privacy notice

our posture

Jurnies operates a GDPR-default global posture. compliance is a superset that satisfies EU-GDPR, Egypt-PDPL, CCPA, and emerging frameworks. we do not bifurcate handling by region; every customer record is held to the strictest framework that applies anywhere we operate.

data retention

• customer record — 7 years post last activity.
• conversation history — 365 days at full fidelity, then anonymized aggregate.
• decision audit — 7 years in cold storage (legal floor); tenant-queryable retention 365 days at full fidelity.
• persona configurations — indefinite (versioned).
• cross-tenant network “what-leaves” log — 7 years.

consent state

consent is recorded per customer, per decision type, per surface, per channel, per locale. it is queryable by our AI brain's pre-emission contract — meaning Joe checks consent before drafting a reply, never after. customers can revoke per-decision-type or globally via our consumer-facing ai-trust surface (link to follow at full launch).

right to explanation (GDPR Article 22)

when an automated decision affects a customer, that customer is entitled to an explanation. we honor this through (a) a decision-type explainer, (b) a customer-specific decision history, and (c) a forget-me flow — all surfaced on the tenant-branded ai-trust page that ships at full launch.

forget-me & subject access

customers may request data deletion or a copy of their data via the ai-trust surface (at launch) or, today, by writing to [email protected]. subject access SLA is seven days from request, returned in JSON and human-readable HTML.

data processing agreement

tenants on the Jurnies platform sign a per-tenant DPA. standard contractual clauses cover non-EU data transfers. the subprocessor list will be maintained publicly on jurnies.com/legal/subprocessors at full launch.

contact

privacy questions: [email protected]. see also terms and mail policy.