Jet Prompt Optimizer Privacy Policy

1. Scope and Overview

1.1. This Privacy Policy explains how we collect, use, disclose, and protect information when you use Jet Prompt Optimizer (the "Service").

1.2. It applies to information collected through our website, web application, and related services.

1.3. If you disagree with this Policy, you should not use the Service.

2. Information We Collect

2.1. Account Information. When you register, we may collect identifiers such as your name, email address, username, and authentication details (for example, password hashes or single sign-on tokens).

2.2. Subscription and Payment Information. If you purchase Paid Services, payment details are processed by third-party payment processors. We may receive limited billing metadata (such as billing status, plan type, last four digits, invoice history), but typically do not store full payment card details.

2.3. User Content. We collect and process the content you submit to the Service, such as prompts, inputs, outputs, files, and project/workspace content, as well as related metadata (timestamps, feature usage).

2.4. Usage Data. We collect technical and usage information such as IP address, device and browser details, pages viewed, session activity, referring URLs, and performance logs.

2.5. Cookies and Similar Technologies. We use cookies and similar technologies (for example, local storage, pixels) to operate the Service, keep you logged in, remember your preferences, and understand how you use the Service.

3. How We Use Information

3.1. We use information to:

• (a) provide, maintain, and improve the Service and its features;
• (b) create and manage accounts, authenticate users, and provide customer support;
• (c) process subscriptions, invoices, and transactions;
• (d) monitor performance, detect abuse, troubleshoot issues, and secure the Service;
• (e) analyze feature usage to develop new functionality and improve user experience;
• (f) communicate service-related updates, security notices, and administrative messages;
• (g) comply with legal obligations and enforce our Terms.

4. AI Processing and Model Use

4.1. The Service may process User Content using AI Features to generate outputs and provide optimization insights.

4.2. We may use automated techniques to detect spam, fraud, misuse, or security threats.

4.3. Training and Improvement. Unless the Service provides a setting that allows you to opt in, we do not use User Content to train or improve general-purpose models intended for use outside of providing the Service. We may use aggregated and de-identified usage metrics to improve Service performance and reliability.

5. Cookies, Analytics, and Tracking

5.1. Essential Cookies. Required for core functionality such as authentication and security.

5.2. Preferences Cookies. Used to remember settings and improve usability.

5.3. Analytics. We may use analytics providers to understand how the Service is used and to improve it. Analytics may collect device identifiers, event data, and approximate location derived from IP address.

5.4. You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

6. Legal Bases for Processing (EEA/UK)

6.1. Where GDPR or similar laws apply, we process personal data under one or more of these bases:

• (a) Contract (to provide the Service you request);
• (b) Legitimate interests (to secure, maintain, and improve the Service, prevent fraud, and understand usage), balanced against your rights;
• (c) Consent (where required, such as certain cookies or marketing communications);
• (d) Legal obligation (to comply with applicable laws).

7. How We Share Information

7.1. We may share information with:

• (a) Service Providers/Processors that support hosting, storage, analytics, customer support, authentication, payment processing, and AI infrastructure, acting under our instructions;
• (b) Professional Advisors (for example, legal, audit, compliance) as necessary;
• (c) Compliance and Safety recipients if we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, and security;
• (d) Business Transfers in connection with mergers, acquisitions, reorganization, or sale of assets (subject to appropriate confidentiality safeguards).

7.2. We do not sell personal information in the conventional sense and do not intentionally disclose personal information for cross-context behavioral advertising in a manner that constitutes a "sale" under specific privacy laws.

8. International Data Transfers

8.1. We may process and store information in countries other than where you reside.

8.2. Where required (for example, EEA/UK), we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or other lawful transfer mechanisms.

9. Data Retention

9.1. We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

9.2. Retention periods vary depending on the type of data, account status, and legal requirements.

9.3. When data is no longer needed, we take steps to delete, de-identify, or securely dispose of it.

10. Security Measures

10.1. We use a combination of administrative, technical, and organizational safeguards designed to protect information, such as access controls, encryption in transit where supported, logging and monitoring, and least-privilege practices.

10.2. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

11. Your Rights and Choices

11.1. Account Controls. You may update certain account information through the Service.

11.2. Access, Correction, Deletion. Depending on your location, you may have rights to request access to, correction of, or deletion of your personal information.

11.3. Objection and Restriction (EEA/UK). You may object to specific processing or request restriction, subject to applicable law.

11.4. Portability (EEA/UK). You may request a copy of personal information in a structured, commonly used format where applicable.

11.5. Withdraw Consent. Where we rely on consent, you may withdraw it at any time (without affecting processing already performed).

11.6. California Rights (CCPA/CPRA). California residents may have the right to know, delete, and correct their personal information, and to opt out of certain sharing. We do not sell personal information and do not knowingly share it for cross-context behavioral advertising in ways that require an opt-out for most typical SaaS operations, but we will honor applicable legal requirements.

12. Children’s Privacy

12.1. The Service is not intended for children. We do not knowingly collect personal information from children under the age where consent is legally required. If you believe a child provided personal information, contact us so we can take appropriate action.

13. Third-Party Links and Services

13.1. The Service may link to third-party websites or services. We are not responsible for the privacy practices of third parties.

13.2. If you enable integrations, information may be exchanged with the third party according to your settings and the third party’s policies.

14. Changes to This Privacy Policy

14.1. We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service or other reasonable means.

14.2. The "effective date" will be updated when changes take effect.

15. Contact

15.1. If you have questions or requests regarding this Privacy Policy, contact us through the contact method provided in the Service or on our website (for example, support email or contact form).