Privacy policy
What this covers
Jetkite is a unified AI workspace. This policy explains what personal data we collect when you use it, why we collect it, who else can see it, and what you can ask us to do about it. It applies to the Jetkite apps and this website.
What we collect, and why
- Account data: your email address and sign-in state, so you have an account at all and can get back into it. Jetkite requires an account: there is no anonymous AI usage.
- Conversation content: the messages you send, the files you upload and the answers and images produced, so the product can work and your history is there next time. Only the AI model answering a request receives your message, and we never use your conversations for advertising or to train or evaluate models.
- Personalization and memory: the tone and style preferences you set, and any facts you ask Jetkite to remember, so answers suit how you work. It is stored with your account in EU regions so it follows you across your devices, used only to personalize your answers, and you can clear it whenever you like.
- Usage and cost records: which model answered, how long it took, and what it cost, so we can meter credits, bill correctly and keep the service running. These records carry identifiers, not the text of your messages.
- Billing data: what you bought and what you are entitled to. Card details are handled by the store or payment provider and never reach us.
- Enterprise enquiries: when you ask about Enterprise, through Contact sales in the app or by choosing Enterprise on our contact form, we keep your name, email address, company, country, industry, team size and message, and the phone number and website if you give them, so our sales team can answer you and follow the conversation up. Other messages to our contact form are only emailed to us, and not stored here.
- Analytics: only if you agree. See below.
Who else sees it
Answering a request means sending that message to an AI model provider. Each one receives only the message it is asked to answer, never your history, your other files, or your account details. These are the providers a conversation can reach:
| Provider | Used for | What it receives |
|---|---|---|
| Gemini models, for chat and images | The messages, attachments and instructions for that request | |
| OpenAI | GPT models, for chat and images | The same |
| Anthropic | Claude models, for chat | The same |
| xAI | Grok models, for chat and images | The same |
| Fireworks AI | DeepSeek and other open models, for chat | The same. US-hosted, so the model runs on Fireworks |
| Serper | Web, news and image search | The search terms for that request. Results are not retained |
| Twelve Data | Market and financial data | The symbol or market being asked about |
| Google Cloud | Our databases, storage and services | Your account data and files, stored in EU regions |
| Amazon Web Services | Sending email: sign-in codes, receipts and notices | Your email address and the contents of that one message |
| Resend | Delivering the contact form on this site to us | The name, email and message you submit on the contact page. EU-hosted (Ireland) |
A provider can only receive anything if we have deliberately enabled it, which is a decision with a privacy review attached rather than a configuration change.
Our own databases, storage and services run in EU regions. Some of the AI providers are outside the EU, which is why we name them here rather than claiming your data never leaves. Where a provider is outside the EU, the transfer relies on the European Commission’s Standard Contractual Clauses and, for the United States, the EU–US Data Privacy Framework.
Why we are allowed to (legal bases)
We process your data on the bases the GDPR sets out: to perform our contract with you (running your account, answering requests, billing); for our legitimate interests (keeping the service secure, preventing fraud, fixing bugs, and answering an Enterprise enquiry you sent us); to meet legal obligations (accounting and tax); and, for analytics and any marketing, on your consent, which you can withdraw at any time.
How we protect it
Data is encrypted in transit with TLS, and sensitive data is encrypted at rest. Access is on a least-privilege basis, our infrastructure sits in the EU, and we review security regularly. If a breach ever affects your data, we notify as the GDPR requires.
What we never do with it
- We do not copy your messages, documents or generated files into analytics, marketing, dashboards, support tooling or crash reports.
- We do not use your conversations for advertising targeting or profiling. Jetkite carries no advertising.
- We do not send your prompts or answers to a vendor in order to evaluate models. We measure model quality with our own test cases.
- We do not store the audio from voice conversations, and we do not use your voice to identify you.
Analytics and consent
No analytics or marketing tag runs until you accept it. If you decline, none is sent, including from our servers, which is not a loophole we use. Declining leaves the site and the product fully usable. You can change your mind at any time.
Private chats
A private chat is not saved: no history, no memory, and nothing added to what Jetkite knows about you. It still reaches an AI vendor in order to answer.
How long we keep things
Conversations, files and memories stay until you delete them or delete your account. Usage and cost records are kept for as long as we need them for billing, tax and fraud prevention, which is longer than your conversations and is required by law: accounting records, for example, are kept for seven years under Dutch law. Backups roll off on their own schedule rather than being erased instantly. An Enterprise enquiry is deleted a year after the conversation with your company goes quiet, when you delete your account, or sooner if you ask us.
Our published retention schedule is part of our launch preparation. Rather than state periods we have not finalised, this section describes the behaviour; the table will be added here when it is settled.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to certain processing, and complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens. We respond within one month. Two of these are built into the product rather than being requests you have to make:
- Export: a machine-readable copy of your data (a ZIP of your chats, files, memories, settings and billing), from Settings, Privacy and data, Download your data. We email you when it is ready, and it can be downloaded for seven days.
- Deletion: delete your account and its data from Settings, Account, Delete account, on any platform, or on the web at app.jetkite.ai. Your account closes at once and its data is deleted within a day. Some billing and tax records survive, without your name or email address, because the law requires it, and data under a legal hold is kept until the hold ends.
For anything else, email help@jetkite.ai.
Children
Jetkite is not directed at children. You need to be old enough to enter a contract in your country to hold an account, and at least 16 in the EU unless a parent or guardian consents where local law allows it. Family features with parental controls are in development and are not available yet.
Governing law
This policy and any dispute about your privacy are governed by the law of the Netherlands and applicable EU law, and the courts of Oost-Brabant (’s-Hertogenbosch) have jurisdiction. This does not take away the protection of mandatory consumer law in your own country of residence.
Changes
When this policy changes in a way that matters, we will say so in the product rather than quietly updating a date at the top.