Privacy · usejarvis

The short version

The whole policy in ten lines. Everything below expands on one of them.

Where the brain runs decides what reaches us. Self-hosted, your work stays on your machine. On a paid plan, we run the brain and your work is processed on our servers.
Jarvis observes your computer to do its job. By default it captures your screen, clipboard, file activity, running programs and notifications. You can turn each one off.
Self-hosting is free, and stays free. It requires no account and sends us nothing but anonymous usage statistics.
On a paid plan we hold your account, your knowledge base and what Jarvis observes. We keep it for as long as you have an account, and delete it thirty days after you leave.
We never see your card number. Stripe handles payment.
We name every company that processes your data, and what each one receives.
Voice uses OpenAI for transcription and Microsoft for speech by default. Both can be changed to alternatives, including ones that run entirely on your machine.
We do not sell your data, and we do not train AI models on it.
You can see, export, correct or delete your data by asking us, at no charge.
Questions go to team@usejarvis.dev, where a person reads them.

Who we are and what this covers

Jarvis is made by Usejarvis Inc., a Delaware corporation. This policy covers the Jarvis software, the hosted Jarvis service, and this website. It does not cover third-party services you connect to Jarvis, which are governed by their own policies.

Self-hosted or hosted

Jarvis has two parts. The app runs on your computer and is the part that observes and acts. The brain thinks and remembers, and the app sends it what it observes. Where the brain runs determines what reaches us.

How you run it	Where your data is processed	What we hold
Self-hosted	A machine you control	Anonymous usage statistics only. No account, no login
Hosted, on a paid plan	Our servers	Your account, your billing records, your knowledge base, and what the app sends to the brain

If you self-host, the sections below about our servers, our staff and our retention do not apply to your data, because we do not process it. Self-hosting is free and will remain free; our terms of service make the same commitment.

What we collect

Information you provide

This applies to paid plans. Self-hosted installs have no account.

Account details. Your email address and login credentials.
Payment details. These go to Stripe. We keep a customer reference, invoices, amounts, tax and dates.
Device names, when you connect a computer to your account.
Support messages, if you write to us.

Information Jarvis collects from your computer

The app observes your computer so that Jarvis can understand what you are working on and act for you. This is the same however you run it. By default it collects:

Your screen, about every seven seconds. The app captures your main display, reads the text from it on your machine, and records which application is in front and its window title. Captures are stored on your own disk.
Your clipboard, every couple of seconds. When the contents change, the new contents are read. This includes anything you copy, such as a password copied from a password manager.
File activity in your home folder, every few seconds. Which files were created, changed or deleted, and their paths.
Running programs, every few seconds. Names, resource use, and which ones started or stopped.
Desktop notifications, including their content. Linux only at present.
Your browser, applications, files and command line, when Jarvis acts for you. It works within your logged-in sessions, reads and writes files, and runs commands as you.

Screen capture is not selective. Whatever is on your display when a capture is taken is captured, including personal or third-party content. Our disclaimer describes what it means to give software this level of access.

Two controls, which do different things. Turning awareness off, or holding down the pebble, stops the brain storing or acting on what the app observes. It does not stop the app observing. To stop capture itself, turn off the relevant capabilities in the app's settings and restart it. Both are described under your rights and controls.

What reaches us if you self-host

Everything above stays in a database on your own machine. The only data a self-hosted install sends us is anonymous usage statistics: an anonymous machine identifier, the Jarvis version, how it was installed, the type of computer and operating system, your time zone offset, whether the app is connected, and which capabilities are available on your machine. It is sent once at startup and once an hour after.

The identifier is a one-way hash of your computer's name and username, which themselves never leave your machine. The statistics never include your name, IP address, settings, keys, file names, conversations or anything from your screen. You can turn them off, and Jarvis tells you how the first time it runs.

Separately, your prompts and their context go to the AI provider you configured, on your own account and under their terms. When Jarvis detects an error or a struggle on screen it may send that screenshot to your AI provider for analysis, at most once every thirty seconds. This is on by default and can be turned off. If you use voice, your audio and Jarvis's spoken replies go to the speech providers you configured, by default OpenAI and Microsoft. We do not see any of it.

What reaches us if you are on a paid plan

We run the brain, so everything the app observes is sent to our servers over an encrypted connection and stored there: the text read from your screen, your clipboard contents, file and program names, and notifications. We also hold:

Your knowledge base. People, projects, decisions, facts, commitments, tasks, your conversations with Jarvis, and its record of the actions it took.
Screenshots, when Jarvis sends one to an AI provider for analysis.

What we do not collect

Your card number. It goes to Stripe and is never stored by us.
Your IP address, in our account records. It is processed in the ordinary course of serving requests and may appear in server logs.
Anything from a self-hosted install, beyond the anonymous statistics above.

We do not sell your data, share it with data brokers, or use it to train AI models.

How we use your data, and the legal basis

If you are in the UK or the EU, the law requires a legal basis for each use.

To provide the service you pay for (contract). Running your instance, storing your knowledge base, maintaining your account, taking payment and sending service email.
To meet legal obligations. Payment and tax records, for as long as the law requires.
With your consent. Google Analytics, the advertising pixel, connecting Google, and using voice. Each is off until you turn it on, and you can withdraw consent at any time.
For our legitimate interests, where they do not override yours. Anonymous usage statistics so we know how many installs exist and whether they work, platform security, and records of administrative actions.

Who else processes your data

These are the companies that process data on our behalf, and what each one receives.

