隐私政策

PRIVACY POLICY

Jasmine AI Inc. (operating as Jasmine / hellojasmine.io) Effective Date: May 8, 2026 Last Updated: May 8, 2026

1. INTRODUCTION AND COMMITMENT TO PRIVACY

Jasmine AI Inc. (operating as Jasmine, "we," "us," or "our") is committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use the Jasmine platform, including hellojasmine.io and chat.hellojasmine.io (collectively, the "Platform").

This Privacy Policy applies to all users of the Platform regardless of their location, including users in Canada, the United States, the European Union, the European Economic Area, the United Kingdom, and all other jurisdictions.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

2. APPLICABLE PRIVACY LAWS

Jasmine AI Inc. is committed to compliance with applicable privacy laws in the jurisdictions where we operate and where our users are located, including but not limited to:

Canada:

  • Personal Information Protection and Electronic Documents Act (PIPEDA)
  • Quebec Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Bill 64)
  • Alberta Personal Information Protection Act (PIPA)
  • British Columbia Personal Information Protection Act (PIPA BC)

United States:

  • California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
  • Virginia Consumer Data Protection Act (VCDPA)
  • Colorado Privacy Act (CPA)
  • Connecticut Data Privacy Act (CTDPA)
  • Other applicable state privacy laws

International:

  • General Data Protection Regulation (GDPR) — European Union and European Economic Area
  • UK General Data Protection Regulation (UK GDPR)

Where applicable law requires a higher standard of privacy protection, we will apply that higher standard.

3. INFORMATION WE COLLECT

We collect the following categories of personal information:

3.1 Information You Provide Directly

  • Account Registration Information: When you create an account, we collect your name and email address. If you register using Google Sign-In (OAuth), we receive your name and email address from Google as authorized by you.
  • Optional Information: You may optionally provide your address during registration, however this is not required and we do not actively solicit this information.
  • Communications: If you contact us at support@hellojasmine.io, we collect the content of your communications and any information you choose to provide.

3.2 Information Collected Automatically

When you use the Platform, we automatically collect:

  • Usage Data: Pages visited, features used, chat session frequency, session duration, and interaction patterns
  • Device Information: Browser type, operating system, device type, screen resolution, and language settings
  • Log Data: IP address, access times, referring URLs, and pages viewed
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 8 of this Policy

3.3 Session Recording and Behavioral Data

We use Microsoft Clarity, a third-party analytics service provided by Microsoft Corporation, to record user sessions on the Platform. Microsoft Clarity may collect:

  • Mouse movements and click patterns
  • Scroll behavior
  • Page interactions and navigation patterns
  • Session replays and heatmap data

This data is used to improve the user experience of the Platform. Microsoft Clarity's collection and use of this data is governed by Microsoft's Privacy Policy, available at privacy.microsoft.com. By using the Platform, you consent to the collection of this behavioral data by Microsoft Clarity on our behalf.

3.4 Information We Do NOT Collect

  • We do not collect your chat history or conversation content for marketing purposes
  • We do not collect phone numbers
  • We do not collect payment information directly (any payments are processed by our e-commerce platform provider)
  • We do not knowingly collect any information from users under the age of 18

4. HOW WE USE YOUR INFORMATION

We use the personal information we collect for the following purposes:

4.1 To Provide and Improve the Platform

  • Creating and managing your account
  • Providing access to the chat interface and AI-powered real estate information
  • Analyzing usage patterns to improve Platform functionality and user experience
  • Troubleshooting technical issues and maintaining Platform security
  • Conducting internal research and analytics

4.2 To Communicate With You

  • Sending service-related notices, updates, and security alerts
  • Responding to your inquiries and support requests
  • Sending marketing communications if you have opted in to receive them

4.3 For Marketing and Partner Communications (With Your Consent)

  • If you have provided explicit opt-in consent, we may share your name and email address with our trusted Partners, including real estate professionals, mortgage brokers, lawyers, and home inspectors, for the purpose of sending you relevant offers, news, and promotional materials
  • We will never share your chat history, conversation content, or any information beyond your name and email address with Partners for marketing purposes
  • Your consent to marketing communications is entirely voluntary and separate from your consent to these Terms

4.4 For Legal and Safety Purposes

  • Complying with applicable laws, regulations, and legal obligations
  • Enforcing our Terms of Use
  • Protecting the rights, property, and safety of Jasmine AI Inc., our users, and the public
  • Detecting, investigating, and preventing fraudulent or illegal activity

4.5 Legitimate Business Interests

  • Analyzing aggregated, anonymized data to understand usage trends
  • Improving our AI-powered services and information quality
  • Developing new features and services

5. LEGAL BASIS FOR PROCESSING (GDPR AND CANADIAN LAW)

For users in the European Union, European Economic Area, United Kingdom, and Canada, we process your personal information on the following legal bases:

  • Consent: Where you have given us explicit consent to process your information for a specific purpose, such as marketing communications. You may withdraw your consent at any time.
  • Contract Performance: Processing necessary to provide you with the Platform services you have requested and to fulfill our obligations under these Terms.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Platform, ensuring security, and preventing fraud, provided such interests are not overridden by your privacy rights.
  • Legal Obligation: Processing necessary to comply with applicable laws and regulations.

