Privacy Policy

What we collect

• Account data: your email address and, if you choose Google sign-in, your name and Google account identifier. There are no passwords.
• Sign-in and sessions: one-time sign-in links and session tokens are stored only as hashes. A session cookie keeps you signed in.
• Downloads: which flow and version you downloaded, when, your IP address and browser user agent, and your account if you were signed in.
• Custom automation and setup requests: the contact details, business information and process descriptions you send us.
• Security records: audit entries for administrative actions and short-lived rate-limit counters keyed by IP address.

What we do not collect

• Your automation credentials. Flow packages contain no secrets, and our request forms refuse text that looks like a password, token or key.
• Data processed by your automations. Flows run on your own Jervis Runtime or n8n installation; their executions do not pass through Jervis.
• Advertising or analytics tracking. The website sets no advertising cookies and uses no third-party analytics.

How we use it

• To sign you in and keep your account secure.
• To deliver downloads and show the flows you have downloaded in your account.
• To reply to, quote and deliver the custom automation, setup and maintenance work you request.
• To protect the service against abuse, and to meet legal obligations.

Cookies

• A session cookie (HttpOnly, Secure) that keeps you signed in.
• A short-lived cookie that protects Google sign-in against forgery.
• A language cookie that remembers whether you prefer Arabic or English.

All three are necessary for the features you use; none is used for tracking.

Service providers

We use providers to run the service: server hosting, a private object store for flow packages, an email provider for sign-in and request messages, Google if you choose Google sign-in, and Google Fonts, which serves the website typefaces and receives your IP address when it does. They process data only to provide their service to us.

Setup and maintenance work

When you ask Jervis to deploy or maintain an automation on your infrastructure, any access you grant is used only for that work and on the terms agreed for it. You can revoke it at any time.

Retention

Account and download records are kept while your account is active. Requests are kept as long as needed to deliver and support the work. Expired sign-in links and sessions stop working. You can ask us to delete your account and requests.

Your choices

You can ask to see, correct or delete your personal data, or object to how we use it. Send the request through the contact form and we will reply within a reasonable time.

Changes

We will update this page when our practices change, and change the date above. Significant changes will be announced on the website.