Company	Purpose	What it receives
Clerk	Sign-up and sign-in, paid plans	Your login and session
Stripe	Payments and receipts	Your card and billing details
Resend	Service email	Your email address and the message
Cloudflare	Serves this website and routes the platform	Your connection, including your IP address
Google Analytics	Website usage, only with your consent	Page views, browser and device information, and cookie identifiers
Supabase	Stores anonymous usage statistics	The fields listed above, and nothing else
AI model providers	Generate Jarvis's responses	On a paid plan, your prompts and their context, routed through our gateway to the provider assigned to your plan. Self-hosted, whichever provider you configure, on your own account
Google	Mail and calendar, if you connect them. Also this website's fonts	Read access to your Gmail and Calendar, on self-hosted installs. From the website, your IP address
Meta	Advertising measurement	A page view, only if you accept the cookie banner

Each of these companies processes data under its own privacy policy. We do not permit any of them to sell your data.

Apps you connect

Nothing is connected until you connect it. Currently this means Google, on self-hosted installs.

Read-only. Jarvis requests read access to your mail and calendar. It cannot send, delete or modify anything.
Mail and calendar are granted together. One consent screen covers both.
Your own Google project. You register the connection yourself and the credentials stay on your machine. They are not sent to us.
You can disconnect at any time, in Jarvis and in your Google account.

Google integration is not currently available on hosted plans.

How long we keep your data

Data	Kept for
Screen captures	One hour, or twenty-four hours if Jarvis marked the moment as significant. Both are settings you can change. Expired captures are deleted every ten minutes, on our servers and on your machine
Your knowledge base	Until you delete it
Your account	As long as you have one, plus payment records we are required to keep
After you cancel	Thirty days. Your instance stops immediately and your data is held so you can return. We email you before the window closes. After it, your account and everything in it is deleted
Anonymous usage statistics	Indefinitely. They contain no personal data

To get a copy of your data: self-hosted, use the built-in export command. On a paid plan, email us and we will provide it.

To delete your data: self-hosted, delete the Jarvis folder. On a paid plan, cancel and the thirty-day window runs, or email us to have it deleted sooner.

Where your data is processed

We are a United States company, and our service providers are primarily based in the United States. If you are in the UK or the EU, your data is transferred outside your region when you use a paid plan. If you require your data to remain in a specific country, contact us before subscribing.

Cookies

Jarvis attribution, with your consent. We store a random visit reference in a first-party cookie for up to 30 days and a consent preference so withdrawal stops account linking. We record campaign tags, Google ad click identifiers where present, the referring hostname, landing path and broad device type. When you sign up in the same browser, or use a continuation link on another device and accept there, we can connect that visit to signup, plan selection and trial activity. Continuation references work for up to seven days and provide no account access. Account attribution is retained for up to 90 days. We do not infer links from IP addresses or device fingerprints.
Google Analytics and Meta's advertising pixel load only if you accept. A banner asks on your first visit, with Accept and Reject. Neither service loads until you accept.
If you accept, each page view tells Meta your IP address, browser and the page, which Meta may match to an existing account. We see aggregate counts only. Rejecting also deletes Google Analytics and Meta cookies on this domain, stops Jarvis attribution collection and requests removal of the current Jarvis visit reference and its linked attribution record. It does not delete your account or billing history.
Google Analytics receives page views and browser and device information to help us understand website usage. It uses cookies to distinguish visits. You can withdraw your consent through Cookie settings in the footer.
Your choice is stored in your browser and can be changed from Cookie settings in the footer.

Your rights and controls

If you are in the UK or the EU, you have the right to access your personal data, correct it, delete it, receive a portable copy, object to or restrict its processing, and lodge a complaint with your data protection authority. We extend the same rights to everyone. Email team@usejarvis.dev; there is no charge and no need to give a reason.

The controls in the product:

Stop capture. In the app's settings, disable the capabilities you do not want, then restart. Screen, clipboard, file activity, programs and notifications each have their own setting. This stops collection at the source.
Stop the brain using what is captured. Turn awareness off, or hold down the pebble. The app continues to capture.
Stop screenshots going to an AI provider. Turn off cloud vision.
Turn off usage statistics. The brain and the app send them separately and each has its own setting. The brain also honours the DO_NOT_TRACK environment variable.
Mute the microphone from the tray. Turning awareness off does not affect the microphone.
Disconnect Google, in Jarvis and in your Google account.
Change your cookie choice from Cookie settings in the footer.

Because usage statistics are anonymous, we cannot identify which records are yours and so cannot delete them on request. Turning them off stops future collection.

Security

Isolated instances. Each customer's brain runs under its own account on our servers, readable only by itself. Traffic between your computer and your brain is encrypted, and each of your computers authenticates with its own key.
Restricted staff access. Routine operations use a fixed set of administrative actions that do not read customer data. Emergency access for repairs is limited to named administrators, requires their own credentials, and is recorded.
Encrypted credentials. Your AI keys and connected-account tokens are stored encrypted on the machine running your brain.

Children

Jarvis and this website are not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

When our practices change, we update this page and the date at the top. If we begin collecting something materially new on a paid plan, we will email you before it takes effect.

Contact

team@usejarvis.dev

Usejarvis Inc., a Delaware corporation
2093 Philadelphia Pike
Claymont, DE 19703
United States
+1 762 327 3586

Jarvis is source-available. What the app captures, what it sends, and how requests are routed can all be read in the repository.

What Jarvis can do on your machine Terms of service Read the source