Privacy Policy

JanitorAI Inc.
Last Updated: September 17, 2026

1. Introduction

JanitorAI Inc. ("JanitorAI," "we," "us," or "our") operates the JanitorAI platform, including our website at janitorai.com, mobile applications, and associated services (collectively, the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Platform.

We are committed to protecting your privacy and ensuring transparency about our data practices. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Platform.

2. Definitions

For purposes of this Privacy Policy:

"Account" means the unique account you create to access and use the Platform.
"Content" means any text, images, characters, personas, chat logs, or other materials you create, upload, or interact with on the Platform.
"Personal Data" means any information that identifies, relates to, describes, or could reasonably be linked to you as an individual.
"Usage Data" means information collected automatically through your use of the Platform, including technical and behavioral data.
"Device Information" means data about the device you use to access the Platform, including hardware model, operating system, unique device identifiers, and network information.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you voluntarily provide when you:

Account Registration: Email address, username, password, and profile information.
Profile Data: Display name, avatar, bio, and preferences you choose to share.
User Content: Characters you create, chat conversations, messages, and other content you generate or upload.
Payment Information: Billing address, payment method details (processed securely by our payment processors), and transaction history.
Communications: Information you provide when contacting our support team, participating in surveys, or engaging with our community features.

3.2 Information Collected Automatically

When you use our Platform, we automatically collect:

Usage Data: Pages visited, features used, time spent on the Platform, click patterns, search queries, and interaction data.
Device Information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
Location Data: Approximate geographic location derived from your IP address.
Log Data: Server logs recording requests made to our Platform, including timestamps, referring URLs, and system activity.

3.3 Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

Maintain your session and remember your preferences.
Analyze Platform usage and performance.
Provide personalized experiences and content recommendations.
Detect and prevent fraud and security threats.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

3.4 Google Sign-In and Linked Google Accounts

JanitorAI offers Google sign-in through Supabase, our authentication provider. When you choose to sign in with Google or connect a Google Account to your JanitorAI Account, Google provides basic account information with your authorization:

Account identity: Your Google account identifier, email address, and email verification status, which let us identify you and connect your Google sign-in to your JanitorAI Account.
Basic profile information: Your name and profile picture, when provided by Google, which may be included in the authentication record associated with your Account.
Authentication information: Tokens and related sign-in information used to complete authentication and establish your session. The sign-in flow requests offline access, so Google may also issue a refresh token.

These permissions cover basic identity, email, and profile information. Google sign-in does not give JanitorAI your Google password or access to your Gmail messages, Google Drive files, contacts, or calendars. This Google sign-in integration does not access Google Workspace content or provide such content for AI or machine-learning training.

We use Google account information to create and authenticate your Account, manage connected sign-in methods, protect against unauthorized access and abuse, and provide account support. Your account email is also used for service messages, security and account-deletion notices, and billing when you make a purchase. Our analytics may record your JanitorAI account identifier and the sign-in provider or method to understand and improve the sign-in experience.

Google account information is stored in our authentication and account systems, including Supabase. Session information is also stored in your browser's cookies or local storage to keep you signed in. Sections 6.5, 8, 9.8, and 11 below explain sharing, retention, deletion, access controls, and how to disconnect Google.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Providing and Improving Our Services

Operating, maintaining, and improving the Platform and its features.
Processing your transactions and managing your Account.
Personalizing your experience and providing content recommendations.
Developing new products, services, and features.

4.2 Safety and Security

Enforcing our Terms of Service and Community Guidelines.
Detecting, investigating, and preventing fraud, abuse, and security incidents.
Protecting the rights, property, and safety of JanitorAI, our users, and the public.
Content moderation to maintain a safe environment.

4.3 Communications

Responding to your inquiries and providing customer support.
Sending service-related notices, including security alerts and administrative messages.
With your consent, sending promotional communications about new features, products, or services.

4.4 Analytics and Research

Analyzing usage patterns to understand how users interact with our Platform.
Conducting research and development to improve our AI systems and user experience.
Generating aggregated, de-identified insights about Platform usage.

4.5 Legal Compliance

Complying with applicable laws, regulations, legal processes, and governmental requests.

5. Legal Bases for Processing

We process your Personal Data based on the following legal grounds:

Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations to you.
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
Consent: Processing based on your explicit consent, which you may withdraw at any time.
Legal Obligation: Processing necessary to comply with applicable laws and regulations.

6. Disclosure of Your Information

We may share your information in the following circumstances:

6.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf, including hosting, analytics, payment processing, customer support, and marketing. These service providers have access only to the information necessary to perform their functions and are contractually obligated to protect your data.

6.2 Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity. We will notify you of any such change and any choices you may have regarding your information.

6.3 Legal Requirements

We may disclose your information when we believe in good faith that disclosure is necessary to:

Comply with applicable laws, regulations, legal processes, or governmental requests.
Enforce our Terms of Service and other agreements.
Protect the rights, property, or safety of JanitorAI, our users, or others.
Detect, prevent, or address fraud, security, or technical issues.
Protect against legal liability.

6.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6.5 Google Account Information

Google and Supabase process the information needed to complete Google sign-in and link your Account. Our hosting and infrastructure providers process account records to operate the Platform. When needed to deliver a service you use, we share your account email with providers such as Resend for account and service emails and Stripe for payment processing. Analytics providers may process your JanitorAI account identifier and sign-in events. Support and security personnel may access relevant account information to handle your requests or investigate unauthorized access or abuse.

