Privacy Policy

Jeanie Software LLC · Last updated: August 23, 2026

Jeanie ("Jeanie", "we", "us") is a CRM, clienteling, and customer-messaging platform for retail and service businesses. This policy explains what personal data we handle across the Jeanie iOS app, the Jeanie web app at app.usejeanie.com, our API, and the integrations a business connects to them.

The Shopify app has its own, narrower policy for the Shopify App Store listing: Jeanie for Shopify - Privacy Policy. Where the two overlap, that page describes the Shopify connector specifically and this page describes the platform.

1. Two kinds of people, two different roles

Jeanie is sold to businesses, and almost all data in it is about the business's own customers. That makes our role different depending on whose data it is.

• Business users - the store owners, managers, and team members who hold a Jeanie account. For their account data we are the data controller.
• The business's customers - the people a business stores, segments, and messages in Jeanie. For that data the business is the data controller and Jeanie is a data processor, acting on the business's instructions. If you are a customer of a business that uses Jeanie, direct requests about your data to that business first; we will support them in answering you.

2. What we collect

Account and team data (from business users): name, email address, phone number, job title, profile photo, the company and store you belong to, your role and permissions, and the phone number assigned to you for messaging.

Authentication data: one-time passcodes sent by SMS or email, session and refresh tokens, and a record of the devices signed in to your account (device model, operating system version, app version, and the time of sign-in).

Customer records (entered by the business, or imported from a connected system): name, email address, phone number, postal address, birthday, notes, tags, purchase history and order line items, appointments, tasks, opportunities, consent status, and communication preferences.

Message content: the SMS, MMS, and email messages sent and received through Jeanie, including attachments and images, together with delivery status, timestamps, and the campaign or automation that produced them.

Integration data: when a business connects Shopify or Square, we import customers, orders, line items, store locations, and the staff identifier attached to a sale. The Shopify sync is read-only and one-way; we never write to or modify the connected store.

Device and push data: push notification tokens for the iOS app, and the device identifiers needed to route a notification to the right device.

Technical and diagnostic data: IP address, browser or app user agent, request logs, error reports, and performance measurements. We use these to operate the service, investigate faults, and defend against abuse.

What we do not collect: we do not collect payment card numbers, we do not track the physical location of team members or customers, we do not use advertising trackers or third-party analytics cookies, and we do not buy personal data from data brokers.

3. How we use it

• To provide the service: store and display customer records, send and receive messages, run campaigns, schedule appointments and tasks, and produce sales and performance reports for the business.
• To authenticate you and keep accounts secure, including one-time passcodes and session management.
• To generate the AI-assisted features a business chooses to use - conversation summaries, suggested replies, audience descriptions turned into filters, and opportunity enrichment (see section 5).
• To operate, monitor, and debug the platform, including error tracking and rate limiting.
• To communicate with business users about their account, service changes, and support requests.
• To comply with law and to enforce our terms.

We do not sell personal data, we do not share it with third parties for their own marketing, and we do not use a business's customer data to advertise to those customers on our own behalf.

4. Messaging, consent, and opt-out

Messages sent through Jeanie are sent by the business, using its own phone number or email identity, to its own customers. The business is responsible for having a lawful basis and, where required, prior consent for those messages. Jeanie records consent status and honours opt-outs: a customer who replies STOP to an SMS, or uses the unsubscribe link in an email, is suppressed from further marketing messages for that business. Transactional messages a customer has asked for, such as an appointment confirmation, may still be sent.

5. AI processing

Some Jeanie features send content to AI providers to produce a result - for example summarising a conversation thread or turning a plain-English audience description into a filter. The content sent can include customer names, message text, and purchase history. We currently use Anthropic and Google (Gemini API) for this. Under our agreements with those providers, the content is processed to return a response to us and is not used to train their models. AI features are optional per business and can be left unused; where a feature is not configured, no content leaves Jeanie for that purpose.

6. Sub-processors

We rely on the following providers to run the service. Each processes personal data only to provide its service to us, and each is bound by contractual confidentiality and security obligations that require it to protect personal data to the same or an equal standard as this policy sets out. None of them is permitted to use the data for its own purposes.

7. International transfers

Jeanie Software LLC is based in the United States and the service is hosted there. If you use Jeanie from outside the United States, your data is transferred to and processed in the United States. Where required, transfers of European personal data rely on the European Commission's Standard Contractual Clauses.

8. Retention

• Customer records, messages, and imported store data are retained while the business's account is active, because the business's history is the product.
• A record deleted in the app is marked deleted and removed from view immediately. It stays in the database, invisible to the business, until the account is closed or until permanent erasure is requested under section 10.
• When a Shopify store is disconnected or the app is uninstalled, its imported orders are deleted and its customers unlinked, as described in the Shopify policy.
• One-time passcodes expire within minutes. Session and refresh tokens expire on their own schedule and are revoked on sign-out.
• Technical logs are purged on a schedule: performance logs after 30 days, application logs after 30 days, and error logs after 90 days.
• On account closure, we delete the business's data within 90 days of the request, except where law requires us to keep a record longer. Encrypted database backups are kept on a rolling schedule and age out after that window.

Accounts are closed at the business level, not the individual user level. Jeanie accounts are not self-created: there is no signup in the app, and each team member is provisioned by an administrator at their business. It follows that a single team member cannot delete the account from inside the app, because the account is the business's, not theirs. Removing one person's access is done by their own administrator; closing the whole account, and erasing the business's data with it, is requested by the business and handled by us within the window above.

9. Security

• All traffic is encrypted in transit with TLS. Data at rest is encrypted by our hosting provider.
• Third-party access tokens, such as Shopify and Square credentials, are encrypted at rest with AES-256-GCM.
• Every tenant's data is fenced at the database level by row-level security, so one business cannot read another's records.
• Access is role-based within a business, and inbound provider webhooks are signature verified before processing.
• Internal access to production data is limited to the personnel who need it to operate and support the service.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. Residents of California have the additional rights described by the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal data as those terms are defined by the CCPA.

How to exercise them:

• If you are a business user, write to privacy@usejeanie.com, or use the support form, from the email address on your account.
• If you are a customer of a business that uses Jeanie, contact that business. They control the data, and we act on their instruction. If you cannot reach them, write to us and we will do our best to route the request.

European users may also lodge a complaint with their local supervisory authority.

Deleting your account

A business user can have their Jeanie account deleted at any time. Write to privacy@usejeanie.com, or use the support form, from the email address on the account and say that you want the account deleted. We confirm the request by email, sign the account out of every device, and then erase it on the schedule set out in section 8: within 90 days of the request, except where law requires us to keep a record longer.

Deleting one team member's account removes that person's profile, sign-in credentials, sessions, and registered devices. It does not remove the business's customer records, messages, or sales history, because those belong to the business rather than to the individual and the rest of the team continues to work from them. To close the whole business account and erase its data, the request has to come from the account owner.

To stop one kind of processing rather than delete the account: uninstall the Jeanie app in your Shopify admin to end the Shopify sync and trigger deletion of the imported store data, turn off notifications for Jeanie in your device settings to stop push, and leave the AI features unconfigured so that no content is sent to the providers named in section 5. To disconnect a Square account, write to us and we will do it.

11. Children

Jeanie is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child's data has been entered into Jeanie, contact us and we will remove it.

12. Cookies

The web app sets strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use advertising, profiling, or third-party analytics cookies.

13. Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above, and we will notify business users in the app or by email where the change is significant.

14. Contact

Jeanie Software LLC
Privacy questions: privacy@usejeanie.com
Anything else: the support form