Privacy Policy
How information is handled when you visit Jarvis, use the CRM, or work with our team.
1. Who this policy covers
This policy describes how the business operating Jarvis ("Jarvis," "we," "us," or "our") handles personal information in connection with our website, Jarvis CRM, purchases, inquiries, onboarding, and related services.
xCerebro AI Agents, Lead Scraper, and Custom Builds are separate products and services. This policy applies when we provide those services under a Jarvis agreement. A separate website or provider may also have its own privacy notice.
When a business uses Jarvis to manage its own contacts, that business determines how those records are used. We process those records on its behalf as described in the customer agreement. Requests about a customer's marketing, messages, or contact records should generally be directed to that business.
2. Information we receive
The information involved depends on the service you use and what you choose to provide. Please only submit information that is needed for your request and that you have permission to share.
- Contact and business details, such as your name, email, phone number, company, industry, and project requirements.
- Scheduling details, including your preferred dates, times, time zone, and appointment history.
- Account information and customer records entered into the CRM, including contacts, conversations, notes, pipelines, tasks, and files.
- Subscription and transaction records, such as the plan purchased, payment status, billing dates, and processor references.
- Technical records from website and service use, such as IP address, browser type, access times, and error or security logs.
- Materials supplied for AI or custom work, including instructions, prompts, knowledge bases, workflows, and connected data.
3. How information is used
We use information to respond to inquiries, provide the services you request, manage accounts and payments, arrange onboarding, troubleshoot problems, and protect the services from misuse. We may also need records to meet legal obligations or resolve a dispute.
Marketing communications require the permissions applicable to the channel and your location. Providing information for a custom-build inquiry or an appointment does not, by itself, authorize unrelated marketing.
Where applicable law requires a legal basis, processing must be supported by that basis, such as performing our agreement with you, your consent, a legal obligation, or a legitimate interest that does not override your rights.
4. Payments and appointment bookings
Checkout takes place on a hosted payment page. Standard currently links to Stripe; Elite, Premium, and private onboarding use the supplied FastPayDirect payment pages. The marketing website does not ask you to enter card details directly into its own form.
The payment provider processes the information entered at checkout under its own terms and privacy notice. We may receive transaction and subscription information needed to administer your purchase.
Private onboarding bookings use a hosted calendar. Information you enter there is used to arrange your sessions and is also subject to the calendar provider's practices.
6. Text messages, calls, and email
If you opt in to a Jarvis messaging program, the consent request should identify the sender, the type of messages, and how to opt out. Frequency varies with the program, and message and data rates may apply. Marketing consent is not a condition of purchase.
Reply STOP to end messages from that SMS program or HELP for assistance. Email marketing should include an unsubscribe option. Withdrawing marketing consent does not cancel a subscription or prevent necessary account notices through another permitted channel.
Mobile numbers and SMS opt-in data will not be sold or shared with third parties or affiliates for their own marketing. They may be disclosed to providers that deliver or support the messaging service and when legally required.
Customers sending messages through Jarvis are responsible for obtaining permission from their own recipients and honoring their opt-out requests. Recording or transcribing calls requires any notice and consent applicable to that communication.
7. AI features and sourced data
An AI feature may process the prompts, conversations, documents, or CRM information supplied to it through a technology provider. Only connect data you are authorized to use. AI output can contain personal information and should be reviewed before it is shared or used.
Lead Scraper or custom data services may organize information from public or otherwise authorized sources selected for a project. Public availability does not remove privacy rights or create permission for every use. Source accuracy and permissions need to be assessed for the intended purpose.
9. Retention and security
Information should be retained only as long as needed to provide the service, meet a legal or accounting obligation, maintain security, or resolve a dispute. The appropriate period depends on the record and purpose. Backups and provider systems may follow separate deletion schedules.
We must use safeguards appropriate to the information and service. No online service can guarantee complete security. Protect your login credentials, control access to your workspace, and report suspected unauthorized access promptly.
10. Your choices and privacy requests
Depending on your location and applicable law, you may be able to request access, correction, deletion, or a portable copy of your information, withdraw consent, or object to or restrict certain processing. Some laws also provide rights relating to targeted advertising, sale or sharing, and appeals of a denied request.
We may need to verify your identity or an authorized agent's authority before acting on a request. Legal exceptions can limit what can be deleted or disclosed. We will not unlawfully discriminate against you for exercising a privacy right.
For records controlled by a business using Jarvis, contact that business first. For information controlled by Jarvis, use the privacy contact identified below once this policy is finalized.
11. International use and children
Service providers may process information in a country other than your own. Applicable transfer requirements and safeguards must be considered before transferring protected information internationally.
Jarvis is intended for business use by adults. The services are not directed to children under 13. If information about a child has been submitted without required permission, contact the privacy team so it can be reviewed and handled as required by law.
12. Contact and policy updates
A final policy will identify the responsible legal business, its mailing address, and a working privacy-request email or form. Requests should describe the information or service involved without including passwords or complete payment details.
When this policy is updated, the revised version will identify its effective date. Additional notice or consent will be provided when required. This draft has no effective date and does not replace an existing policy.