The legal disclosures described in Section 6.3 may also apply to Google account information. We do not sell your Google account information. Our handling of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

7. Payment Processing

Payment processing services for the Platform are provided by JanitorAI Inc. and its affiliates, including Dulova Investments Limited (located at 10-12 Florinis Street, 1065, Nicosia, Cyprus, Company Registration Number ΗΕ 477877), as well as third-party payment processors.

When you make a purchase on the Platform, you authorize the applicable payment processor to process your payment on behalf of JanitorAI Inc. Your payment information is transmitted directly to our payment processors using industry-standard encryption and is not stored on our servers. All other aspects of your relationship with the Platform, including your Content, Account, and use of services, remain governed by JanitorAI Inc.

We retain transaction records, including purchase amounts, dates, and subscription status, as necessary to provide our services and comply with legal and accounting obligations.

8. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine retention periods include:

The duration of your Account and active use of our Platform.
Our legal obligations to retain data for specific periods.
The necessity of data retention to resolve disputes or enforce agreements.
Legitimate business needs, such as maintaining security and preventing fraud.

When data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

Google account information follows these same retention criteria. We retain the account identity and associated authentication records while needed to provide your Account and connected sign-in methods. After account deletion, some records, including your email address and authentication-provider metadata, may remain in our deleted-account records for account-deletion communications, purchase or receipt recovery, security, fraud prevention, legal obligations, or resolving disputes. Deleting an Account does not immediately erase every account record. You can contact [email protected] to request deletion of retained Personal Data; any applicable retention exceptions will be considered when we handle your request.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your Personal Data:

9.1 Access and Portability

You have the right to request access to the Personal Data we hold about you and to receive a copy of your data in a structured, commonly used, machine-readable format.

9.2 Correction

You have the right to request correction of inaccurate or incomplete Personal Data.

9.3 Deletion

You have the right to request deletion of your Personal Data. To request account deletion, open Settings > Security > Delete Account and complete the confirmation steps. Your Account is deactivated first, and the confirmation shows the scheduled deletion date. During the grace period, you can sign back in and choose to restore your Account. Once permanent deletion is completed, you cannot restore the Account. Some records may be retained for the purposes described in Section 8. You can also request deletion of Personal Data by contacting [email protected].

9.4 Restriction and Objection

You have the right to request restriction of processing or object to processing of your Personal Data in certain circumstances.

9.5 Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

9.6 Marketing Communications

You may opt out of receiving promotional emails by following the unsubscribe instructions in those messages or by adjusting your Account settings. Even if you opt out, we may still send you non-promotional communications, such as service-related notices.

9.7 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

9.8 Disconnecting Google and Revoking Access

You can disconnect Google in Settings > Security > Sign-in methods by selecting Disconnect for Google. You must have another sign-in method connected so you can continue accessing your Account. You can also review and remove JanitorAI's Google connection in your Google Account connections settings.

Disconnecting Google or revoking access prevents use of that connection for future Google sign-ins unless you connect it again. It does not itself delete your JanitorAI Account, end every existing JanitorAI session, or erase information already received. To delete your Account or request deletion of stored Google account information, use the steps in Section 9.3 or contact [email protected].

10. International Data Transfers

JanitorAI is based in the United States, and we process and store data in the United States and other countries. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in countries that may have different data protection laws than your country of residence.

When we transfer Personal Data across borders, we implement appropriate safeguards to ensure your data receives adequate protection, including standard contractual clauses approved by relevant authorities and other legally recognized transfer mechanisms.

11. Data Security

We implement appropriate technical and organizational measures designed to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure development practices, and regular security assessments.

These safeguards also apply to Google account information. We use HTTPS to encrypt information in transit and authenticated access controls to restrict access to account data. Google sign-in is handled through Google and Supabase rather than by asking you to submit your Google password to JanitorAI.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your Account credentials and for any activity that occurs under your Account.

12. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from anyone under 18 years of age. If we learn that we have collected Personal Data from a child under 18, we will take prompt steps to delete such information. If you believe we have collected information from a child under 18, please contact us immediately at [email protected].

13. Third-Party Links and Services

Our Platform may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our Platform. We are not responsible for the content, privacy policies, or practices of third-party services.

14. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no common understanding of how to interpret DNT signals, our Platform does not currently respond to browser DNT signals. You can manage your tracking preferences through your browser settings and the choices described in this Privacy Policy.

15. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

Right to Know: The right to know what Personal Data we collect, use, disclose, and sell.
Right to Delete: The right to request deletion of your Personal Data, subject to certain exceptions.
Right to Correct: The right to request correction of inaccurate Personal Data.
Right to Opt Out: The right to opt out of the sale or sharing of your Personal Data for cross-context behavioral advertising.
Right to Non-Discrimination: The right not to be discriminated against for exercising your privacy rights.

We do not sell your Personal Data as defined under the CCPA/CPRA. To exercise your California privacy rights, please contact us using the information provided below.

16. European Privacy Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and similar laws, including the rights described in Section 9 above. Additionally, you have the right to lodge a complaint with your local supervisory authority if you believe our processing of your Personal Data violates applicable law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Privacy Policy on our Platform with a new effective date. We may also provide additional notice, such as email notification, for significant changes.

Before using Google account information for a new purpose beyond what was disclosed when you authorized access, we will notify you and obtain your consent as required by Google's user data policies.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

JanitorAI Inc.

Email: [email protected]

Website: www.janitorai.com

We will make every effort to respond to your inquiry within a reasonable timeframe and in accordance with applicable law.