SECURITY & PRIVACY

Serious about your data.

I work with your data to help you, not to sell it. Here's what I commit to doing —and not doing— with your information.

My commitments to you

I never move your money

I only inform, recommend and alert. I never run transactions or touch your accounts.

We don't sell your data

Never. No ads, no data brokers, no exceptions.

We don't train models with your info

Your financial information is not used to train general AI models.

Your email is processed and discarded

If you connect your email, I extract the transaction and discard the message. We don't keep your emails.

Encrypted in transit and at rest

Your data travels and is stored encrypted (TLS + AES-256). Access tokens are encrypted separately.

You delete everything anytime

Ask me to delete your account and we truly erase your data — no fine print.

Who we work with

The providers that make Jackito work. Each one only sees what it needs for its job.

  • OpenAIProcesses your messages to understand you
  • NylasConnects your email when you authorize it
  • KapsoConnects the WhatsApp channel
  • ResendSends your account emails
  • Dodo PaymentsProcesses subscription payments
  • SupabaseStores your data and session
  • DigitalOcean · GCPHosts the application

If you connect your Gmail

When you authorize your Google account, Jackito requests read-only access (gmail.readonly). It is the narrowest permission Gmail offers for this: narrower scopes return only message headers, and the amount and merchant live in the body. Here is what we do with that access:

  • We only read messages matching financial filters: your bank, your wallets, your spending alerts. We never scan your inbox.
  • We extract the amount, merchant, date and currency. The message is discarded right after: we store no body, no subject, no sender.
  • We never send, reply to, label or delete email. Access is read-only and no write path exists in our code.
  • Your Google data is never used to train or improve artificial intelligence models, ours or anyone else's.

"The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements."

Start with confidence.

Try it free

No card · Nothing to install.