Privacy Policy

1. Introduction

Mason Alexandra Ltd, trading as Jenny AI ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered sales agent platform ("The Wizard Intelligence Engine™").

We are registered in England and Wales. For data protection purposes, we are the data controller. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information (name, email address, business name)
• Contact information for your leads and customers
• Conversation messages and chat history
• Payment and billing information
• Business configuration and settings
• AI agent customization preferences

2.2 Automatically Collected Information

• Device and browser information
• IP addresses and approximate location
• Usage patterns and analytics
• Session tracking and behavior data
• Terms of Service agreement records (timestamp, IP address, user agent)

2.3 Third-Party Information

• Lead data from Facebook Lead Ads integrations
• WhatsApp message metadata
• Payment verification from Stripe

3. Legal Basis for Processing (UK GDPR)

We process your personal data based on:

• Contract Performance: To provide and maintain our services
• Consent: For optional AI training and collective learning features
• Legitimate Interests: To improve our services, ensure security, and prevent fraud
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

• To provide and maintain our AI sales agent services
• To process WhatsApp and web chat conversations
• To analyze and improve conversation quality and AI responses
• To generate reports and business insights
• To process payments and manage billing
• To send service-related communications and updates
• To comply with legal obligations
• To record consent and agreement to our Terms of Service
• To detect and prevent fraud and abuse

5. AI Training and Machine Learning

Personal AI Training: If you consent, we use your conversation data to improve YOUR AI agent's performance. This data remains private to your account.

Collective Learning: If you opt in, we may use anonymized, aggregated patterns to improve the service for all users. No personally identifiable information is shared.

6. Data Sharing

We may share your information with:

• Meta/WhatsApp: For message delivery via WhatsApp Business API
• Anthropic: For AI conversation processing (Claude)
• Stripe: For secure payment processing
• Supabase: For database hosting and storage
• Service Providers: Infrastructure and hosting partners

We do not sell your personal data to third parties.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

8. Data Retention

• Account Data: Retained while your account is active
• Conversation Data: According to your configured retention policy
• Agreement Records: Retained for legal compliance (minimum 7 years)
• Billing Records: As required by tax and accounting laws

You may request deletion of your personal data at any time, subject to legal retention requirements.

9. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for AI training at any time

To exercise these rights, contact us at privacy@masonalexandra.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication measures
• Regular security assessments and monitoring
• Secure API integrations with third parties

11. Cookies and Tracking

We use essential cookies for authentication and session management. Analytics cookies help us understand usage patterns. You can manage cookie preferences in your browser settings.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Effective Date" at the top indicates when the policy was last revised.

14. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

Mason Alexandra Ltd
Email: privacy@masonalexandra.com
Data Protection Inquiries: legal@masonalexandra.com

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.