Privacy Policy

Jetra is operated as a subsidiary of SharperTrend, a company registered in the State of Texas, United States. In this policy, “Jetra,” “we,” “us,” and “our” refer to SharperTrend acting through Jetra. Jetra is intended for users in the United States, Europe, Türkiye, and other locations where the service is lawfully available.

For account administration, billing, security, support, and our own product operations, Jetra generally determines why and how personal information is processed and acts as a controller or business. When a business customer submits personal information to a workspace or connects another service and directs Jetra to process that information, Jetra generally acts as a processor or service provider for that customer. The customer remains responsible for its own privacy notices, lawful bases, instructions, and responses to the people whose information it controls.

• Account and identity information: name, email address, authentication identifiers, account status, organization, workspace memberships, roles, and preferences.
• Customer content: prompts, chat messages, automation goals and definitions, graph content, setup choices, instructions, files, connected-service data, run inputs and outputs, approvals, comments, and other content submitted to the service.
• Automation and operational information: triggers, schedules, steps, model and provider selections, integration and channel status, run status, errors, evidence, audit activity, usage, cost, and performance metadata.
• Connected-service information: account labels, authorized scopes, selected resources, configuration metadata, and data returned by integrations, channels, tools, model providers, or external agents at your direction.
• Credentials and secrets: API keys, access tokens, webhook credentials, and similar values submitted through secure setup flows. Jetra is designed to store these values separately from ordinary chat and workspace content, but you should never paste secrets into chat, templates, or other general text fields.
• Billing information: credit balances, purchases, ledger entries, usage charges, refunds, checkout status, transaction references, and limited billing contact information. Stripe processes payment-card information; Jetra does not store full payment-card numbers.
• Device and service information: IP address, browser and device type, session and cookie data, timestamps, pages or features used, diagnostics, security events, and similar technical information.
• Communications: support requests, feedback, survey responses, and other messages you send us.

We receive information directly from you; from workspace owners and administrators; from identity, payment, model, hosting, email, and support providers; from services you choose to connect; from automation sources and recipients; and automatically from your use of Jetra. If you submit information about another person, you are responsible for having the authority and lawful basis to do so.

• Provide accounts, workspaces, automations, integrations, model processing, files, outputs, approvals, scheduling, and support.
• Authenticate users, enforce workspace permissions, store secure setup values, prevent abuse, investigate incidents, and protect Jetra, our users, providers, and the public.
• Measure usage, calculate successful-run charges, maintain credit balances, process payments and refunds, and meet accounting, tax, and legal obligations.
• Diagnose failures, maintain reliability, improve user experience, develop features, and understand aggregate automation patterns.
• Communicate about the service, respond to requests, provide security or legal notices, and enforce our Terms of Service.

Depending on the location and context, we rely on performance of a contract, compliance with legal obligations, our legitimate interests in operating and protecting Jetra, consent where required, and other lawful grounds available under applicable law. Where we rely on legitimate interests, we consider the nature of the information, the expected use of the service, and the rights of the affected person.

Jetra sends the context reasonably needed to fulfill a request or run an automation to selected model providers and provider routers. These providers may include OpenAI, OpenRouter and the model providers available through it, and Replicate. Depending on the feature, this context may contain prompts, messages, files, connected-service data, automation instructions, or outputs. The provider path, location, retention period, and safety review may vary by model and configuration.

Jetra does not use raw customer content—such as account data, messages, files, connected-service records, customer-specific graph labels or instructions, run inputs or outputs, or secrets—to train Jetra-owned models, and we do not intentionally opt that content into third-party model-training programs. Jetra may use de-identified, aggregated, or abstracted automation graph topology, step types, and usage patterns to analyze product trends, improve Jetra, develop or train automation-related systems, create benchmarks or templates, and support advertising or market insights based on automation patterns. We take reasonable steps to remove account identifiers, personal information, customer-specific business logic, raw customer content, and secrets from such graph data and do not use it to target advertising to an identified person.

Model providers may process information under their own service terms and data controls, particularly when you select a provider, routed model, or bring-your-own provider account. Provider practices vary. Jetra does not guarantee zero-data-retention or no-training routing for every model or feature unless that control is expressly stated in the product or a separate written agreement.

When you connect Google Workspace to Jetra, Jetra accesses only the Google user data and Google Workspace API data you authorize for the automation features you choose to use. In the current Google verification scope, this may include your Google account email address, selected Google Sheets spreadsheet data, and selected Google Calendar event data. If Jetra later enables additional Google services, Jetra will request the relevant scopes and use that Google data only after you authorize that access.

Jetra uses Google user data only to provide and secure user-facing Jetra features, including connecting the authorized Google account, reading selected automation inputs, preparing run results, showing setup and readiness status, preventing abuse, troubleshooting, and complying with applicable law. Jetra does not sell Google user data, use it for advertising, use it for credit or lending decisions, or use it for unrelated market research.

Jetra may transfer Google user data to service providers only as needed to provide the automation you request, protect the service, or meet legal obligations. This may include infrastructure providers and, when a selected automation requires model processing, approved AI model providers acting on the specific automation context. Jetra does not allow human access to Google user data except for workspace-authorized users, user-requested support, security or abuse investigation, legal compliance, or other limited operational purposes described in this policy.

