Privacy Policy

1. Fundamental Privacy Principles

We design Jack to process operational business requests with minimal data retention:

• Zero model training on your data: We do not sell, rent, or use Customer inputs, messages, files, or proprietary context to train public artificial intelligence models.
• Ephemeral task processing: Prompts and task instructions are processed in runtime memory to execute the requested jobs and are not retained as permanent conversational archives.
• Data minimization: Jack accesses and stores only the metadata strictly required to authenticate your workspace, verify authorization, and fulfill requested workflows.

2. Information We Collect and Process

We collect information in the following categories:

• Workspace and Account Identifiers: Slack Team ID, workspace name, installer User ID, enterprise domain, and contact email addresses used for authentication, administrative notices, and billing.
• Integration Credentials: OAuth access tokens, bot tokens, and user authorized API keys. All credentials are encrypted at rest using AES-256-GCM encryption and cloud key management infrastructure.
• Operational Audit Logs: Timestamped execution records, agent routing statuses, completed job tokens, and sanitized event receipts. Raw conversation transcripts and sensitive payloads are stripped before logging.
• Technical Diagnostics: IP address, browser user agent, operating system, and basic analytics collected on marketing pages to prevent fraud and maintain network security.

3. How We Use Information

Information collected is used solely for:

• Executing authorized tasks, workflows, and multi agent routines inside your accounts;
• Authenticating requests and enforcing customer specific permissions;
• Billing, ledger calculation, and receipt generation;
• Detecting, preventing, and addressing fraud, security threats, and system abuse;
• Complying with statutory accounting and legal record keeping requirements.

4. Third Party Subprocessors and Model Providers

To deliver autonomous execution, Jack routes inference through enterprise cloud infrastructure and verified artificial intelligence foundation providers:

• Inference Providers: Google Cloud Vertex AI, DeepSeek Enterprise, Anthropic, and OpenRouter. All calls use commercial enterprise API agreements that prohibit using customer data for model training.
• Data Infrastructure: Google Cloud Platform and Supabase for encrypted ledger storage and credential management.
• Payment Processing: Stripe for payment processing and wallet billing. We do not store raw credit card numbers.
• Workspace Integrations: Slack Technologies LLC and Apple Messages for notification routing and chat interfaces.

6. Security Safeguards and Inherent Transmission Risks

We implement technical and organizational measures, including TLS 1.3 encryption in transit, AES-256-GCM encryption at rest, and role based access controls.

Disclaimer of Absolute Security: No system or method of transmission over the Internet or electronic storage is completely impenetrable. Customer acknowledges that data transmitted across the Internet is subject to inherent risks, and Customer assumes all such risks. Company cannot and does not guarantee that unauthorized third parties will never circumvent our security measures.

7. Data Retention and Account Deletion

• Integration tokens: Retained only while Jack is installed in your workspace. When uninstalled, tokens are immediately revoked and deleted from active systems.
• Audit logs: Sanitized execution logs are retained for up to 7 years to meet standard commercial accounting, tax, and regulatory compliance obligations.
• Customer deletion requests: Workspace administrators may request a full export or deletion of non audit workspace records by contacting privacy@veldonlab.com.

8. Limitation of Liability and Dispute Resolution

Any claims or disputes arising under or related to this Privacy Policy or Company’s data practices are subject to the Limitation of Liability, Class Action Waiver, and Mandatory Binding Arbitration provisions set forth in the Jack Terms of Service.

9. Contacting Our Data Privacy Team

If you have questions, data access requests, or regulatory inquiries regarding this policy: