Privacy Policy

Effective 23 August 2026

This policy explains how Jentrix Pty Ltd (ABN 79 680 611 536), trading under the registered business name Jentrix AI (Jentrix, we, us), handles personal information when you use Jentrix: the web application at jentrix.ai and tm.jentrix.ai, the @jentrix/cli and @jentrix/runner packages, the Claude Code and Codex plugins, the MCP server, and our documentation (together, the Service).

We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you are outside Australia, note that the Service is operated from Australia and your information is handled as described here.

1. What we collect

Account information. Your email address, your name and profile image if you sign in with Google or set them in the app, your sign-in events, the workspaces you belong to and your role in each, and your plan.

Content you and your agents create. Workspaces, boards, tasks, comments, attachments, artifacts, agent-session records and transcripts, reports, decisions, the usage figures your tools report (such as tokens, minutes and cost), feedback you send from the app (including any screenshot you attach), and access requests. This content can contain personal information about you or about others if you put it there.

Credentials and billing identifiers. Hashes of the API tokens you create (we cannot recover the token itself), OAuth grants you approve, and — if you buy a paid plan — your Stripe customer and subscription identifiers. Your card details are entered on Stripe's hosted pages and never reach us.

Technical information. IP address, browser and device details, request and error logs, the cookies described below, and the connection metadata needed to deliver realtime updates.

Communications. Emails and messages you send us, including support and feedback.

2. How we collect it

• Directly from you, when you sign up, use the app, or write to us.
• From software you run, when the CLI, the plugins or an AI agent you connected pushes work to the Service under your account or a token you issued. You decide what your agents send. As a safety net we redact known secret patterns at the moment an artifact is received, but you should not put passwords, keys or other secrets into the Service.
• From Google, when you sign in with Google: your email, name and profile image, as Google's consent screen describes.
• From Stripe, about the status of your payments and subscription.
• Automatically, through logs and the cookies described below.

3. Why we use it

We use personal information to:

• provide, operate and secure the Service — including authentication, access control, realtime updates, search, notifications and backups;
• bill paid plans and send billing notices;
• answer support requests and act on feedback;
• understand how the Service is used, in aggregate, so we can improve it;
• meet our legal obligations and enforce our Terms of Service.

We do not sell personal information, we do not show advertising, and we do not use your content to train AI models. We do not run AI models at all; the agents you connect run on your own machine or your own provider account, under that provider's privacy terms.

4. Who we share it with

People in your workspaces. Members of a workspace see the content in that workspace, including content created by other members and their agents. Owners and admins can also see member lists and manage access.

Service providers who process information for us, under contracts that limit what they may do with it:

If you connect an AI agent, a code host, or another integration, the information you choose to send through it goes to that provider under its terms.

Others, where required. We may disclose information if the law requires it, to protect the rights, safety or property of anyone, or — with notice where we can — to a successor if our business or assets are transferred.

5. Overseas disclosure

Our database is hosted in Australia (Sydney). Our application servers and several of the providers above operate in the United States and elsewhere, so personal information is transferred to and processed in those places. We take reasonable steps to ensure those providers handle it consistently with the Australian Privacy Principles.

6. Security

We protect information in transit with TLS and rely on our providers' encryption at rest. API tokens are stored hashed and can be scoped and revoked; OAuth grants can be revoked; access inside a workspace is controlled by roles. Secret patterns are redacted from incoming artifacts. No system is perfectly secure, and you are responsible for keeping your sign-in methods and tokens safe. If a data breach occurs that is likely to result in serious harm, we will notify affected people and the regulator as the Notifiable Data Breaches scheme requires.

7. How long we keep it

We keep your information for as long as your account is active. If you delete your account, or ask us to, we delete or de-identify your personal information within a reasonable period, except where we must keep it — for example billing records for tax purposes, or records needed to resolve a dispute or comply with the law. Backups are rotated on a schedule and purged in the ordinary course; logs are kept for a limited period. Content you shared into a workspace owned by someone else may remain in that workspace.

8. Your rights

You can access and correct most of your information in the app, and export your data from it. You can also ask us to access, correct or delete your personal information, or to stop a particular use of it, by writing to the address below. We respond within a reasonable time and in any case within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

9. Cookies

The Service uses only the cookies it needs to work: a session cookie that keeps you signed in, security cookies that protect sign-in and forms, and a setting that remembers your theme. We do not use advertising or tracking cookies. Our hosting provider records request logs to operate the Service.

10. Children

The Service is not directed at people under 18, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this policy. We will post the new version here with a new effective date and, for material changes, tell you by email or in the app.

12. Contact

Jentrix Pty Ltd (ABN 79 680 611 536), trading as Jentrix AI. Privacy questions or requests: support@jentrix.ai.