privacy notice

who we are

Jurnies operates jurnies.com and the Jurnies platform — an AI-assisted marketing and commerce platform for merchants. for data collected on this site and for platform account data, Jurnies is the data controller. for data our merchants bring to the platform about theircustomers, Jurnies acts as a processor on the merchant's instructions. contact for anything in this notice: [email protected].

our posture

Jurnies operates a GDPR-default global posture. compliance is a superset that satisfies EU-GDPR, Egypt-PDPL, CCPA, and emerging frameworks. we do not bifurcate handling by region; every customer record is held to the strictest framework that applies anywhere we operate.

data we collect

• account data — name, business name, email, phone, sign-in identifiers, billing details, team membership and roles.
• merchant-customer data (as processor) — customer profiles, orders, conversations, loyalty balances, reviews, and consent state that a merchant brings to or generates on the platform.
• usage and device data — pages visited, actions taken, approximate location from IP, browser and device characteristics, and security telemetry (rate-limit and firewall logs).
• cookies and similar technologies — strictly-necessary cookies for sign-in and security on this site and the platform; measurement pixels and server-side event APIs on merchant storefronts where the merchant enables them (see the ad-platform section below).

how we use data

• providing, securing, and improving the platform (contract performance);
• operating merchant-configured marketing: campaigns, journeys, loyalty, and customer service — always within the consent state recorded for each customer;
• billing, fraud prevention, and abuse protection (legitimate interest);
• legal compliance and responding to lawful requests.

we do notsell personal data, and we do not use merchant-customer data to train models for other merchants' benefit.

advertising platforms & connected partners

merchants can connect advertising and publishing platforms — Meta (Facebook and Instagram), Google (including Google Ads and YouTube), TikTok, X, LinkedIn, and Pinterest — to their Jurnies workspace. when a merchant directs it, Jurnies transmits to the connected platform:

• audience lists — contact identifiers are hashed (SHA-256) before upload for matching features such as customer-match audiences; raw identifiers are not exposed to the platform;
• conversion events — via on-site pixels and server-side event APIs configured by the merchant, subject to the consent state of the person concerned;
• campaign content and settings the merchant composes.

data we receivefrom a connected platform (account metadata, campaign performance, audience insights) is used only to operate that merchant's connected account inside Jurnies, is retained only as long as the connection exists, and is never sold or merged across merchants.

Google user data.Jurnies' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meta platform data.data received through Meta's APIs is processed per Meta's Platform Terms: used only to serve the merchant whose connection produced it, never sold, and deleted when the connection is removed or Meta requires it.

who we share data with

our infrastructure and service subprocessors are listed publicly at jurnies.com/legal/subprocessors. beyond subprocessors, data leaves Jurnies only (a) to platforms a merchant has connected, at the merchant's direction, (b) to payment providers to settle transactions, or (c) where the law requires it.

data retention

• customer record — 7 years post last activity.
• conversation history — 365 days at full fidelity, then anonymized aggregate.
• decision audit — 7 years in cold storage (legal floor); tenant-queryable retention 365 days at full fidelity.
• persona configurations — indefinite (versioned).
• cross-tenant network “what-leaves” log — 7 years.
• ad-platform tokens and received platform data — life of the connection.

consent state

consent is recorded per customer, per decision type, per surface, per channel, per locale. it is queryable by our AI brain's pre-emission contract — meaning Joe checks consent before drafting a reply, never after. customers can revoke per-decision-type or globally via the tenant-branded ai-trust surface.

your rights & how to delete your data

you can request access, correction, deletion, portability, or object to processing at any time:

• email [email protected] with the request and the account or storefront it concerns — this is also the data-deletion instruction for anything collected through a connected platform (Meta, Google, TikTok, X, LinkedIn, Pinterest);
• or use the deletion / subject-access flow on the tenant-branded ai-trust page of the storefront you interacted with.

subject access SLA is seven days from request, returned in JSON and human-readable HTML. deletion cascades across the platform, including revocation of platform-connection data derived from you.

right to explanation (GDPR Article 22)

when an automated decision affects a customer, that customer is entitled to an explanation. we honor this through (a) a decision-type explainer, (b) a customer-specific decision history, and (c) a forget-me flow — surfaced on the tenant-branded ai-trust page.

international transfers

our primary infrastructure is in the European Union. where data moves outside the EU/EEA, standard contractual clauses apply. tenants on the Jurnies platform sign a per-tenant DPA covering these transfers.

children

jurnies.com and the Jurnies platform are business tools, not directed at children, and we do not knowingly collect data from anyone under 16. if you believe a child's data has reached us, write to [email protected] and we will delete it.

changes & contact

material changes to this notice are announced on this page with a new effective date. privacy questions: [email protected]. see also terms, mail policy, and subprocessors.