Jetra does not use Google Workspace API data, or data derived from Google Workspace API data, to develop, improve, or train generalized or non-personalized AI or machine-learning models. Jetra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We may disclose information to:

• Hosting, database, authentication, security, monitoring, support, and infrastructure providers, including providers supporting our United States-hosted database and backups.
• AI model providers and routers, including OpenAI, OpenRouter and routed model providers, and Replicate.
• Stripe for checkout, payments, tax-related calculations, refunds, and fraud prevention.
• Email, Slack, Telegram, and other configured delivery providers, recipients, integrations, channels, tools, and external agents selected or authorized by you or your workspace.
• Other members and administrators of your workspace according to their roles and permissions.
• Professional advisers, auditors, insurers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or establish and defend legal claims.
• A buyer, investor, lender, affiliate, or successor in connection with a financing, reorganization, sale, merger, or similar business transaction, subject to appropriate confidentiality protections.

Jetra does not sell account or customer personal information. Jetra does not share personal information for cross-context behavioral advertising. De-identified or aggregated automation graph insights are not treated as personal information where applicable law excludes them. We commit not to re-identify such information, maintain reasonable measures designed to prevent re-identification, and require a recipient of that information to use it only for agreed purposes and not attempt to re-identify it.

Jetra's primary databases and backups are stored in the United States. Our providers, connected services, automation recipients, and workspace users may process information in the United States or other countries. Those countries may have privacy laws different from the laws where you live.

Jetra's cross-border transfer framework is to use contractual or other legally recognized safeguards where required for transfers from the European Economic Area, the United Kingdom, Türkiye, or another jurisdiction. Depending on the transfer, this may include applicable standard contractual clauses and supplementary measures. The appropriate mechanism must be confirmed for each regulated production transfer. Business customers that require data-processing or transfer terms should contact us before submitting regulated data.

We retain information only for as long as reasonably necessary for the purposes described in this policy. Unless a different period is required by law, a contract, a dispute, or a security need, our general retention periods are:

• Account, workspace, customer content, automation, message, run, memory, and artifact records: while the account or workspace is active and generally for no more than two years after closure or the last relevant activity.
• Support, operational, audit, security, and diagnostic records: generally up to two years after creation or resolution.
• Contract acceptance, consent, transaction, and legally required consumer records: for the relationship and the applicable limitation or recordkeeping period, generally between three and seven years.
• Purchased-credit, payment, refund, tax, and accounting records: for the period required by applicable financial and tax laws, which may be up to seven years or longer where legally required.
• Active credentials: until revoked, replaced, no longer needed, or the relevant account or workspace is closed, subject to backup and legal-retention requirements.
• De-identified or aggregated automation graph information: for as long as it remains de-identified and useful for the purposes described above.

Deletion from backups and downstream providers may not be immediate; copies may remain until the applicable backup or provider-retention cycle expires. We may preserve information when required by law, needed to prevent fraud or abuse, or subject to a legal hold. A workspace administrator may control content that an individual user cannot delete directly.

Jetra uses commercially reasonable administrative, technical, and organizational safeguards appropriate to the nature and risk of the information we process. These safeguards include authentication, workspace-based access controls, separation of credentials from ordinary content, encryption of vault-stored secrets, transport security, logging, monitoring, backups, and provider-readiness controls where applicable.

No service is completely secure. You are responsible for protecting your account, limiting workspace access, reviewing integration scopes, rotating credentials, and promptly notifying us of suspected unauthorized use. We will provide notices of qualifying security incidents as required by applicable law.

Depending on where you live and Jetra's role, you may have rights to access, know about, correct, delete, restrict, object to, or export personal information; withdraw consent; opt out of certain uses; and appeal a denied request. You may also have the right to complain to a data-protection authority or regulator. We will not discriminate against you for exercising a privacy right.

If Jetra processes information on behalf of your employer or another customer, please direct your request to that customer first. We will assist the customer as required by applicable law and contract. To make a request directly to Jetra, email us using the address below. We may need to verify your identity and authority before completing the request.

Where applicable, we will respond to a verified request without undue delay and generally within 45 days. If reasonably necessary, we may extend that period as permitted by law and will explain the extension. If we deny a request, you may appeal by replying to our decision with “Privacy Appeal” in the subject line. We will explain the result of the appeal and, where required, how to contact the relevant regulator. Requests and appeals are free unless applicable law permits a reasonable charge for requests that are manifestly unfounded, excessive, or repetitive.

Residents of the European Economic Area or United Kingdom may also object to processing based on legitimate interests and request a copy of applicable transfer safeguards. People protected by Türkiye's personal-data law may exercise the rights available under Article 11, including objecting to an adverse result arising from analysis exclusively through automated systems. Residents of United States jurisdictions with applicable privacy laws may exercise the access, correction, deletion, portability, opt-out, and appeal rights provided by those laws.

Jetra does not use account or billing information to make decisions about you that produce legal or similarly significant effects. A customer may configure an automation that processes information about employees, applicants, customers, patients, students, or other people. The customer determines that automation's purpose, instructions, data, recipients, and use of results and is responsible for required notices, lawful bases, impact assessments, human review, and rights or appeal processes. The availability of a model, integration, or automation capability does not mean that a particular use is lawful or appropriate.

Jetra uses cookies and similar browser storage needed for authentication, security, workspace selection, navigation, and short-lived chat continuity. These technologies may store session or workspace identifiers and queued interaction state. We do not use this information for cross-context behavioral advertising. If we add non-essential analytics or advertising cookies, we will provide the notices and choices required by applicable law.

Jetra is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a person under 18 has created an account or submitted personal information, contact us so that we can investigate and take appropriate action.

We may update this policy as Jetra, our providers, or applicable laws change. We will post the updated version and change the date above. When a change materially affects how we use personal information, we will provide additional notice when required by law.

Privacy requests and questions can be sent to jetra.agent@gmail.com. Please include “Privacy Request” in the subject line and identify the account or workspace involved. You can review the contractual rules governing use of Jetra in our Terms of Service.