Privacy Policy

1. Information We Collect

When you sign up for Jiffi AI, we collect your name and email address. We also collect anonymous usage data including page views, reading progress, and CTA interactions to improve the platform experience.

We use a session identifier (a random, non-identifying UUID stored in a cookie) to aggregate anonymous analytics. This identifier cannot be used to identify you personally.

2. How We Use Your Information

• To authenticate your account via passwordless magic links
• To send transactional emails (login links, account verification)
• To send product updates and educational content via email (you can unsubscribe at any time)
• To improve the platform based on aggregated, anonymous usage patterns

3. Email Marketing

If you sign up, your email address may be added to our email marketing list via Klaviyo. All marketing emails include an unsubscribe link. You can opt out at any time without affecting your access to the platform content.

4. Cookies

We use the following essential cookies, which are always on:

• payload-token - Authentication session cookie (httpOnly, secure, SameSite=lax). Expires after 7 days.
• jiffi-session - Anonymous analytics session cookie (httpOnly, secure, SameSite=lax). Expires after 1 year.
• jiffi-cookie-consent - Remembers whether you accepted or declined marketing cookies. Stored in your browser.

With your consent, we also load two third-party advertising pixels to measure how well our marketing works:

• Meta Pixel (Facebook) - sets _fbp and related cookies to attribute visits to our ads.
• LinkedIn Insight Tag - sets li_* cookies for the same purpose.

These load only after you choose “Accept” in the cookie banner. If you decline, they are never loaded and set no cookies. To change your choice, clear this site’s data in your browser.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on Vercel. All connections use TLS encryption. Passwords are not stored - we use passwordless authentication exclusively. API keys for third-party services are stored as environment variables and never exposed to the client.

6. Third-Party Services

• Vercel - Hosting and database infrastructure
• Resend - Transactional email delivery
• Klaviyo - Email marketing

Each service processes data under their own privacy policies. We only share the minimum data required for each service to function.

7. Your Rights

You have the right to:

• Request a copy of your personal data
• Request deletion of your account and associated data
• Unsubscribe from marketing emails at any time
• Withdraw consent for data processing

To exercise any of these rights, contact us at privacy@jiffi.co.

8. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or a notice on the platform. Your continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions, contact us at privacy@jiffi.co.