Privacy Policy

Last updated: 10 April 2026

1. Who we are

Jeanette.ai is a trading name of RCF Ltd, a company registered in England & Wales (Company No. 06404284) with its registered office at 247 Church Street, London, N16 9HP ("we", "us", "our").

We are the data controller for the personal data we process through the Jeanette AI service. If you have questions about this policy, you can contact us at privacy@jeanette.ai.

2. What data we collect

When you use Jeanette AI, we may collect and process:

  • Account and contact information - your name, phone number, email address, and messaging platform identifiers (e.g. WhatsApp or Telegram user ID).
  • Conversation data - messages you send to and receive from Jeanette, including any files, images, or voice notes you share.
  • Connected service data - data from third-party services you connect to Jeanette (e.g. calendar events, emails), accessed only as needed to carry out your instructions.
  • Usage and analytics data - interaction timestamps, feature usage, and technical logs to help us improve the service.
  • Payment data - if you purchase a subscription or credits, our payment processor (Stripe) handles your card details. We store only a reference to your Stripe customer ID.

3. How we use your data

We process your personal data to:

  • Provide and operate the Jeanette AI service, including responding to your messages and executing tasks on your behalf.
  • Process payments and manage your account.
  • Send service-related communications (e.g. task confirmations, scheduled reminders).
  • Improve and develop the service, including debugging and performance monitoring.
  • Comply with legal obligations.

4. Legal basis for processing (UK GDPR)

We rely on the following legal bases:

  • Contract - processing necessary to provide the service you have requested.
  • Legitimate interests - improving our service, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
  • Consent - where you have given clear consent for a specific purpose (e.g. connecting a third-party service). You can withdraw consent at any time.
  • Legal obligation - where we are required to process data by law.

5. Google user data

When you connect your Google account to Jeanette, we may access the following data depending on the permissions you grant:

  • Gmail - email messages, threads, labels, and metadata. Used to read your inbox, summarise messages, search for emails, and send replies or new emails on your behalf when you ask.
  • Google Calendar - calendar events, attendees, and scheduling details. Used to check your availability, create, update, or cancel events when you instruct.

Google data is accessed only when you explicitly request it via conversation. We limit our use to the specific actions you ask for and do not access more data than necessary to fulfil your request. We do not use Google user data for advertising, market research, or to train AI models.

We do not sell, share, or disclose your Google user data to third parties except to the AI providers (such as Anthropic) that process it on our behalf solely to generate responses to your requests. These providers act as data processors and are contractually prohibited from using your data for any other purpose. We do not transfer or disclose your Google data for purposes other than providing the service you requested.

Your Google data is subject to the same retention policy as other conversation data (see section 9). Google OAuth tokens are encrypted at rest using AES-256-GCM. All data is transmitted over HTTPS and stored in databases with access restricted to authorised personnel only.

You can revoke Jeanette's access to your Google account at any time by asking Jeanette to disconnect it, through the Jeanette dashboard, or via your Google account permissions page. When you revoke access, we delete your Google OAuth tokens immediately.

6. AI and third-party processors

Your conversation data is sent to third-party AI providers (such as Anthropic) for processing. These providers act as data processors on our behalf. We select providers that offer appropriate data protection commitments and do not use your data to train their models.

When you connect external services (e.g. Google Calendar, Gmail), Jeanette accesses those services using credentials you provide. We only access the data necessary to carry out the specific tasks you request.

7. Data sharing

We do not sell your personal data. We share data only with:

  • Service providers - hosting (Heroku/Salesforce), AI processing (Anthropic), payments (Stripe), messaging platforms (WhatsApp/Meta, Telegram), and analytics tools, each acting as a data processor.
  • Legal authorities - where required by law or to protect our legal rights.

8. International transfers

Some of our processors are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised by the UK government.

9. Data retention

We retain your conversation data and account information for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

10. Your rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability - receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@jeanette.ai. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Cookies

Our website uses essential cookies required for the site to function. We may also use analytics cookies to understand how visitors use our site. You can manage cookie preferences through your browser settings.

12. Children

Jeanette AI is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. We will notify you of any material changes through the service or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.