What Jolts keeps, and why.

1. Data we collect

We collect account and authentication data such as your email address, mobile number, business description, name, organization, IP address, and browser user agent. We keep signup details and the content of your SMS conversations, including the business context and feedback you share. We also process conversation activity, usage records, delivered-result references, support messages, and technical logs needed to operate and secure the service.

Our website uses a session cookie to keep your onboarding steps together and protect requests. An additional host-scoped cookie keeps you signed in for up to 30 days. If you buy or manage a plan, Stripe collects your payment details on its hosted pages. We receive billing identifiers, subscription status, and related transaction records; our checkout does not collect your full card number.

2. Company data

Jolts is designed around company-level observations, not people. We may store permitted source records, company identities, factual observations, evidence excerpts and references, dates, confidence, and classifications. We do not build anonymous visitor identities, personal contact-resolution profiles, protected-trait inferences, or cross-site consumer profiles.

3. How we use data

We use data to authenticate users, hold your conversation, send company suggestions by SMS, deliver evidence, meter plans, prevent abuse, maintain source rights, correct or remove records, support customers, monitor reliability, and improve retrieval quality. AI systems process your messages and relevant business context to generate replies and select and explain suggestions. Automated outputs can be wrong; review the supporting evidence before acting. Avoid sending passwords, payment card details, or sensitive personal information in texts. Your email is used for account ownership confirmation and necessary account communications.

4. Sharing and processors

We may share the minimum necessary data with hosting, SMS delivery, transactional email, payment processing, and AI services needed to operate Jolts. These services process relevant account information, message content, or technical records for those purposes. We may also disclose information where legally required, to protect rights and security, or as part of a business transfer subject to applicable privacy obligations. We do not sell personal information or customer queries for advertising. We do not share SMS opt-in information or consent with third parties for their own marketing.

5. Retention and deletion

We keep account and usage records while needed to provide the service, meet contractual and legal duties, resolve disputes, and prevent abuse. Source payloads and evidence follow provider-specific retention and takedown rules. A removed source can be purged while a minimal non-content audit record remains. Completed request payloads and processed webhook payloads are cleared after 30 days; minimal replay receipts remain. Phone codes expire after ten minutes. Expired browser sessions and phone challenges not updated in a day are removed hourly. Incomplete onboarding is an account record and follows account retention; it is not a separate temporary signup draft. Conversation history remains until account deletion; unfinished or failed processing records remain available for investigation.

6. Security

We use reasonable administrative and technical safeguards, including account-scoped access, verified messaging identities and restricted secrets. No system is perfectly secure; contact us promptly if you believe your account or data has been compromised.

7. International processing

Our application is hosted in the United States. Information from Canadian users is therefore processed outside Canada, and our service providers may process it in other countries. Information may be accessible to courts, law enforcement, and other authorities under the laws of those countries. Contact us with questions about cross-border processing.

8. Your rights

Depending on where you live, you may ask to access, correct, export, restrict, object to, or delete personal information, or withdraw consent where consent is the basis for processing. You may also complain to your local privacy regulator. Email support@jolts.xyz to make a request; no dashboard is required. We will verify your identity before disclosing or changing account data and respond within applicable legal deadlines. We may retain limited information where legal obligations or legitimate security needs require it, and will explain applicable exceptions. Reply STOP to withdraw SMS consent. Stopping messages does not delete your account or cancel a paid subscription; contact support for deletion or billing assistance.

9. Children

Jolts is a business service and is not directed to children. Do not use it if you are not old enough to enter a binding contract in your jurisdiction.

10. Changes and contact

We will update this policy when our practices materially change and will revise the effective date above. Privacy questions and rights requests can be sent to support@jolts.xyz.