Privacy Policy

1.Who this policy covers

This policy applies to personal information we process when you:

• visit jinovaai.com
• contact us, or send an enquiry through a form on this website
• create or use a Jinova account where this policy is linked
• use Jinova Compute, including planning and running workloads
• interact with our support
• use other Jinova online services that link to this policy

If you use Jinova Compute, the Privacy Notice presented in the Jinova console, at app.jinovaai.com/privacy, gives the detail for it, including how personal data in files you upload is handled and when content is deleted.

If you have a separately negotiated agreement with us, for example an enterprise contract or a data processing agreement, that agreement may contain additional or different data protection terms for the services it covers.

2.Who we are

Jinova AI Ltd is a company registered in England and Wales under company number 17387234. Its registered office is 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. That address is a correspondence address, not a visitor location.

For privacy and data protection questions or requests, contact privacy@jinovaai.com.

We have not appointed a statutory Data Protection Officer, as we are not currently required to. Privacy requests are handled by the company through the address above.

3.Information we process

The information we hold depends on how you interact with us. In broad categories:

• Contact and enquiry information: your name, company, business email, role, and whatever context you choose to describe in an enquiry, together with the messages exchanged.
• Account information: where you hold an account, the email address and account identifiers used to sign in and to identify your account, and the status of that account.
• Billing and transaction information: where you buy something, records of payments, account balances, transactions and the accounting information we need to keep. Where payments are processed through a third-party payment provider, that provider may process your payment details directly, and we receive only the information we need to administer the transaction and your account.
• Workload information: where you use Jinova Compute, the instructions and prompts you submit, any files, datasets, models and configuration you provide, job metadata, execution logs and status, and the outputs produced for you.
• Technical and security information: IP address, browser and user-agent information, timestamps, device and session information, and security and diagnostic logs.
• Analytics information: usage information from Google Analytics, but only if you have accepted optional analytics cookies on this website.
• Advertising measurement information: if you arrive from one of our ads in ChatGPT, the reference for that ad, which OpenAI adds to the address of the page you land on, but only if you have allowed advertising measurement on this website.

Workload material is under your control, and can contain whatever you choose to put into it, including personal data. Please only submit material you have the right to submit, and think about whether personal data actually needs to be in it.

Where sign-in is handled by an external authentication provider, your password is handled by that provider and is not passed to us.

4.Why we process it, and our lawful bases

Under UK data protection law we need a lawful basis for each purpose. Ours are:

• Providing accounts and the service: to authenticate you, manage your account, plan and execute the workloads you ask for, return results, maintain account balances and transactions, and provide support. Basis: performance of a contract with you, or steps you have asked us to take before entering one.
• Security, fraud prevention and service integrity: to protect the service and its users, detect and prevent abuse, investigate failures and incidents, and troubleshoot problems. Basis: our legitimate interests in keeping the service secure, reliable and free from abuse, balanced against your interests and rights.
• Legal and accounting obligations: to keep the records the law requires and to respond to lawful requests. Basis: compliance with a legal obligation.
• Enquiries and business communications: to respond to what you send us and to follow up on a conversation you started. Basis: steps taken at your request before entering a contract, or our legitimate interests in responding to enquiries about our business.
• Optional website analytics: to understand how this website is used so we can improve it. Basis: your consent, which you can withdraw at any time using Cookie settings.
• Optional advertising measurement: to learn whether our ads in ChatGPT lead people to Jinova. Basis: your consent, which you can withdraw at any time using Cookie settings.

Where we rely on legitimate interests, you have the right to object. See the section on your rights below.

5.Cookies, analytics and advertising measurement

This website uses Google Analytics 4 to understand how the site is used, for example which pages people look at and how they arrive. This is optional and it is off by default.

Google Analytics is not loaded until you accept it. Before you make a choice, and if you reject analytics, no request is made to Google's tag servers, no analytics cookies are set from this website, and no analytics events are sent. The website works in exactly the same way either way.

