Jazmine← Back to home

Privacy Policy

Version: v1.0 (draft)Last Updated: May 13, 2026Effective Date: May 13, 2026

Draft v1 — under legal review. This policy reflects how we currently handle data in good faith and is binding on Jazmine. We are completing final review by qualified counsel. We may update this Policy at any time; material changes will be announced with reasonable notice and the “Last Updated” date above will be revised accordingly.

1. Introduction & Identity

This Privacy Policy (“Policy”) describes how JXM Labs, LLC (“Jazmine,” “we,” “us,” or “our”) collects, uses, discloses, and protects information obtained through our platform at realty.jazmine.app, including our embeddable website widget, staff dashboard, client portal, and related services (collectively, the “Services”).

2. Information We Collect

2.1 Client Information

When you interact with a business that uses our Services (a “Customer”), for example by submitting an inquiry via the embedded website widget, the Customer may provide or cause to be provided the following categories of information to Jazmine for processing:

  • Name and contact information (phone number, email address)
  • Communication history between you and the Customer through our platform

2.2 Personally Identifiable Information (PII)

When Customer staff or authorized users create accounts on our platform, we collect:

  • Full name, email address, and phone number
  • Professional role and Customer affiliation
  • Authentication credentials (managed via Amazon Cognito with multi-factor authentication)
  • Account activity and usage data

2.3 Automatically Collected Data

We automatically collect certain technical information when you use the Services, including:

  • IP address, browser type, operating system, and device identifiers
  • Pages visited, time spent on pages, and navigation paths
  • Referring URLs and search terms
  • Cookies and similar tracking technologies (see Section 2.4)

2.4 Cookies & Tracking Technologies

We use strictly necessary cookies for authentication and session management. Authentication tokens are stored in httpOnly cookies and are never placed in browser localStorage.

3. How We Use Information

We use the information we collect for the following purposes:

  • Lead Management: Processing and routing client inquiries to the appropriate Customer and agent
  • AI-Powered Processing: Generating lead scores and personalized response suggestions (see Section 5)
  • Communication: Facilitating communication between clients and Customers
  • Platform Operations: Maintaining, securing, and improving the Services, including fraud prevention, security monitoring, and technical support
  • Analytics: Generating de-identified, aggregate analytics to help Customers understand lead management performance

4. How We Share Information

We may share information in the following circumstances:

  • With Customers: Client information is shared with the Customer on whose behalf it was collected
  • Infrastructure Subprocessors: We use Amazon Web Services (AWS) as our infrastructure provider
  • AI Model Providers: Lead scoring and response generation are performed using Amazon Bedrock (Claude)
  • Legal Obligations: We may disclose information when required by law, regulation, legal process, or governmental request

We do not sell, rent, or trade personal information to third parties.

4.1 Google User Data & Limited Use

When a Customer connects its Google Calendar, Jazmine accesses that Customer’s Google Calendar data — calendar free/busy availability and calendar events — solely to (a) determine open appointment times and (b) create and update the appointments the Customer or its clients request. Jazmine’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to others except as necessary to provide the scheduling feature, to comply with applicable law, or as part of a merger or acquisition. Google Calendar data is encrypted at rest and is accessible only to the Customer’s authorized staff.

5. AI & Automated Processing

Jazmine uses artificial intelligence and automated processing to enhance lead management for Customers. Specifically:

  • Lead Grading: Incoming inquiries are automatically scored based on factors such as urgency indicators and engagement signals. Scores are used to prioritize follow-up by Customer staff
  • Response Generation: AI generates suggested response messages for Customer review. Automated responses sent within the 60-second response window are based on Customer-approved templates and configurations

6. Data Security

We implement comprehensive administrative, physical, and technical safeguards to protect the information we process:

  • Encryption in Transit: All data in transit is protected by TLS 1.2 or higher. HTTPS is enforced on all endpoints
  • Access Controls: Multi-factor authentication (MFA) is enforced for all platform users via Amazon Cognito. Role-based access controls (RBAC) limit data access to authorized personnel. Multi-tenant isolation ensures Customers can only access their own data
  • Network Security: All data services operate within private VPC subnets with no direct internet access. AWS WAF provides OWASP Top 10 protection and rate limiting at the edge

7. Data Retention

We retain information in accordance with our contractual obligations to Customers:

  • Audit Logs: Retained for a minimum of six (6) years. Audit data is stored in DynamoDB with point-in-time recovery enabled and in CloudWatch Logs with KMS encryption
  • Account Data: Retained for the duration of the Customer’s subscription and for a reasonable period thereafter to facilitate data portability
  • Automatically Collected Data: Retained for up to twenty-four (24) months for operational and security purposes

8. Your Rights

8.1 CCPA/CPRA Rights (California Residents)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the sale or sharing of personal information. Note: Jazmine does not sell personal information
  • Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment

To exercise these rights, contact us at support@jazmine.app. We will verify your identity and respond within forty-five (45) days.

9. Communication Channels

Jazmine facilitates communication between clients and Customers through multiple channels:

  • Email: Transactional emails (account verification, password reset) are sent via Amazon SES

10. Children’s Privacy

The Services are not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete such information. If you believe a child under 13 has provided us with personal information, please contact us at support@jazmine.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this Policy
  • Notify registered users via email at least thirty (30) days before material changes take effect
  • Post a prominent notice on our platform

Your continued use of the Services after the effective date of any updated Policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us: