Jaby Privacy Notice
Last updated: August 13, 2025
Scope. This Privacy Notice explains how Jaby, Inc. ("Jaby," "we," "us") handles personal information when you use our websites, apps, and services (the "Services"). This Notice doesn't apply to data we process solely as a processor/service provider for business customers; those uses are governed by our customer agreements.
Information we collect
- You provide: account info (name, email, credentials), billing and transaction data, communications with us, content you submit (e.g., prompts, files, images, audio), event/survey responses, identity/age info when required.
- Automatic: log and usage data (IP, time/date, pages/features used, interactions), device info (OS, browser, device IDs), approximate location (from IP) and optional precise location if you enable it, cookies/SDKs and similar tech (see Cookie Notice).
- Other sources: partners (e.g., security/fraud, marketing leads), and publicly available data used to help build the graph that powers our Services.
How we use information
- Provide, secure, troubleshoot, and improve the Services; develop new features; communicate with you (service messages, product updates); comply with law; prevent fraud/abuse; protect users, us, and the public; research and analytics.
- We may use de-identified or aggregated data and will not attempt to re-identify it unless required by law.
Targeted advertising, "sale"/"sharing," and your opt-out choices
If Jaby offers a Free plan that includes targeted content/ads:
- In California, "sharing" for cross-context behavioral advertising and certain "sales" of PI require an opt-out and honoring Global Privacy Control (GPC) signals. In Colorado, we must honor Universal Opt-Out Mechanisms (UOOMs) for targeted advertising/sale.
- We honor GPC and recognized UOOM signals where legally required and will apply them to the browser/session they come from, and, when reasonably possible, to your account.
- Where applicable, use our "Do Not Sell or Share My Personal Information" link and/or visit privacy.jaby.com to set preferences. You can also configure your browser to send GPC.
If you're not engaging in targeted advertising (current state): we do not sell or share PI for cross-context behavioral advertising and do not process PI for targeted advertising. If this changes, we will update this Notice, present clear choices, and honor GPC/UOOM.
How we disclose information
We disclose PI to:
- Vendors/Service providers (hosting/CDN, cloud infra, analytics, email/SMS, customer support, payments, fraud/security) under contract and our instructions.
- Affiliates under this Notice.
- Business account admins if you use a work domain or join an enterprise org.
- Transaction counterparties (e.g., M&A).
- Authorities or third parties when required by law, to protect rights/safety, or to enforce terms.
- Other users/third parties you choose to interact with (their terms apply).
Data retention
We retain PI only as long as needed for the purposes above, considering sensitivity, risk, and legal requirements. For example, temporary chats may be retained up to 30 days for safety.
Your privacy rights & how to exercise them
Depending on your location, you may have rights to access, delete, correct, restrict/opt-out, object, port, and appeal.
- Use privacy.jaby.com or email privacy@jaby.com.
- We verify requests to protect your security; authorized agents may act with proper proof; response timelines follow applicable law.
California (CPRA) & other U.S. state disclosures
- Categories collected: identifiers; commercial info; internet/network activity; geolocation (approximate, or precise if enabled); communications; account credentials; payment data; user content.
- Purposes/Disclosures: as described above; we provide specifics on request.
- Opt-out rights: sale/sharing and targeted advertising (if applicable) via footer link, account settings, GPC/UOOM signals.
- Non-discrimination: we won't discriminate for exercising rights.
- See our annual California Privacy Reporting page when available.
Colorado (CPA)
We honor recognized UOOMs for targeted advertising/sale and provide an appeals channel at privacy@jaby.com.
Note: U.S. state privacy laws are evolving; we will update this Notice and our mechanisms as requirements change.
Children's privacy
Our Services are not directed to children under 13, and we do not knowingly collect PI from them. If we learn a child under 13 has provided PI, we will delete it. If we ever offer child-directed features, we will comply with COPPA (including new 2025 requirements limiting ad tech and requiring verified parental consent).
Security
We use administrative, technical, and organizational measures to protect PI; no system is 100% secure. Follow good security hygiene when using the Services.
International data transfers
If we transfer PI internationally, we will use appropriate safeguards (e.g., contractual clauses) where required by law.
Automated decision-making
Jaby uses automation to prioritize and curate information. You can contact us to learn more, object where applicable, or request human review consistent with local law.
Changes
We'll post updates here with a new "Last updated" date and, where required, provide additional notice.
Contact
privacy@jaby.com • support@jaby.com • Jaby, Inc., USA