Privacy Policy

This privacy policy explains how JENA (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our services.

Information We Collect

Information You Provide

When you use JENA, you may provide us with the following information:

Account registration information: Your name, email address, phone number, and password
Business information: Your business name, type of services offered, business address, and operating hours
Payment information: Payment details processed securely through our payment providers (such as Stripe)
Client information: Contact details and booking information for your clients
Communication preferences: Your preferences for receiving marketing and service communications

Information We Collect Automatically

When you use our platform, we automatically collect:

Device information: Device type, operating system, browser type, and unique device identifiers
Usage data: Features used, pages visited, actions taken within the app, and time spent on different sections
Location data: With your permission, we may collect location data to enable location-based features
Log data: IP address, access times, and referring website addresses

How We Use Your Information

We use the information we collect to:

Provide and improve our services: Enable booking functionality, process payments, and enhance platform features
Process bookings and payments: Facilitate appointments between you and your clients, and process associated payments
Send important service updates: Notify you of booking confirmations, reminders, cancellations, and platform updates
Personalise your experience: Customise the app interface and provide relevant recommendations
Communicate with you: Respond to your enquiries and provide customer support
Marketing: With your consent, send promotional materials and information about new features
Comply with legal obligations: Meet our legal and regulatory requirements
Prevent fraud: Detect and prevent fraudulent activity and abuse of our platform

Data Security

We implement industry-standard security measures to protect your data, including:

Encryption: All data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption
Access controls: Strict access controls and authentication mechanisms to limit data access
Regular security audits: Ongoing security assessments and penetration testing
Secure infrastructure: Our platform is hosted on secure, SOC 2 compliant cloud infrastructure
Employee training: All staff receive regular training on data protection and security practices

We may share your information with:

Service providers: Third-party companies that help us operate our platform (payment processors, hosting providers, analytics services)
Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred
Legal requirements: When required by law, subpoena, or other legal process
Protection of rights: To protect our rights, privacy, safety, or property, and that of our users

We do not sell your personal information to third parties.

Google Calendar Integration

If you connect your Google Calendar to JENA, we access your calendar data to display your external availability within the platform and prevent double-bookings. This access is governed by Google’s API Services User Data Policy, including the Limited Use requirements.

What we access: Start time, end time, and title of your calendar events. We do not access attendees, event descriptions, links, or attachments.

What we store: We store the time slot and event title solely to display availability blocks on your JENA calendar. No other calendar data is stored.

AI Processing Exclusion: Your Google Calendar events are used solely to display your external availability within JENA. Google Calendar data is never sent to any artificial intelligence or machine learning system. When our AI scheduling assistant references your calendar, Google Calendar events appear only as anonymous time-slot placeholders (“Personal calendar event”) — the event titles, descriptions, and attendee information are never processed by or disclosed to any AI model.

What we do not do with your Google Calendar data:

We do not sell your Google Calendar data
We do not use your Google Calendar data for advertising
We do not use your Google Calendar data to train, fine-tune, or improve any AI or machine-learning model, whether our own or a third party’s
We do not share your Google Calendar data with third parties except as strictly necessary to operate the calendar sync

You can disconnect your Google Calendar at any time from your account settings. Upon disconnection, all imported calendar events will be removed from your JENA schedule.

Our use of Google Calendar data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention

We retain your personal information for as long as:

Your account remains active
It is needed to provide you with our services
Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymise your personal information within 30 days, unless we are required to retain it for legal purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request a copy of your data in a portable format
Restriction: Request restriction of processing of your data
Objection: Object to processing of your data for certain purposes
Withdraw consent: Withdraw your consent at any time where we rely on consent to process your data
Opt out: Opt out of marketing communications at any time

To exercise any of these rights, please contact us using the details below.

International Data Transfers

If you are located outside the United Kingdom, please note that we may transfer your data to and process it in the United Kingdom. By using our services, you consent to the transfer of your information to our facilities and to those third parties with whom we share it.

We ensure that any transfers of personal data are carried out in compliance with applicable data protection laws and that appropriate safeguards are in place.

Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Remember your preferences and settings
Understand how you use our platform
Provide personalised content and advertising
Analyse platform performance

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our platform.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by:

Posting the updated policy on our website
Sending you an email notification
Displaying a prominent notice within our app

Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: [email protected]
Website: www.jena.so
Address: JENA Labs Ltd, United Kingdom

For data protection enquiries, you may also contact our Data Protection Officer at [email protected].

Regulatory Information

JENA Labs Ltd is registered in England and Wales. If you have concerns about our data practices that we have not addressed satisfactorily, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

This privacy policy was last updated on the date shown above.