Privacy policy

Account information. When you create an account, we collect your name and email address. If you sign up using Google, we receive your name, email address, and Google profile identifier from Google. If you sign up with email and password, your password is stored using industry-standard one-way hashing — we never store or have access to your plaintext password.

Project content. Jazari is built to store your project knowledge, and this is the core of what we collect: the Spaces, Contexts, Notes, Tasks, Decisions, and Memory entries you create; the chat messages you exchange with Jazari's AI features; files you upload, including documents, PDFs, and images; and voice audio you submit for transcription. Voice audio is processed for transcription and is not retained by us after a text transcript is returned to you.

Technical and usage information. Our hosting provider automatically logs standard technical information, including IP address, browser type, and request timestamps, as part of operating the Service securely and reliably.

We do not sell your personal information to anyone, for any purpose. We share information only with the service providers below, each of whom processes data solely to provide the specific function described, under contractual obligations to protect it:

Supabase hosts our database and file storage. All of your account data, project content, and uploaded files are stored on Supabase's infrastructure.

Microsoft Azure OpenAI Service processes the content you send through Jazari's chat, file analysis, and vision features to generate AI responses. Under Microsoft's standard commercial terms for Azure OpenAI Service, prompts and completions submitted through the API are not used to train Microsoft's or any third party's foundation models, and are not retained beyond what's necessary for abuse monitoring.

Microsoft Azure Speech Service processes audio you submit through Jazari's voice input feature, converting it to text. Audio is transmitted for transcription and is not retained by Jazari once the transcript is returned.

Tavily provides web search and page-retrieval functionality. If you use Jazari's web research features, your search queries and any URLs you ask Jazari to fetch are sent to Tavily to perform the search or retrieval.

Resend sends transactional email on our behalf — account verification, password resets, and Space invitations. Resend receives the recipient's email address and the content of the message being sent.

Vercel hosts the Jazari application and, as part of standard web infrastructure operation, has access to request logs and IP addresses associated with your use of the Service.

Google provides authentication if you choose to sign in with your Google account. We receive only the profile information Google shares with us at your authorization — we do not have access to your Google account beyond this.

Jazari allows you to invite other people into a shared Space. If you do, or if you accept an invitation to someone else's Space, all content within that Space — Notes, Tasks, Files, Decisions, and chat history — becomes visible to every member of that Space. The Space's owner controls membership, including who is invited and removed, and can delete the Space entirely, permanently removing its content for all members. Content is not visible outside a Space to anyone who is not a member of it.

We retain your account and project content for as long as your account remains active. If you delete a Space, all content within it — including uploaded files — is permanently removed from our systems and cannot be recovered. If you wish to delete your account entirely, contact us at support@aljazari.app and we will process your request; account deletion is currently a support-assisted process rather than a fully self-service feature.

Depending on where you live, you may have rights under applicable law to access the personal information we hold about you, correct it, request a copy of it, or request its deletion. You can exercise any of these rights by contacting us at support@aljazari.app, and we will respond within a reasonable time and in accordance with applicable law. If you are located in the European Economic Area, the United Kingdom, or California, you may have specific additional rights under GDPR or the CCPA/CPRA respectively, including the right to lodge a complaint with your local data protection authority.

We use encrypted connections (HTTPS/TLS) for all data in transit, and our infrastructure providers maintain access controls and encryption at rest for stored data. No system can be guaranteed completely secure, and while we take reasonable measures to protect your information, we cannot warrant against every possible security incident.

Our service providers operate infrastructure in multiple countries. By using Jazari, you understand that your information may be processed in a country other than the one in which you reside, and that such countries may have data protection laws different from your own. We rely on our service providers' own compliance mechanisms, including standard contractual clauses where applicable, to keep your data protected during such transfers.

Jazari is not directed at, and is not intended for use by, children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

We may update this Privacy Policy as the Service evolves. If we make material changes, we will provide notice by posting the updated policy with a new "Last updated" date and, where appropriate, by additional notice such as an in-app message or email.

If you have questions about this Privacy Policy or how we handle your information, contact us at support@aljazari.app.