Privacy Policy

1. Introduction

This Privacy Policy describes how JackHamr Technologies Ltd. (“JackHamr,” “we,” or “us”) collects, uses, discloses, and protects information when you use our website at jackhamr.ai (the “Site”) and our AI agent orchestration platform (the “Service”). This Policy should be read together with our Terms of Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, organization name, and authentication credentials. If you sign in via a third-party identity provider, we receive the profile information that provider makes available to us.

2.2 Customer Data

We process the code, prompts, files, and other content you submit to the Service so that your Agents can act on it (“Customer Data”). This may include content from repositories, boards, and chat sessions you connect to the Service. We do not use Customer Data to train our AI models. If we introduce model training in the future, we will provide notice and the ability to opt out before your data is used.

2.3 Usage & Log Data

We automatically collect information about how you use the Service, including session times, compute resources consumed, LLM tokens processed, pages visited, features used, IP address, browser type, and device information.

2.4 Billing Information

Payments are processed by Stripe, Inc. We receive limited billing metadata (such as the last four digits of your card and billing address) from Stripe; we do not store full payment card numbers on our servers.

2.5 Third-Party Integrations

If you connect integrations such as Slack, or configure your own AI provider API keys (“BYOK”), we process the information necessary to operate that integration (for example, Slack workspace, channel, and message metadata, or API requests routed to your configured provider). Your use of a third-party provider through BYOK is also governed by that provider’s own privacy terms.

2.6 AI Assistant Connections

You can connect JackHamr to AI assistants such as ChatGPT, Claude and Cursor through our MCP server (api.jackhamr.ai/mcp). When you connect, you sign in to JackHamr and choose which permissions the assistant gets: read, delegate, automate, machine access, and manage.

Within those permissions, the assistant can read and act on your JackHamr data on your behalf. That can include your agents, topics and messages, files and artifacts, boards and cards, schedules, and, only if you grant machine access, files and commands on your agents’ cloud machines.

We store a record of each connection (which assistant, the permissions you granted, when it was created and last used) and the access tokens needed to keep it working. We process the requests the assistant sends only to provide the service, and we do not sell this data or use it for advertising.

Content we return to the assistant, such as an agent’s reply or a file, is then handled by the assistant’s provider under its own terms and privacy policy (for example, OpenAI for ChatGPT).

You can disconnect an assistant at any time under Settings, Connected apps in JackHamr, which immediately ends its access. You can also remove the connection in the assistant’s own settings.

2.7 Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences (such as light/dark mode), and understand how the Site is used. You can control cookies through your browser settings; disabling them may affect Site functionality.

3. How We Use Information

• To provide, operate, and maintain the Service, including running your Agents.
• To process billing and send invoices and receipts.
• To monitor, secure, and improve the Service, and to diagnose technical issues.
• To communicate with you about your account, updates, and support requests.
• To detect, prevent, and investigate fraud, abuse, or violations of our Terms.
• To comply with legal obligations.

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• Service Providers. Third parties that process data on our behalf, including cloud infrastructure providers, Stripe (payments), Slack (if you enable that integration), and AI model providers (such as Anthropic, OpenAI, and Google) that process the prompts and content your Agents send to them.
• Legal Compliance. When required to comply with applicable law, regulation, or legal process.
• Business Transfers. In connection with a merger, acquisition, financing, or sale of assets.
• With Your Consent. Any other sharing you direct or approve.

5. Data Retention

We retain Customer Data for as long as your account is active. Upon account cancellation, you may export your Customer Data for 30 days. After 30 days, we delete Customer Data from our active systems. We may retain archived backups for up to 90 additional days for security and legal compliance purposes, after which they are permanently deleted. Usage logs are retained for a minimum of 18 months to support billing accuracy and dispute resolution.

6. International Data Transfers

JackHamr is based in British Columbia, Canada, and our service providers operate in Canada, the United States, and other jurisdictions. By using the Service, you consent to the transfer and processing of your information in these locations, which may have data protection laws different from those in your jurisdiction.

7. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Security

We use administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

The Service is not directed to individuals under 18 years of age, consistent with the account eligibility requirements in our Terms of Service. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our Site or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at [email protected]. For billing inquiries, contact [email protected].