Privacy Policy

Who we are

Jenna is operated by Tonic Data Labs Inc., a Delaware corporation headquartered in Los Angeles, CA. Contact: support@getjenna.com.

What we collect

We collect account information (name, email, firm, and role); content you submit (conversations, uploaded documents, and analyses); and operational records (token usage, audit logs, and feedback).

How content is protected

PII is detected and redacted by the Privacy Shield before AI analysis. Content is encrypted at rest and isolated per account.

AI processing

Content is processed via Google's Gemini API on a paid tier; your data is never used to train third-party AI models.

Retention

You control your retention period in Settings (default 7 years, consistent with IRS workpaper norms; options include 1, 3, or 7 years, or indefinite). You may delete any conversation or analysis at any time. Deletion is immediate, and backup copies expire within 15 days.

Cookies

We use three first-party cookies, all strictly functional: access_token, refresh_token, and csrf_token. We use no advertising or analytics cookies, in the Jenna app or on our website.

Advertising measurement on our website

Our public website (getjenna.com, not the Jenna app) measures whether our Facebook and Instagram ads lead to invite requests.

• If you arrive from one of our ads, the page keeps the ad's campaign tags and Meta's click identifier for that browser tab only. They are held in session storage and cleared when you close the tab.
• If you then request beta access, our server sends Meta one “Lead” event. It contains a hashed (scrambled, one-way) copy of your email address, that click identifier, your IP address, and your browser type. Meta uses it to measure and deliver our ads. Nothing else you type into the form is sent.
• We count anonymous steps on the website (arrived, clicked “Request beta access”, started the form) together with the campaign tags. These counts hold no IP address, no email, and no identifier.
• Data from inside the Jenna app is never sent to Meta or any advertising service: no client documents, tax data, conversations, or analyses.

How to opt out: turn on Global Privacy Control in your browser before you submit the form, and we will not send Meta a Lead for your request. You can also control how Meta uses data for ads at accountscenter.facebook.com/ad_preferences.

No sale of data

We do not sell or rent your information. The advertising measurement above is the only information we share for advertising.

Changes

Users will be notified of material changes to this policy.