Who this policy covers
This policy applies to Juba's website, company workspace, companion, research, campaign, publishing and measurement features. Juba is the controller of account, website and product-operation data.
When a company puts personal information into its workspace, that company decides why the information is used. In that situation the company is normally the controller and Juba processes the information to provide the service.
Information we collect
We collect the information needed to manage early access and create and operate a company workspace:
- Waitlist information: work email address, company website, consent record and the date you joined.
- Account information: name, email address, password hash, workspace membership and role.
- Company information: company name, website, product description, preferences and founder-provided context.
- Company memory: research evidence, sources, decisions, strategy, messages, campaigns, generated content, approvals, outcomes and learning.
- Companion information: conversation messages, summaries, selected attachments, voice transcriptions and any audio you ask Juba to generate.
- Connection information: connected provider, selected account, granted permissions, encrypted access credentials and connection status.
- Performance information: publication status, campaign events, leads, engagement and other results supplied by you or returned by a connected provider.
- Technical information: session identifiers, request metadata, error records, security events and AI usage measurements.
- Support and commercial information: messages you send us and billing details if you purchase a paid service. Payment card details are handled by the payment provider, not stored directly by Juba.
Information from public sources
Juba researches publicly accessible sources to understand a company, its market and its customers. Sources may include company websites, search results, news, public social posts, forums, reviews, app stores, public datasets, government sources and academic publications.
We may store a source URL, a relevant excerpt, an observed date and an assessment of what the source supports. Public information is not automatically treated as true. Juba keeps provenance and separates evidence, inference and unknowns.
How we use information
We use waitlist information to manage early access, contact you about your place and understand the companies interested in Juba. We use product information to provide and secure Juba, build company memory, perform research, generate and improve recommendations, create campaigns, publish authorized work, collect results, answer companion questions, provide support, prevent abuse and meet legal obligations.
We also use product-level statistics to understand reliability, usage and cost. We do not use one company's confidential workspace as another company's evidence. We do not train a general-purpose model on workspace content unless we first obtain explicit agreement.
AI processing
Juba uses model APIs for research, synthesis, strategy, content, conversation, embeddings, transcription and speech. Only the context needed for the requested task is sent. Depending on the task, that context may include company memory, conversation history, public evidence and attachments selected by the user.
AI output can be incomplete or wrong. Juba uses source tracking and quality checks, but you should review important decisions and anything that will be published or relied upon.
Connected accounts and publishing
When you connect a social, email, analytics or owned endpoint, the provider tells you which permissions are requested. Juba stores provider credentials in encrypted form and uses them only to perform the actions available through that connection.
Juba may publish approved campaign material and retrieve delivery or performance information. It does not read private social messages. Disconnecting an account stops future use of that connection. You can also ask us to delete retained connection records.
Why we are allowed to use information
Where data protection law requires a legal basis, we rely on:
- Contract: to create your account and provide the workspace and features you request.
- Legitimate interests: to secure, maintain and improve the service, prevent abuse and research public business information, balanced against people's rights.
- Consent: to contact you about early access after you join the waitlist, and where you choose other optional processing such as a non-essential cookie or a permission granted through a connected provider.
- Legal obligation: when we must retain or disclose information to comply with law.
How long we keep information
Waitlist information is kept until you receive access, ask us to remove it or the early-access program ends. Company memory, conversations, attachments, campaigns and results are kept while the workspace remains active because continuity is a core part of Juba. We retain account and operational records until they are no longer needed to provide the service, resolve disputes, secure the product or meet legal obligations.
When you request deletion, we delete or de-identify applicable information unless we must retain it. Limited copies may remain temporarily in backups and security records until their normal expiry. Disconnecting a provider prevents further use but does not by itself delete the company workspace.
How we protect information
Juba uses workspace access controls, password hashing, secure session cookies, encrypted provider credentials, origin checks, tenant-scoped retrieval and operational limits. Access is restricted to people and systems that need the information to operate or support the service.
No online service can guarantee absolute security. Please use a strong unique password, limit workspace membership and contact us promptly if you believe an account or connection has been compromised.
International processing
Juba and its providers may process information in countries other than yours. Where required, we use recognized transfer mechanisms and contractual safeguards. You may contact us for information about safeguards relevant to your data.
Your privacy choices and rights
Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of your personal information, object to certain processing, withdraw consent and appeal or complain to a data protection authority. California residents may also have rights to know, correct, delete, limit certain uses and opt out of sale or sharing.
Juba does not sell personal information. You can leave the waitlist or withdraw contact consent at any time by emailing hello@getjuba.com. To exercise any other right, use the same address. You do not need to create a new account to make a request. We may verify your identity and authority before acting.
Children
Juba is a business service and is not directed to children under 18. Do not create an account or place a child's personal information in a workspace unless you have a lawful reason and appropriate authority.
Changes and contact
We may update this policy when Juba's product, providers or legal obligations change. We will post the revised policy with a new effective date and give additional notice when a material change requires it.
For privacy questions, requests or complaints, contact Juba at hello@getjuba.com. You may also request the current legal operator and postal address through this contact.