If you accept, Google Analytics sets cookies and processes technical identifiers such as a randomly generated client identifier, along with IP-derived and device information. We use it in an aggregated, reporting-oriented way to understand usage patterns rather than to identify individuals, but this information is not fully anonymous and we do not claim that it is. Google acts as our analytics service provider for this processing.

We do not intentionally send form content, account information or workload content to Google Analytics. The events we record are limited to non-identifying interaction information such as which page was viewed and which call to action was clicked.

This website also offers advertising measurement, which is optional and off by default. Our ads appear in ChatGPT. When you follow one, OpenAI adds a reference for that ad to the address of the page you land on, in a parameter called oppref.

If you allow advertising measurement, this website keeps that reference in a first-party cookie called jinova_oppref, set for jinovaai.com and its subdomains. The cookie lasts 30 days. If you arrive from one of our ads again, the new reference replaces it. When you follow a link from this website to the Jinova console at app.jinovaai.com, the reference is added to that link, so the console can tell that your visit came from the ad. It is never added to links to any other website.

Before you make a choice, and if you refuse advertising measurement, the reference is not stored and is not added to any link. If you withdraw consent later, the jinova_oppref cookie is deleted.

This website does not load any OpenAI script and sends nothing to OpenAI. What the console does with the reference, including whether it reports a sign-up or purchase to OpenAI, is governed by the choices you make there and explained in its Privacy Notice at app.jinovaai.com/privacy.

To remember your choices, we store a single first-party item in your browser's local storage recording whether you accepted or rejected analytics and advertising measurement, when, and which version of the notice you saw. It contains no identifier for you and is never sent to Google Analytics, OpenAI or anywhere else.

You can change or withdraw your choices at any time using the "Cookie settings" control in the footer of any page. Withdrawing analytics consent stops further analytics collection and clears the analytics cookies this site can see. It does not delete historical aggregate analytics already collected, and we do not claim otherwise. Withdrawing advertising measurement consent deletes the jinova_oppref cookie.

Where the service needs to store something for essential functionality, for example to keep you signed in, that storage is necessary for the service to work and is not covered by the analytics choice.

6.Sharing and service providers

We do not sell personal information. We share it only where it is necessary, and with categories of recipients such as:

• hosting and infrastructure providers that run the website and platform
• compute providers whose infrastructure executes workloads
• authentication providers, where sign-in is handled externally
• payment and billing providers, where you buy something
• analytics providers, currently Google Analytics, and only with your consent
• advertising platforms, currently OpenAI, which the Jinova console may tell when a visit from one of our ads in ChatGPT leads to a sign-up or purchase, and only with your consent
• email, communications and support tools we use to reply to you
• professional advisers such as accountants and lawyers, where needed
• authorities, regulators or other parties where we are legally required to disclose, or to establish or defend legal claims

Not every category receives every type of information. What is shared depends on what you are doing. For example, an enquiry from this website does not involve compute providers, and running a workload does not involve our analytics provider.

We name Google Analytics and OpenAI because they relate to the optional choices you can make in Cookie settings. We do not publish a list of our other providers here. If you need to know which providers are involved in a particular service, ask us and we will tell you what we can.

7.Jinova Compute workloads

To run a workload, the content and configuration needed to execute it has to be transmitted to the infrastructure selected to run it. That infrastructure may be operated by a third-party provider.

We aim to limit what is processed and shared to what is necessary to deliver the service you asked for. We do not use your content to train Jinova models.

We cannot promise that workload data stays within any particular country, and we do not promise that a provider retains no temporary technical data such as operational logs. If a specific data location or retention arrangement matters to you, contact us before running the workload so we can tell you what is and is not possible.

8.When we are a controller and when we are a processor

For visitors to this website, for people who contact us, and for direct account holders and the administration of their accounts, Jinova AI Ltd generally acts as a data controller. That means we decide why and how that information is processed, and this policy explains it.