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We may share your information in the following circumstances:

6.1 With Your Consent — Marketing Partners If you have explicitly opted in to receive marketing communications, we may share your name and email address with Partners for the purpose described in Section 4.3. We do not share your chat history or conversation content with Partners under any circumstances.

6.2 With Service Providers We share information with trusted third-party service providers who assist us in operating the Platform, including:

  • Authentication service providers (including Google for OAuth sign-in)
  • Cloud hosting and infrastructure providers
  • AI model and processing service providers
  • Analytics and session recording providers (including Microsoft for Clarity)
  • E-commerce platform providers
  • Email service providers

All service providers are bound by contractual obligations to protect your information and may only use it for the specific purposes for which it was shared.

6.3 For Legal Compliance We may disclose your information if required to do so by law, court order, government authority, or regulatory body, or if we believe in good faith that such disclosure is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of Jasmine AI Inc.
  • Prevent or investigate possible wrongdoing in connection with the Platform
  • Protect the personal safety of users or the public
  • Protect against legal liability

6.4 Business Transfers In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice of any such transfer and any choices you may have regarding your information.

6.5 Aggregated and Anonymized Data We may share aggregated or anonymized data that cannot reasonably be used to identify you with third parties for research, analytics, or business purposes.

7. INTERNATIONAL DATA TRANSFERS AND CROSS-BORDER PROCESSING

Your personal information may be stored and processed in any country where Jasmine AI Inc. or its service providers maintain facilities or operations. This may include Canada, the United States, Australia, countries within the European Economic Area, the United Kingdom, and other jurisdictions.

By using the Platform, you acknowledge and consent to the transfer of your personal information to countries outside your country of residence, which may have different data protection laws than those in your jurisdiction.

When we transfer personal information from Canada, the European Economic Area, or the United Kingdom to other countries, we implement appropriate safeguards to ensure your information receives an adequate level of protection, including:

  • Standard Contractual Clauses approved by the European Commission
  • Binding corporate rules where applicable
  • Other legally recognized transfer mechanisms

We take reasonable measures to ensure that your personal information is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

8. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

8.1 Types of Cookies We Use

  • Essential Cookies: Necessary for the Platform to function properly, including authentication and security cookies. These cannot be disabled.
  • Analytics Cookies: Used to understand how users interact with the Platform, including session recording through Microsoft Clarity and website analytics through our e-commerce platform provider.
  • Preference Cookies: Used to remember your settings and preferences.
  • Marketing Cookies: Used to deliver relevant marketing communications if you have opted in. These are only active if you have provided consent.

8.2 Third-Party Cookies Third-party services integrated with the Platform, including Google (for OAuth authentication), Microsoft (for Clarity analytics), and our e-commerce platform provider, may set their own cookies subject to their respective privacy policies.

8.3 Managing Cookies You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information about managing cookies, visit allaboutcookies.org.

8.4 Do Not Track Some browsers offer a "Do Not Track" feature. Our Platform does not currently respond to Do Not Track signals, however we do honor opt-out requests for marketing communications as described in this Policy.

9. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Account Information: Retained for the duration of your account and for up to 3 years following account deletion, as required for legal and business purposes
  • Usage and Analytics Data: Retained for up to 2 years
  • Session Recording Data: Retained by Microsoft Clarity subject to Microsoft's own retention policies
  • Marketing Consent Records: Retained for a minimum of 5 years from the date of consent as evidence of your opt-in, even if you subsequently opt out
  • Legal and Compliance Records: Retained for up to 7 years as required by applicable law

When personal information is no longer required, we will securely delete or anonymize it.

10. DATA SECURITY

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, destruction, and loss. These measures include:

  • Encryption of data in transit using industry-standard SSL/TLS protocols
  • Access controls limiting who within our organization can access personal information
  • Regular security assessments and monitoring
  • Contractual security requirements imposed on service providers

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and applicable regulatory authorities as required by law, including within 72 hours as required under GDPR and within the timeframes required under Canadian privacy law.

11. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have the following rights regarding your personal information:

11.1 Rights for All Users

  • Right to Access: Request a copy of the personal information we hold about you
  • Right to Correction: Request correction of inaccurate or incomplete personal information
  • Right to Deletion: Request deletion of your personal information, subject to certain legal exceptions
  • Right to Withdraw Consent: Withdraw consent to marketing communications at any time
  • Right to Complain: Lodge a complaint with a relevant privacy regulatory authority

11.2 Additional Rights for Canadian Users (PIPEDA and Law 25)

  • Right to know what personal information we hold and how it is used
  • Right to challenge our compliance with PIPEDA and applicable provincial privacy laws
  • Right to have inaccurate information corrected
  • Quebec residents have additional rights under Law 25, including the right to data portability and the right to be forgotten

11.3 Additional Rights for EU/EEA/UK Users (GDPR)

  • Right to Data Portability: Receive your personal information in a structured, machine-readable format
  • Right to Restriction: Request that we restrict processing of your personal information in certain circumstances
  • Right to Object: Object to processing of your personal information based on legitimate interests
  • Right to Not Be Subject to Automated Decision-Making: Not be subject to decisions made solely through automated processing that significantly affect you
  • Right to lodge a complaint with your local data protection authority

11.4 Additional Rights for California Users (CCPA/CPRA)

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt out of the sale or sharing of personal information
  • Right to non-discrimination for exercising your privacy rights
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information

We do not sell your personal information as defined under CCPA/CPRA.

11.5 Additional Rights for Other US State Users Users in Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws have similar rights to those described above. We honor privacy rights requests from users in all US states to the extent required by applicable law.

11.6 How to Exercise Your Rights To exercise any of your privacy rights, please contact us at:support@hellojasmine.io

We will respond to all verified privacy rights requests within:

  • 30 days for Canadian users (as required by PIPEDA)
  • 30 days for EU/EEA/UK users (as required by GDPR), with the possibility of a 60-day extension where necessary
  • 45 days for California users (as required by CCPA), with the possibility of a 90-day extension where necessary

We may need to verify your identity before processing your request.

12. CHILDREN'S PRIVACY

The Platform is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected personal information from a user under 18, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child under 18 has provided personal information to us, please contact us immediately at support@hellojasmine.io.

13. THIRD-PARTY WEBSITES AND SERVICES

The Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to the Platform operated by Jasmine AI Inc. We are not responsible for the privacy practices, content, or policies of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through the Platform, including:

  • Google (for OAuth authentication): policies.google.com/privacy
  • Microsoft (for Clarity analytics): privacy.microsoft.com

14. GOOGLE SIGN-IN DISCLOSURE

The Platform offers Google Sign-In (OAuth) as an authentication option. When you choose to sign in using Google, you authorize Google to share your name and email address with Jasmine AI Inc. for the purpose of creating and managing your account. Our use of information received from Google Sign-In will adhere to Google's API Services User Data Policy, including the Limited Use requirements. We do not receive or store your Google password.

15. MICROSOFT CLARITY DISCLOSURE

We partner with Microsoft Clarity to capture how you use and interact with the Platform through behavioral metrics, heatmaps, and session replay to improve and market our services. Platform usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. Additionally, we use this information for site optimization, fraud and security purposes. For more information about how Microsoft collects and uses your data, visit Microsoft's Privacy Policy at privacy.microsoft.com.

16. AI PROCESSING DISCLOSURE

The Platform uses third-party artificial intelligence services to process your queries and generate responses. When you submit a query through the chat interface, your query may be processed by third-party AI model providers. We do not share your name, email address, or account information with AI model providers. Queries are processed subject to the privacy policies and terms of service of the applicable AI model providers. We encourage you to avoid submitting sensitive personal information through the chat interface.

17. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this Policy
  • Post the revised Policy on the Platform
  • Where required by applicable law, provide direct notice to affected users by email

Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Privacy Policy, please discontinue use of the Platform and contact us at support@hellojasmine.io to request deletion of your account and personal information.

18. QUEBEC LANGUAGE COMPLIANCE

Conformément à la Charte de la langue française du Québec (Loi 25), les utilisateurs au Québec peuvent demander une version française de cette politique de confidentialité en nous contactant à support@hellojasmine.io. Nous ferons des efforts raisonnables pour fournir une version française sur demande.

In accordance with Quebec's Charter of the French Language (Law 25), users in Quebec may request a French version of this Privacy Policy by contacting us at support@hellojasmine.io. We will make reasonable efforts to provide a French language version upon request.

19. CONTACT INFORMATION AND PRIVACY COMPLAINTS

If you have any questions, concerns, or complaints regarding this Privacy Policy or our privacy practices, please contact us at:

Jasmine AI Inc. Operating as Jasmine / hellojasmine.io Email: support@hellojasmine.io Website: hellojasmine.io

We will acknowledge receipt of your privacy complaint within 5 business days and will make every effort to resolve complaints within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the relevant privacy regulatory authority in your jurisdiction:

Canada: Office of the Privacy Commissioner of Canada Website: priv.gc.ca Phone: 1-800-282-1376

Quebec: Commission d'accès à l'information du Québec Website: cai.quebec.ca

European Union/EEA: Your local Data Protection Authority Website: edpb.europa.eu

United Kingdom: Information Commissioner's Office (ICO) Website: ico.org.uk

United States (California): California Privacy Protection Agency Website: cppa.ca.gov