Privacy Policy.

This notice describes what personal information Jubal collects, how we use it, who we share it with, and the rights you have over it. We've tried to keep it short and honest.

Who we are. "Jubal" is operated by do.dev, the data controller for any personal information collected through askjubal.com and the Jubal desktop app. You can reach us at hello@do.dev.

What we collect

When you ask for beta access

On the beta-access form, we ask you for:

• Your name and work email address
• Optionally: your company or organization, your role, how many documents you'd use Jubal on, and how you heard about us
• A short description of what you'd like to use Jubal for

When you submit the form, your browser also automatically shares a few technical details with us that we log alongside the submission so we can answer responsibly and detect abuse: your IP address, approximate location (country/region/city derived from your IP), timezone, language, user-agent, referring page, and the timing of your form submission.

When you use the desktop app

Your documents stay on your disk. Jubal reads files in place; it does not upload them to a vector store or index. When you ask a question, only the specific passages needed to answer it are sent to your configured AI provider, and the app shows you which ones. We do not receive a copy of your files.

The desktop app may send basic diagnostic information (crash reports, app version, anonymous usage counts) so we can fix bugs and improve the product. If you'd rather not share that, email us and we'll help you turn it off.

Cookies and tracking

This website does not currently set any non-essential cookies. We do not run third-party analytics, advertising pixels, or cross-site trackers on askjubal.com. If that changes, we'll update this page and ask for your consent where required.

How we use your information

• To review your beta-access request and reply
• To send you a confirmation email after you submit a form
• To provide, improve, and debug the Jubal desktop app and the website
• To prevent fraud, spam, and abuse
• To comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising.

Legal bases (for EU/UK visitors)

• Consent — when you submit a form, you consent to us processing what you entered to respond to you.
• Legitimate interests — running the website, preventing abuse, and keeping basic logs of the service.
• Contract — if and when you sign up for a paid plan, we process what we need to deliver it.
• Legal obligation — for records we're required to keep.

Who we share it with

We share personal information only with the small set of service providers ("processors") we use to run Jubal. They may only use your data to provide their service to us.

• Vercel — hosts askjubal.com. Processes requests and keeps short-lived server logs.
• send.dev — delivers transactional email (the admin notification when you submit the form, and the confirmation we send you).
• GitHub — hosts the desktop app download binaries. Serves the file when you click Download.
• AI model providers (Anthropic, OpenAI, Google, xAI, DeepSeek, Moonshot, Meta) — if you use the desktop app, your question and any passages the app decides to send are forwarded to whichever provider you've configured. Each has its own privacy policy.

We may share information if compelled by law (e.g., valid subpoena) or if we believe in good faith it's necessary to protect someone's safety.

International transfers

We're based in the United States, and most of our processors are US companies. If you contact us from the EU, UK, or another jurisdiction, your information will be transferred to and processed in the United States under standard contractual clauses or an equivalent safeguard.

How long we keep it

• Beta-access requests — up to 12 months from the date you submitted, unless we've already onboarded you or you ask us to delete it sooner.
• Email correspondence — for as long as needed to handle what you wrote to us about, then archived or deleted.
• Server logs — short-lived (days to weeks) at our hosting provider.
• Account data (when you're a paying customer) — for the duration of your account plus a short period afterward, per normal business records.

Your rights

You have the right to:

• Access a copy of the personal information we hold about you
• Correct information that's wrong
• Delete your information ("right to erasure")
• Object to or restrict how we use it
• Port it somewhere else in a machine-readable form
• Withdraw consent at any time (this doesn't affect processing we did before you withdrew)

To exercise any of these rights, email hello@do.dev. We'll respond within 30 days. If you live in the EU/UK and think we're not handling your data correctly, you may lodge a complaint with your local supervisory authority. California residents have equivalent rights under CCPA/CPRA.

Children

Jubal is intended for adults. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.

Security

We use standard measures to protect personal information — TLS for every request, access controls on admin systems, and reputable sub-processors. No system is perfectly secure, and we can't guarantee your information won't be accessed if something goes wrong, but we treat it carefully and will tell you if we become aware of a breach affecting it.

Changes to this policy

We may update this page from time to time. The "last updated" date at the top will always reflect the most recent version. Material changes that affect what we do with your data will be announced separately.

Contact

Questions, concerns, or requests? Email hello@do.dev.