Privacy Policy

Who we are

JBOX (jboxai.com) is a product-building platform. You prompt it, and it maps, designs, and ships complete product systems — not just screens — and gives you production-ready code. This policy explains how we handle your data when you use our website and services.

What data we collect

We collect only what we need to run the service:

• Account information — your email address, name, and authentication details when you sign up or log in (including via Google Sign-In).
• Projects and content you create — the prompts you write, the products you design on the canvas, and the code JBOX generates for you.
• Usage data — how you interact with the product, features used, and flows generated. This helps us understand what works and what doesn't.
• Form submissions — information you provide through contact forms, feedback, or support requests.
• Billing information — where you pay for a plan, our payment provider processes your payment. We don't store your full card details.
• Cookies and local storage — essential session cookies and, with your consent where required, analytics cookies to improve the experience.

How we use your data, and our legal basis

We use your data for the reasons below. Where the law requires a lawful basis, ours is noted alongside each purpose:

• To provide and maintain JBOX — authentication, project storage, code generation, and hosting. (Legal basis: performance of our contract with you.)
• To bill you — where you're on a paid plan. (Legal basis: performance of our contract, and legal obligation for record-keeping.)
• To improve the product — understanding which features matter and where the experience breaks down. (Legal basis: our legitimate interest in improving JBOX.)
• To support you — answering questions, debugging, and following up on feedback. (Legal basis: our legitimate interest in helping our users.)
• To keep the platform secure — detecting abuse, fraud, and unauthorised access. (Legal basis: our legitimate interest in protecting JBOX and our users.)
• To send you service and, where you've opted in, product communications. (Legal basis: legitimate interest or your consent, and you can opt out any time.)

Your prompts, projects, and AI

Because JBOX is an AI product, we want to be especially clear about this:

• We do not use your private projects, prompts, or generated code to train our own or third parties' AI models.
• To generate output, your prompts and relevant project context may be processed by trusted third-party AI providers. They act as our processors under data-processing agreements and use your content only to return results to you — not to train their models.
• Your projects and your code are yours. We claim no ownership of them, and we don't share them with anyone except the vendors needed to run the service for you.

Cookies & analytics

We use essential cookies to keep you logged in and maintain your session. We also use analytics tools (such as PostHog) to understand aggregate usage patterns and improve the product. We aim to minimise the personal data in our analytics and never use it to track you across the web. Where the law requires it, we ask for your consent before setting non-essential cookies, and you can change your choices any time in your browser settings or our cookie controls.

Third-party services

We rely on a small set of trusted vendors to run JBOX, each bound by contractual data-protection terms:

• Cloud hosting and database providers for storing your account and project data securely.
• Authentication providers (including Google Sign-In) for secure login.
• AI model providers to generate output from your prompts, as described above.
• Payment providers to process subscriptions and top-ups.
• Analytics providers for product improvement.

Data sharing

We do not sell your personal data. We do not share it with advertisers or data brokers. We only share data with the vendors above when necessary to operate the service, and only under contractual protections that limit its use. We may also disclose data where we're legally required to, or to protect the rights, safety, and security of JBOX and our users.

Data retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we're legally required to retain certain records (for example, billing and tax records, which we keep for as long as the law requires). You can request deletion at any time by contacting us.

Security

We take reasonable technical and organisational measures to protect your data — encryption in transit, access controls, regular security reviews, and least-privilege access for our team. No system is perfectly secure, and we continuously work to improve our defences. If a data breach ever affects your personal data, we'll notify you and the relevant authorities as required by law.

Your rights

Depending on where you live, you have rights over your personal data, including the right to:

• access the personal data we hold about you;
• correct data that's inaccurate or incomplete;
• delete your data (right to be forgotten);
• restrict or object to certain processing;
• port your data — receive it in a portable format;
• withdraw consent at any time, where we rely on consent.

International transfers

JBOX operates globally, so your data may be processed in countries other than your own, including the United States and countries in the European Union. Where we transfer personal data across borders, we put appropriate safeguards in place — such as Standard Contractual Clauses or an equivalent approved mechanism — consistent with applicable data protection laws.

Children

JBOX is not intended for children. You must be at least 18 (or the age of majority where you live) to use it. We don't knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

California privacy rights

If you're a California resident, you have the right to know what personal information we collect and how we use it, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell your personal information. To make a request, email us at support@jboxai.com.

Changes to this policy

As JBOX grows, we may update this policy. When we make meaningful changes, we'll update the Last updated date above and, where the change is significant, let you know in the app or by email. Please check back from time to time.

Contact

Questions about this policy or your data? Reach us at support@jboxai.com. We read every message and aim to respond within two business days.