Privacy Policy

What this policy covers

This policy explains how JN TechCorp LLC operates JN-AI, including the public website, tenant Console, AI Studio, billing workflow, and website hosting services. It applies to information processed for a customer account and the websites that account manages.

Information we process

We process account and contact information such as name, email address, authentication identifiers, tenant membership, and support communications. When a visitor uses the public JN-AI contact form, we process the name, email address, optional phone number, and message they provide in order to respond and send a delivery confirmation. We also process the content a customer chooses to put in JN-AI: website copy, uploaded assets, prompts, instructions, revisions, domain settings, and generated outputs.

We collect operational and security information needed to run the service, including request identifiers, service events, browser/device metadata, IP-derived security signals, and records needed to investigate abuse or delivery failures. Our rate-limit records use short-lived one-way hashes rather than storing raw client IP addresses in that counter.

How we use information

We use information to provide, secure, support, improve, and bill for JN-AI; to create private previews and publish only customer-approved websites; to respond to requests; and to comply with legal obligations. We do not sell personal information or use one tenant's private content to provide another tenant access to it.

Google Workspace Directory data

When an authorized tenant member explicitly selects Connect read-only account view and then approves Google’s consent screen, JN-AI requests the Google Workspace Admin SDK scope https://www.googleapis.com/auth/admin.directory.user.readonly. During that one-time connection, JN-AI processes the Directory user data needed to calculate observed-account, administrator, and suspended-account counts. This may include a Directory user’s display name, primary work email address, administrator role, and suspension status. JN-AI also receives the approving administrator’s work email through Google sign-in.

JN-AI uses this data only to provide the visible, read-only Workspace account summary in the Business Email workspace. It retains the approving administrator’s name and work email plus aggregate account counts; it does not retain a list of Directory users, Gmail messages or attachments, passwords, billing data, mail settings, or OAuth access and refresh tokens. Google Workspace access is one-time and each refresh requires a new Google approval.

Google Workspace sharing and Limited Use

Google Workspace data is processed only by JN TechCorp LLC and the service providers needed to operate this feature: Cloudflare for the JN-AI application and secure request processing, and Supabase for the limited connection record and aggregate summary. We do not sell, transfer, disclose, or make Google Workspace data available to advertising platforms, data brokers, other tenants, or other customers.

Google Workspace data is never sent to OpenAI or another third-party AI or machine-learning provider. It is not used to create, train, or improve generalized or non-personalized AI or machine-learning models, and it is not used for advertising, creditworthiness, or any purpose unrelated to the visible Workspace account summary. The use of information received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.

Google Merchant Center connection

When a store owner or administrator chooses Google Search & Shopping and explicitly approves Google’s consent screen, JN-AI requests openid, email and https://www.googleapis.com/auth/content. These permissions identify the approving Google account and allow the Merchant API to view and manage Merchant Center account and product data. This authorization is separate from signing in to JN-AI and from Google Workspace Directory access; it does not grant access to Gmail messages, Drive files, Google Ads or Workspace users.

JN-AI uses Merchant access to list the accounts available to the approving user, verify the selected store website, and support the catalog publishing and updates the store authorizes. Connecting an account does not itself submit products. JN-AI retains the Google email and account identifier, granted scopes, available and selected Merchant account references, website verification results, and access/refresh tokens encrypted in server-only storage. Cloudflare processes requests and Supabase stores the private connection record. Tokens and Google account data are not shared with AI providers or used to train AI models, sold, or disclosed to other tenants or advertising platforms. JN-AI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting a store deletes its saved Google tokens from JN-AI and stops that store’s access. It does not delete the Merchant Center account or its products, or revoke a Google grant that another connected store may use. You can also remove JN-AI’s access in your Google Account’s third-party connections settings. Minimal non-secret connection history may remain for security and troubleshooting under the retention policy below.

AI, payment, and infrastructure providers

When a customer asks JN-AI to create or revise website content, we send the information necessary for that website request to our configured AI provider under our service relationship. This workflow is separate from Google Workspace Directory access: Google Workspace data is never included in an AI request. Customers must not submit secrets, payment card data, or personal data they are not authorized to use. Generated output must be reviewed by the customer before publication.

Platform subscription payments are processed by Stripe. A Commerce customer connects its own Stripe account for shopper payments; JN-AI does not collect that merchant's banking credentials. We also use hosting, database, email, and storage providers needed to operate the platform.

Retention, access, and security

We retain account and tenant content while the service is active and afterwards only as reasonably necessary for security, billing, dispute resolution, legal obligations, and documented deletion procedures. Retention periods and deletion commitments for a production launch will be published after legal and operational review.

We use tenant-scoped access controls, service credentials, and operational monitoring designed to protect customer data. No internet service can guarantee absolute security. Customers are responsible for keeping credentials private and for assigning only appropriate members to a tenant.

Your choices and contact

You may request access, correction, deletion, or help with your account by contacting us. We may need to verify authority before responding and may retain information where law or a legitimate security/billing purpose requires it.

For questions or privacy requests, use the contact form on the JN-AI website. We may update this policy as JN-AI moves from Early Access to general availability; the effective date at the top will show the current version.