Privacy Policy

Effective date: 2026-02-06

This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Jigsaw AI web application and related services (the “Service”).

1. Who we are

The Service is provided by the entity operating this website (“we”, “us”, “our”). If you have questions, contact us at privacy@yourcompany.com.

2. Information we collect

We collect the following categories of information:

• Account information: email address, authentication identifiers, and basic profile details you provide.
• Customer content: files and text you upload (e.g., PDFs, presentations, spreadsheets), project names/metadata, and any notes or report drafts created in the Service.
• Access and sharing data: which users you invite, what projects are shared, and permissions you grant or revoke.
• Usage and device data: pages viewed, features used, approximate location (derived from IP), device/browser information, and log data needed for security and troubleshooting.

3. How we use information

We use information to:

• Provide the Service, including secure project workspaces, uploads, and exports.
• Operate and secure the Service, including monitoring for abuse, fraud, and unauthorized access.
• Support you, respond to requests, and communicate about service updates.
• Improve the Service, including performance, reliability, and user experience.

4. Customer content and confidentiality

Customer content is private by default. Your projects and uploaded files are accessible only to you and the people you explicitly grant access to (for example, specific consultants or teammates).

We do not sell customer content. We do not use customer content to advertise to you. If we use third-party processors to help run the Service (for example, hosting, storage, or email delivery), they are bound to protect the data and use it only to provide services to us.

5. AI and automated processing

The Service may include features that summarize, extract, or draft outputs from your uploaded materials. Outputs are generated based on the information you provide and may require human review.

If the Service uses third-party AI providers, we aim to configure those services so that your data is not used to train public models. Exact behavior depends on your deployment and configuration.

6. Legal bases (where applicable)

Where required under applicable law, we process personal data based on: (a) performance of a contract, (b) our legitimate interests in operating and securing the Service, (c) compliance with legal obligations, and/or (d) your consent (where applicable).

7. How we share information

We may share information in these limited circumstances:

• With service providers that help us run the Service (hosting, storage, monitoring, support).
• With other users you authorize (e.g., consultants you invite to a project).
• For legal reasons, to comply with law, enforce our terms, or protect rights and safety.
• Business transfers, such as a merger, acquisition, or sale of assets.

8. Data retention

We retain personal data and customer content for as long as needed to provide the Service and for legitimate business purposes (such as security, dispute resolution, and compliance). You may delete projects or content where the Service provides deletion controls; deletion may take time to propagate through backups.

9. Security

We use administrative, technical, and organizational measures designed to protect information, including access controls and encryption in transit and at rest where supported. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data. You may also have the right to data portability. To exercise rights, contact us at privacy@yourcompany.com.

11. International transfers

If you access the Service from outside the country where we host or process data, your information may be transferred across borders. Where required, we use appropriate safeguards for cross-border transfers.

12. Children

The Service is not directed to children and should not be used by individuals under the age of 16 (or the age of digital consent in your jurisdiction).

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date above.