Privacy Policy

Jae Labs, based in Kingston, Jamaica, operates Agent Jae. Jae Labs is the data controller for personal data we process via the service. Contact: team@agentjae.ai.

From WhatsApp conversations:

• WhatsApp phone number and profile name.
• Messages and media sent in the conversation thread.
• Timestamps and read receipts.
• Opt-in and opt-out records, including the consent text shown.
• Automation logs (when an AI reply was sent vs. a human handoff).

Account data: your email and name, plus login and security events.

What we don't collect: full payment card numbers, bank account numbers, government identification numbers, biometric data, or other sensitive identifiers. If one of these arrives in a thread, we do not extract, store, or further process it.

• Compose and deliver replies inside the WhatsApp thread.
• Send opted-in Message Templates outside the 24-hour customer service window.
• Detect abuse, ensure security, and maintain service reliability.
• Respond to lawful requests from a Jamaican court or competent authority.

AI training stance. Conversation data is not used to train, fine-tune, or improve any AI or machine-learning system, ours or any third party's. This obligation is contractually enforced with our subprocessors (see §5). Per Meta's WhatsApp Business Solution Terms, Business Solution Data may not be used to create, develop, train, or improve any machine learning or artificial intelligence system. We do not.

Operational scope. Agent Jae is a structured business assistant — it answers product, booking, and listing queries, schedules, and routes leads. It is not a general-purpose chatbot. Out-of-scope queries return a fallback that hands off to a human.

Opt-in. Agent Jae only messages people who have given explicit WhatsApp opt-in. Opt-in is collected separately from SMS or email consent — past consent on those channels does not carry over. The opt-in record (timestamp, source/channel, the consent text shown) is retained as audit proof.

Opt-out. Anyone can opt out at any time by replying STOP, blocking the number, or asking in any reasonable phrasing. The same channel is used for withdrawing consent. We remove the user from active outreach within 24 hours.

24-hour customer service window. Free-form replies are sent only inside the 24-hour window after the user's most recent message. Outside that window, only Meta-approved Message Templates are used.

AI labeling. Agent Jae is an AI assistant. Replies are AI-composed unless a human takes over.

Human escalation. Any user can reach a human by typing "agent" or "human" in the thread, or by emailing team@agentjae.ai.

We use the following subprocessors. Each operates under a data-processing agreement that requires them to process data only on our instructions, prohibits use of conversation data for training their own systems, and prohibits use for advertising.

Subprocessors marked United States process data outside Jamaica. We rely on the standard data-processing agreements provided by each subprocessor, which incorporate contractual safeguards for cross-border transfers consistent with international good practice and the Eighth Standard of the Jamaica Data Protection Act, 2020.

We do not sell data. We do not use conversation data for advertising. We do not build profiles on WhatsApp users for our own purposes.

Your rights under the Jamaica DPA, 2020:

• Access (s7). Receive a copy of the data we hold.
• Rectification (s11). Correct inaccurate data.
• Erasure (s11). Have your data deleted, subject to the retention rules in §6.
• Restriction of processing (s8). Pause processing while a request is being reviewed.
• Withdraw consent. By the same channel used to give it.
• Solely automated decisions (s12). Where a decision affecting you is taken solely by automated processing and produces a significant effect, you may request human review by emailing team@agentjae.ai or by typing "human" in the WhatsApp thread.

How to exercise them. Email team@agentjae.ai with the subject "Privacy request". We respond within 30 days. If unresolved, you may complain to the Office of the Information Commissioner of Jamaica.

Deletion requests specifically: see our Data Deletion page for the request format.

Children. Agent Jae is a workplace tool for licensed business professionals. We do not knowingly collect data from anyone under 18.

Security. All traffic uses TLS; data at rest is encrypted with industry-standard ciphers; production access is gated by SSO and logged.

Breach notice. If a breach affects you, we tell you and the Office of the Information Commissioner within 72 hours of confirming it.