Privacy Policy

Jifi is operated by EFFICIO MARKETING LLC, an Ohio limited liability company. Contact support@jifi.io for service questions, privacy@jifi.io for privacy requests, or legal@jifi.io for legal notices.

We determine the purposes of account administration, payment, security, our own support and operation of Jifi. For company knowledge, help-center content and customer support cases processed on a company’s instructions, that company controls the information and we act as its processor under the DPA. Contact that company about its products, case handling and privacy choices; contact us about Jifi’s own processing.

We process account identifiers, email addresses, authentication and recovery information, organization roles, settings and consent records to provide access and manage the service. Subscription records include accepted offers, status, payment-provider references, limited payment-method information and trial eligibility signals. Stripe collects payment details through its hosted interfaces; do not send card credentials in support messages.

Company-directed processing includes supplied URLs and source material, uploaded files and images, drafts, articles and revision history, internal guidance, customer messages, screenshots, case references and recovery credentials, feedback, optional contact details, and operator actions and replies. These support preparation, maintenance, publication, retrieval, customer answers and human continuation. Public articles are visible to visitors; access to private material depends on company roles and configured audience.

We also process request and device information, IP addresses or related security signals, errors, execution records and usage estimates to operate, protect, troubleshoot and budget the service. Information you send to our support, billing or privacy contacts is used to handle that request. We may retain records needed for fraud prevention, accounting, disputes or legal obligations.

Configured AI features send relevant instructions, company context, retrieved knowledge and conversation content to OpenAI. Requests can include images and files needed for the selected task. This processing produces drafts, preparation results and customer answers. The provider processes and retains these requests under the applicable API terms, endpoint and account settings.

Vercel and Supabase provide hosting, authentication, database and storage services; Resend delivers configured authentication and application messages; Cloudflare Turnstile handles abuse-prevention checks; and Backblaze stores encrypted backup archives. Sentry receives limited error reports with technical failure details, code locations and relevant company or work identifiers so we can diagnose service failures. Our error reports exclude conversation content, uploaded files, account contact details and access credentials. Stripe processes payments and subscription events. Google Workspace handles messages sent to our business mailboxes. The Subprocessor Notice explains the customer-data processing roles. We can also disclose information to advisers or authorities when needed for a lawful obligation or dispute, or in a business transfer subject to applicable safeguards.

An optional email copy of a company support conversation goes to the contact address provided for that case. A reply sent to the company’s receiving mailbox is handled by that company; it is not automatically imported into the Jifi case. Providing contact details for a support request is not blanket authorization for unrelated marketing.

Jifi uses cookies or browser storage for sign-in, security, tenant routing and support-case continuity. A case reference identifies a case but does not authorize access; keep your recovery credential private. Clearing browser storage can remove local access. Required security or payment interfaces may use their own storage under their notices.

Company content and case history are kept to provide the service and its recovery features. After service ends, authorized read/export access continues for at least 90 days, subject to lawful deletion instructions and security or legal restrictions. Expiry does not itself promise immediate deletion. Contact us or the controlling company to request return or deletion. Encrypted backup captures are retained for 90 days under the backup schedule, separately from the customer read/export access period; billing, security, dispute and legally required records may remain longer.

We use account and tenant access controls, private storage access, and operational recovery measures. The service and providers can process information in the United States and other locations under their applicable terms. A configured hosting region is not a promise that all processing stays in that region. Where transfer safeguards are required, they must be in place for the affected use; this notice does not itself establish a transfer mechanism.

Where applicable, we rely on contractual necessity, legitimate interests in operating and protecting Jifi, legal obligations, or separately requested consent. This Policy is a notice, not blanket consent to every activity. Depending on applicable law, you may request access, correction, deletion, portability or restriction, object to processing, withdraw consent, or complain to a relevant supervisory authority. Send requests to privacy@jifi.io. We verify authority before releasing or changing data and may refer company-controlled requests to that company.

Jifi is intended for business users, not child-directed services. Do not submit specially regulated or sensitive data beyond the permitted service scope. We update this notice when processing changes and provide additional notice or request consent where required. Its date identifies the current notice; accepting company Terms does not waive privacy rights.