Privacy Policy

1. Introduction

Just In Time AI (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at jitai.co or use our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

Contact Information:

• Name (first and last)
• Email address
• Company/organization name
• Phone number (optional)
• Job title (optional)

Service and Billing Information:

• Payment information (processed securely by Stripe)
• Billing address
• Service plan and engagement details

Communications:

• Contact form submissions and correspondence
• Support requests
• Newsletter subscriptions
• Feedback submissions (only shared if you explicitly opt-in)

Content You Submit:

• Blog comments or responses
• Consultation request details
• Any information you voluntarily provide through our website

2.2 Information Automatically Collected

Usage Data:

• Device type, operating system, browser type
• IP address and general location (city/region)
• Pages visited, features used, time spent
• Referral source (how you found our site)
• Error logs and performance data

Server Logs:

• Request logs may contain IP addresses, timestamps, and page requests
• Logs are retained for 30 days for security and troubleshooting purposes
• Logs are automatically deleted after the retention period

2.3 Third-Party Analytics

We use analytics tools to understand how visitors use our website. These tools collect anonymized data about page views, traffic sources, and user behavior. We use this information to improve our website and services.

3. How We Use Your Information

3.1 Service Delivery

We use your information to:

• Provide, maintain, and improve our website and services
• Process transactions and manage service engagements
• Respond to inquiries and provide customer support
• Send service-related notifications and updates
• Deliver requested content (blog posts, resources, newsletters)

3.2 AI-Powered Services

Important: Just In Time AI provides AI consulting, implementation, and managed services. When delivering AI-powered services to clients:

Your Business Data:

• NEVER used to train AI models
• NOT shared with other clients
• Remains private to your organization

AI-Generated Content:

• AI responses cannot be guaranteed to be private
• AI models may retain patterns from interactions (not specific data)
• Do not include sensitive, confidential, or proprietary information in AI queries if you require absolute privacy

3.3 Analytics and Improvements

We analyze aggregated, anonymized usage data to:

• Understand how our website and services are used
• Identify and fix issues
• Develop new services and content
• Improve user experience

3.4 Communications

With your consent, we may send:

• Product updates and new service announcements
• Educational content, blog posts, and industry insights
• Marketing communications (you can opt-out anytime)

We will always send:

• Critical service notifications
• Security alerts
• Billing and engagement updates

4. How We Share Your Information

4.1 We DO NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties.

4.2 Service Providers

We share data with trusted third-party service providers who assist us in operating our website and services:

Vercel:

• Website hosting and deployment
• Privacy Policy: https://vercel.com/legal/privacy-policy

Stripe:

• Payment processing and subscription management
• Privacy Policy: https://stripe.com/privacy

Microsoft Azure:

• Cloud storage and content delivery (blog images and assets)
• Privacy Policy: https://privacy.microsoft.com/privacystatement

AI Model Providers:

We use AI providers to power our consulting and service delivery:

• Anthropic (Claude): AI-powered services and consulting. Your business data is NOT used to train models (per Anthropic API policy). Privacy Policy: https://www.anthropic.com/privacy
• OpenAI (GPT models): AI-powered services. Your business data is NOT used to train models (per OpenAI API policy). Privacy Policy: https://openai.com/policies/privacy-policy

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (subpoena, court order)
• Government requests or investigations
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

4.4 Business Transfers

If Just In Time AI is acquired, merged, or undergoes a business transfer, your information may be transferred to the acquiring entity. You will be notified of any such change.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures:

• Encryption in transit: TLS/SSL for all data transmission
• Encryption at rest: Encryption for stored data
• Access controls: Role-based access and least-privilege principles
• Monitoring: Regular monitoring for security threats

5.2 Your Responsibility

To protect your information:

• Use strong, unique passwords for any accounts
• Do not share login credentials
• Report suspicious activity immediately

5.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify you within 72 hours of discovery
• Provide details of the breach and affected data
• Explain steps we are taking to address it
• Recommend actions you should take

6. Data Retention

6.1 Active Engagements

We retain your information for as long as our service engagement is active and as needed to provide services.

6.2 Data Deletion

When you request data deletion:

• Personal information is deleted within 30 days
• Billing records retained for 7 years (legal/tax requirements)
• Anonymized usage data may be retained for analytics
• Backups containing your data are deleted within 90 days

6.3 Legal Holds

We may retain data longer if required by law or legal obligations.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information
• Receive a copy of your data within 30 days of request

7.2 Correction and Deletion

You can:

• Update your information by contacting us
• Correct inaccurate data
• Delete your data upon request

7.3 Marketing Communications

You can opt-out of marketing emails by:

• Clicking “unsubscribe” in any marketing email
• Contacting [email protected]

Note: You cannot opt-out of service-related communications (billing, security, etc.)

7.4 Do Not Sell My Personal Information

We do not sell personal information. If you are a California resident, see Section 8 for additional rights.

8. Regional Privacy Rights

8.1 European Union (GDPR)

If you are in the EU/EEA, you have additional rights:

• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your supervisory authority

Legal Basis for Processing:

• Contract performance (providing the service)
• Legitimate interests (improving the service, fraud prevention)
• Consent (marketing, optional features)

Data Transfers:

• Data may be transferred outside the EU/EEA
• We use Standard Contractual Clauses approved by the EU Commission

8.2 California (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect
• Access your personal information
• Delete your personal information
• Opt-out of sales (we do not sell data)
• Non-discrimination for exercising your rights

How to Exercise Rights:

• Email: [email protected]
• Subject line: “CCPA Request - [Your Request]”
• We will respond within 45 days

8.3 Other Regions

We comply with applicable privacy laws in all jurisdictions where we operate.

9. Children's Privacy

Our website and services are not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it immediately.

If you believe a child has provided us with personal information, contact us at [email protected].

10. Cookies and Tracking

10.1 Cookies We Use

Essential Cookies:

• Session management
• Security features

Analytics Cookies:

• Usage statistics (anonymized)
• Performance monitoring
• Traffic source tracking

10.2 Your Choices

You can disable cookies in your browser settings, but this may limit functionality.

10.3 Do Not Track

We do not currently respond to “Do Not Track” browser signals.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Email notification (if you are a subscriber or client)
• Posting the updated policy with a new “Last Updated” date

Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact Us

Privacy Questions or Concerns

Email: [email protected]
Subject Line: “Privacy Inquiry - [Your Topic]”

Mailing Address:
Just In Time AI
20 Bayview Ave
Berkley, MA 02779
United States

Response Time

We will respond to privacy requests within:

• 30 days for general inquiries
• 45 days for CCPA requests
• 30 days for GDPR requests (may extend to 60 days if complex)

14. Summary of Key Points

• We respect your privacy and protect your data with industry-standard security
• Your business data is NEVER used to train AI models
• We use Stripe for payments -- they process billing information securely
• AI responses cannot guarantee privacy -- do not include trade secrets or confidential data in AI queries
• You control your data -- access, correct, or delete anytime
• We never sell your data -- your information is never sold or rented to third parties
• You can opt-out of marketing communications at any time

Questions? Contact us at [email protected]