Where we process personal data on a customer's behalf, we generally act as a processor for that data. That includes personal data in files uploaded to Jinova Compute, which we process under the Data Processing Terms presented in the Jinova console, and personal data we process for an organisation under a separately agreed service. In those cases the customer's terms and any data processing agreement govern the processing, and the customer is responsible for the information it puts into the service. This public policy does not replace an enterprise data processing agreement.

9.International transfers

Some of the providers we use may process information outside the United Kingdom. Where UK data protection law requires safeguards for such a transfer, we rely on an appropriate mechanism, such as UK adequacy regulations covering the destination country, or approved contractual safeguards with the provider.

Which mechanism applies depends on the provider and destination, so we do not state a single mechanism for every transfer. If you want to know what applies to a particular service, contact privacy@jinovaai.com.

10.How long we keep information

We keep personal information only as long as we need it. Because the service is developing, we describe this by criteria rather than by fixed periods we cannot yet commit to:

• Enquiries and correspondence: for as long as needed to deal with the enquiry and any resulting relationship, and for a reasonable period afterwards.
• Account information: while the account is active, and for an appropriate period after closure to deal with queries, disputes and legal obligations.
• Billing, transaction and accounting records: for as long as tax and company law require us to keep them.
• Workload content, outputs and job records: according to how the service operates and any settings available to you, together with what we reasonably need for security and operational purposes.
• Security and diagnostic logs: for a period appropriate to investigating abuse, incidents and faults.
• Analytics information: according to the retention setting configured in Google Analytics.
• Advertising measurement: the jinova_oppref cookie expires 30 days after it is set, and is deleted straight away if you withdraw consent.

For Jinova Compute, the Privacy Notice in the Jinova console publishes the periods after which uploaded files and results are deleted. For everything else we apply the criteria above while we formalise a written schedule with specific periods. If you need to know how long we hold something specific, ask privacy@jinovaai.com.

11.Your rights

Under UK data protection law you have rights over your personal information. Depending on the circumstances and the lawful basis we rely on, these can include the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is inaccurate or incomplete
• ask us to delete information, where there is no good reason for us to keep it
• ask us to restrict how we use information while a concern is resolved
• object to processing we carry out on the basis of legitimate interests, including on grounds relating to your particular situation
• ask us to transfer certain information to you or another provider in a portable format
• withdraw consent where we rely on it, without affecting processing already carried out

These rights do not apply in every situation. For example, we may need to keep accounting records even if you ask us to delete them. If we cannot do what you have asked, we will explain why.

Optional website analytics and advertising measurement run on your consent, and you can withdraw either at any time using the "Cookie settings" control in the footer of any page. You do not need to email us to do that.

To exercise any of these rights, contact privacy@jinovaai.com. We may need to check who you are before acting on a request.

12.Complaints

If you are unhappy with how we have handled your personal information, please tell us first at privacy@jinovaai.com so we have the chance to put it right.

You also have the right to complain to the UK Information Commissioner's Office, the supervisory authority for data protection in the UK. Details are at ico.org.uk.

13.Automated decision-making

Jinova Compute automatically works out compute requirements and selects infrastructure for a workload. Those are technical routing decisions about how a job runs, not decisions about people.

We do not currently use personal information to make solely automated decisions that produce legal effects concerning you or similarly significantly affect you. If that changes, we will update this policy and explain the safeguards that apply.

14.Security

We use reasonable technical and organisational measures to protect personal information, and we design the service with access control and least privilege in mind.

No online service can promise perfect security, and we do not claim to hold security certifications we have not obtained. If you have specific security requirements for an engagement, raise them with us and we will tell you honestly what we can and cannot meet.

15.Children

The service is not intended for children. Accounts are for people aged 18 or over, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will deal with it.

16.Changes to this policy

We will update this policy as our services and processes develop. The date at the top of this page shows when it was last changed. Where a change is significant, we will take reasonable steps to bring it to your attention.

17.Contact

Privacy and data protection requests: privacy@jinovaai.com.

General enquiries: info@jinovaai.com.

Jinova AI Ltd is registered in England and Wales. Company number: 17387234. Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.