Privacy Policy

1. Who we are

This policy covers Jako, the AI assistant, and the Perch workspace (together, the "Service"), and this website. The Service is provided by JakoAI, Inc. and its affiliate Telos Core Systems Ltd. (together, "JakoAI", "we" or "us"). Microsoft and Google may show Telos Core Systems Ltd. as the verified publisher of the Service.

When your organization buys the Service, your organization controls the data that it and its people put into the Service. We process that data on your organization's behalf and on its instructions. For data about visitors to this website and about our own customer accounts, we are the controller.

2. What we collect

Account data

Your name, email address, organization and the identifiers that Microsoft Entra ID, Google, Slack or another sign-in provider gives us when you sign in.

Data from accounts you connect

When you or your administrator connect Microsoft 365, Google Workspace, Slack or another service, Jako can read and act on the data that the granted permissions allow. This can include email, calendar events, contacts, files and chat messages. Jako reads this data when it needs it to answer you or to do a task. It does not copy your whole mailbox or drive.

Conversation content

The messages you send to Jako, its replies, the results of the tasks it does, and the notes it keeps so that it remembers your preferences ("memory").

Technical data

Logs of sign-ins, requests, errors and the actions Jako takes. We use them to run, secure and fix the Service.

Website data

If you accept analytics cookies on this website, Google Analytics records how you use the site. We do not set analytics cookies until you accept them.

3. How we use it

• To provide the Service: answer your questions, prepare drafts and do the tasks you ask for.
• To keep the Service secure, prevent abuse and investigate incidents.
• To support you when you ask for help.
• To meet our legal obligations.

We do not sell personal data. We do not use it for advertising. We do not use your organization's data to train or improve general AI models, ours or anyone else's.

4. Actions need your approval

Jako asks you to confirm before it takes an action that changes something outside the conversation, such as sending an email, accepting a meeting, or editing or deleting a file. Your administrator can limit what Jako may do.

5. Google user data

Jako's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail, Google Calendar and Google Drive data only to provide and improve the user-facing features of Jako that you use, such as answering questions about your mail and files and doing the tasks you ask for.
• We do not transfer this data to others except as needed to provide those features (for example, to our AI provider for the duration of a request), to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use this data for advertising, including retargeting or personalized ads.
• We do not sell this data, and we do not use it to train general AI or machine-learning models.
• People at JakoAI do not read this data, unless you give us your consent for specific messages or files, it is needed for security purposes such as investigating abuse, it is needed to comply with law, or the data is aggregated and anonymized for internal operations.

6. Microsoft user data

We treat data from Microsoft Graph in the same way as Google data in section 5. Jako uses it only to do what you ask, in the scope your organization granted. Your administrator can remove Jako's access at any time in Microsoft Entra ID.

7. Who we share it with

We share personal data only with the service providers that run the Service for us, and only as much as each one needs:

If your organization adds its own AI provider key, such as an OpenAI key, that provider works for your organization, under your organization's own agreement with it.

We may also disclose data when the law requires it, to protect people's safety, or as part of a merger or acquisition, with notice to you.

8. Where we store it, and for how long

We store data with Amazon Web Services. Our providers can process data outside your country, including in the United States. Where the law requires it, we use appropriate safeguards for these transfers, such as the EU Standard Contractual Clauses.

We keep account data, conversation content and memory while your organization's account is active. When your organization ends its account, or when you ask us to delete your data, we delete it within 30 days, unless the law requires us to keep it. Data in backups is deleted when those backups expire.

9. How we protect it

We encrypt data in transit and at rest. Credentials for connected services are stored encrypted and are never shown in the browser. Access to production systems is limited to the people who need it and is logged.

10. Your rights

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. If your organization gave you access to the Service, contact your administrator first, because your organization controls that data. We will help them answer you. You can also write to us at info@jakoai.com. You have the right to complain to your data protection authority. In Israel, that is the Privacy Protection Authority.

You can remove Jako's access to a connected account at any time: in Microsoft Entra ID or at myaccount.google.com/connections for Google.

11. Children

The Service is for businesses. It is not meant for anyone under 16, and we do not knowingly collect their data.

12. Changes

We will post any change to this policy on this page and update the date above. If a change is significant, we will tell your organization's administrator before it takes effect.

13. Contact

JakoAI, Inc. and Telos Core Systems Ltd.
Email: info@jakoai.com