosure

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

• Service Providers: Trusted third-party services for payment processing (Stripe), hosting (AWS), and analytics (PostHog) - all with data processing agreements
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets (rare and would require user notification)
• With Your Consent: Only when you explicitly authorize us to share specific information

6. Your Rights and Choices

6.1 Data Access and Control

• Access: Request a copy of all personal data we have about you
• Correction: Update or correct your personal information
• Deletion: Request deletion of your account and all associated data
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data

6.2 How to Exercise Your Rights

Contact us at [email protected] or through your account settings. We'll respond to all requests within 30 days and provide the requested information or make the requested changes.

6.3 Cookies and Tracking

We use cookies and similar technologies to improve your experience. You can control cookie preferences through your browser settings or our cookie management tool.

7. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion
• Service Data: Processed in real-time and not stored after service delivery
• Payment Data: Retained only as required for tax and accounting purposes
• Support Communications: Retained for 2 years to provide ongoing support
• Analytics Data: Aggregated and anonymized after 24 months

8. International Data Transfers

Your data is primarily stored in the United States. If you're located outside the US, your data may be transferred to and processed in the US. We ensure all transfers comply with applicable data protection laws and use standard contractual clauses where required.

9. Children's Privacy

JetResponder is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We'll notify you of material changes via email or through our service. Your continued use of JetResponder after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

12. Compliance and Certifications

• SOC 2 Type II compliant
• GDPR compliant for EU users
• CCPA compliant for California residents
• Regular third-party security audits
• Industry-standard encryption protocols