Privacy Policy

We collect information in three ways:

Information you give us

• Account data — name, work email, company, role, password hash and profile photo.
• Billing data — billing contact and address; card details are collected and stored by our payment processor, not by Juniper.
• Customer Content — prompts, briefs, brand assets, files and the outputs generated from them.
• Communications — messages you send to sales or support, survey responses and event registrations.

Information collected automatically

• Device and log data such as IP address, browser type, pages viewed and timestamps.
• Usage data such as features used, agent runs and error reports, which we use to operate and improve the Services.

Information from others

Integrations you connect (for example a CMS or CRM), single sign-on providers, and business partners who refer you to us.

We use personal information to:

• provide, maintain and secure the Services, including authenticating users and preventing abuse;
• process payments and send service, billing and security notices;
• respond to requests and provide customer support;
• understand how the Services are used, in aggregated or pseudonymised form, so we can improve them;
• send marketing about Juniper, where permitted—you can opt out at any time; and
• comply with legal obligations and enforce our Terms of Service.

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract, our legitimate interests (such as securing and improving the Services), your consent (for example, for non-essential cookies), and compliance with legal obligations.

We do not train AI models on your Customer Content. Prompts, uploaded files, brand knowledge in Juniper IQ, and generated outputs are used only to provide the Services to your workspace.

• Our model providers are contractually prohibited from using Customer Content to train or improve their models.
• Providers may retain inputs for no more than 30 days solely for abuse monitoring, after which they are deleted. Enterprise workspaces can opt into zero retention.
• Brand Voice and style profiles are private to your workspace and are never shared with other customers.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share it only:

• with sub-processors who help us run the Services, under written data protection terms (see below);
• with integrations you choose to connect, at your direction;
• within your workspace, where administrators and collaborators can see shared content;
• in a business transfer, such as a merger or acquisition, subject to this policy; and
• where required by law, or to protect the rights, safety or property of Juniper, our users or the public.

These third parties process personal data on our behalf. We give at least 30 days’ notice before adding a new sub-processor; subscribe at privacy@juniper.example.

We keep personal information only as long as we need it for the purposes above:

• Customer Content — for the life of your subscription, then deleted within 30 days of termination (backups within a further 60 days).
• Account data — while your account is active, and up to 24 months afterwards for fraud prevention and record keeping.
• Billing records — 7 years, as required by tax law.
• Logs — 90 days for application logs; 12 months for security audit logs.

Security is built into how Juniper is designed and operated. Our program is independently audited against SOC 2 Type II and ISO/IEC 27001.

• Encryption in transit (TLS 1.2+) and at rest (AES-256), with keys managed in a hardware-backed key service.
• Single sign-on (SAML/OIDC), SCIM provisioning, role-based access and audit logs for enterprise workspaces.
• Logical tenant isolation; production access is limited to on-call engineers, requires hardware-key MFA and is logged.
• Annual third-party penetration tests and a continuous vulnerability disclosure program.
• Documented incident response, with notification to affected customers without undue delay and within 72 hours of confirming a breach.

To report a vulnerability, email security@juniper.example. We will not take legal action against good-faith research that follows our disclosure guidelines.

Juniper is based in the United States and works with sub-processors in several countries. When we transfer personal data out of the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK Addendum, and supplementary measures where appropriate. Enterprise customers may choose EU data residency for workspace content.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a portable copy;
• Correct inaccurate information;
• Delete your information, subject to legal exceptions;
• Object to or restrict certain processing, including direct marketing;
• Withdraw consent where we rely on it, without affecting earlier processing; and
• Opt out of the sale or sharing of personal information (California residents). We do not sell or share it.

To exercise a right, email privacy@juniper.example. We will verify your request and respond within 30 days (45 days under the CCPA). We will not discriminate against you for exercising your rights. You may also complain to your local data protection authority. If your workspace is managed by your employer, we may refer your request to them as the controller.

We use a small number of cookies and similar technologies:

• Strictly necessary — to sign you in, keep sessions secure and remember preferences. These cannot be switched off.
• Analytics — to understand how our websites are used, set only with your consent where required.
• Marketing — to measure campaigns, set only with your consent.

You can change your choices at any time from the cookie settings link in our website footer, or through your browser settings.

The Services are built for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as our Services and the law evolve. We will post the new version here with an updated effective date and, for material changes, notify workspace owners by email or in-product notice at least 30 days in advance.

For privacy questions or requests, contact our Data Protection Officer:

Juniper AI, Inc. — Privacy
500 Harrison Street, Floor 4, San Francisco, CA 94105, United States
privacy@juniper.example

EU representative: Juniper AI Europe B.V., Herengracht 420, 1017 BZ Amsterdam, Netherlands. Or reach us through the contact page.