Privacy Policy

This Privacy Policy explains how Jeradin ("Jeradin", "we", "us", "our"), the operator of the website at jeradin.com and the associated Jeradin software products (collectively, the "Service"), collects, uses, shares and protects personal data. Jeradin acts as the data controller of personal data processed through the Service, except where we act as a data processor on behalf of a customer (for example, when a business account submits end-user data through our APIs).

This policy applies to personal data we process when you visit our website, create or use a Jeradin account, install our desktop apps or browser extensions, connect third-party tools, contact our support team, or otherwise interact with the Service. It does not apply to third-party products or websites that we do not operate, even when linked from our Service.

We collect the following categories of personal data:

• Account data — name, email address, password hash, profile photo, organisation, role, and authentication identifiers when you sign in with Google or GitHub.
• Content data — screen recordings, screenshots, uploaded files, log files, stack traces, code snippets, prompts, chat history, and metadata about connected repositories or MCP tools that you submit to the Service.
• Usage data — pages viewed, features used, actions taken, credit consumption, referrer URLs, session identifiers, timestamps, and approximate location derived from your IP address.
• Device and technical data — IP address, browser type and version, operating system, device identifiers, screen resolution, language settings, and diagnostic information.
• Communications — the content of messages you send to our support, sales, or community channels, and metadata about those messages.
• Payment data — handled by our reseller and Merchant of Record, Paddle. We receive limited transaction metadata such as plan, billing country, currency, tax status, last four digits of the card, and card brand. We do not receive or store full card numbers.
• Marketing data — preferences you set for our newsletters or product updates, and engagement events such as opens and clicks when technically possible.

• To create your account, authenticate you, and provide the Service.
• To generate AI outputs based on the content and prompts you submit.
• To operate our billing, invoicing, and tax processes through Paddle.
• To secure the Service, prevent abuse and fraud, and enforce our Terms.
• To troubleshoot issues, monitor performance, and improve the Service.
• To communicate with you about the Service, including service messages, security alerts, and — where permitted — product updates and marketing.
• To comply with legal, regulatory, tax and accounting obligations.
• To conduct research and analytics using aggregated or de-identified data.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to create and operate your account and provide the Service you request.
• Legitimate interests — to secure the Service, prevent fraud, improve our products, and market to existing customers, where such interests are not overridden by your rights.
• Consent — for non-essential cookies, certain marketing, and any processing where we ask for it.
• Legal obligation — to comply with tax, accounting, and other laws.

We use strictly necessary cookies for authentication and session management. We use analytics cookies to understand how the Service is used, and we may use limited marketing cookies to measure the effectiveness of our campaigns. Where required by law, we ask for consent before setting non-essential cookies, and you can manage your preferences via the cookie banner or your browser settings.

We share personal data with the following categories of recipients:

• Infrastructure providers — cloud hosting, database, storage, logging and observability vendors that run the Service under our instructions.
• AI model providers — third-party inference APIs used to generate Outputs, acting as data processors under contractual safeguards.
• Merchant of Record — Paddle.com Market Ltd, which acts as an independent controller for payment, invoicing, sales tax, VAT and fraud prevention.
• Analytics and support tools — product analytics, error tracking, session replay (where enabled), and helpdesk platforms used to operate the Service.
• Professional advisers — legal, accounting, audit, and insurance advisers subject to duties of confidentiality.
• Corporate transactions — if we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred to the counterparty subject to standard confidentiality obligations.
• Public authorities — where required by law, court order, or to protect rights, property, or safety.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising.

Content you submit through a paid workspace, or that you mark as private, is not used to train third-party foundation models. We may use aggregated or de-identified usage signals — statistics that do not identify you or your content — to evaluate and improve Jeradin's own models, retrieval systems, and prompts. Where we plan any new use of your personal data for model training, we will notify you and, where required, obtain your consent.

Jeradin operates globally, and your personal data may be transferred to, and processed in, countries other than your country of residence, including the United States. Where we transfer personal data out of the EEA, the UK, or Switzerland to a country not covered by an adequacy decision, we rely on Standard Contractual Clauses and, where appropriate, supplementary measures to protect the data.

We retain personal data only for as long as reasonably necessary to fulfil the purposes set out in this policy, including to provide the Service, comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements. Content data associated with an active account is retained for the lifetime of that account, and is deleted or anonymised within ninety (90) days after account closure, unless a longer retention period is required by law or is necessary to establish, exercise, or defend legal claims. Billing records are kept for the period required by applicable tax law (typically 6 to 10 years).

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encryption at rest for supported stores, least-privilege access controls, audit logging, environment isolation, code review, and secure development practices. Despite our efforts, no system is completely secure. Please report suspected vulnerabilities to security@jeradin.com.

Subject to applicable law, you have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data ("right to be forgotten");
• request restriction of processing or object to processing based on legitimate interests;
• request portability of data you provided in a structured, machine-readable format;
• withdraw consent at any time, without affecting the lawfulness of prior processing;
• lodge a complaint with your local supervisory authority.

To exercise any right, email privacy@jeradin.com. We respond within one (1) month, or sooner where required by law.

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

The Service may contain links to third-party sites or services. This policy does not apply to those third parties. Please review their privacy policies before providing them with your personal data.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-product at least fourteen (14) days before they take effect, unless a shorter period is required by law.

For privacy questions or to exercise your rights, contact privacy@jeradin.com. For security matters, contact security@jeradin.com.