No Model Training on Customer Data
Ajax does not train or fine-tune any general-purpose machine learning models (whether first-party or third-party) on your data. We also prohibit our third-party subprocessors (e.g., LLM providers) from retaining your data for their own model training or fine-tuning.

This Privacy Policy describes how we collect, use, process, and disclose your information, including personal information, in conjunction with your access to and use of our Service.

1. Information We Collect

1.1 Customer Data

We collect and process any data content or materials that you submit to your Service accounts ("Customer Data"). This may include information that you upload, input, or provide while using our Service.

1.2 Usage Data

We collect data and information related to your use of the Service ("Usage Data"), including but not limited to:

• Usage patterns

• Feature adoption

• Performance metrics

• Configuration settings

Usage Data does not include Customer Data or any information that would identify specific individuals or entities within your organization.

2. How We Use Your Information

2.1 Customer Data

We access and use Customer Data solely to:

• Provide and maintain the Service

• Improve our Service features (via aggregated or anonymized analytics only, never by training general-purpose AI models)

• Generate AI Outputs based on your provided data

2.2 Usage Data

We may use Usage Data to:

• Operate and improve the Service

• Provide technical support

• Conduct research and development

• Analyze service performance and usage patterns

• Other lawful business purposes

Note: Consistent with our “No Model Training on Customer Data” principle, any “improvement” to our algorithms or machine learning workflows is performed on usage metrics that do not include identifiable Customer Data.

3. Data Security

We implement and maintain appropriate technical and organizational security measures that:

• Protect the confidentiality of your information

• Prevent unauthorized access to and use of your data

• Protect against threats or hazards to the security and integrity of your information

• Comply with industry standards for information security

4. Data Retention and Deletion

4.1 During Service Use

We automatically delete raw Customer Data (e.g., logs, screenshots) after 30 days. We also delete processed data (e.g., structured records derived from your activity) after 60 days. These standard retention periods help us ensure system reliability while safeguarding your privacy. If your account remains active beyond these timeframes, only the minimal essential data required to provide ongoing Service functionality (such as time entries or aggregated usage logs) may be retained, in strict accordance with our data protection commitments.

4.2 Post-Termination

After termination or expiration of services:

• All raw and processed Customer Data will be deleted according to the 30-day and 60-day windows above.

• We may continue to use anonymized and aggregated Customer Data for improving our algorithms and Service features, in line with the “No Model Training on Customer Data” principle.

• All retained data will be subject to the confidentiality and data protection provisions outlined in this policy

5. AI-Generated Content

Our Service includes AI-generated outputs ("AI Outputs"). Please note that:

• AI Outputs are generated through machine learning and other automated processes

• We do not test, verify, endorse, or guarantee the accuracy, completeness, or currency of AI Outputs

• Users should independently review and verify all AI Outputs for their specific use cases

6. Third-Party Access

We will not disclose your Confidential Information to third parties without your prior approval, except:

• To employees, agents, and contractors with a legitimate need to know

• As required by law or legal process

• As otherwise permitted in our agreement with you

7. Google Workspace Data Usage

Ajax integrates with Google Workspace to facilitate automatic entry generation.

7.1 What Google Data is Collected

We may collect, or process on behalf of our customers, the following categories of personal data:

• Email metadata and content

7.2 How the Application Uses Google User Data

Ajax uses email data to generate billable time entries for emails sent to clients. Google user data is used for no other purpose than generating accurate time entries.

7.3 Google User Data Third-Party Transfer

We do not transfer or disclose your information to third parties for purposes other than the ones provided.

7.4 Google User Data Protection Mechanisms

• Ajax uses encryption in transit and at rest to protect sensitive user data.

• Data is never sold—Ajax does not sell user data under any circumstances.

7.5 Data Retention and Deletion

• Ajax retains Google user data only for as long as necessary for generating billable time entries.

• When the data retention period expires, we delete the data.

7.6 Data Use

• Ajax integrates with Google Workspace to enhance hours tracking.

• This data is used solely to improve hours tracking.

• It is not used to train generalized language models.

8. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of any material changes by:

• Posting the updated policy on our website

• Sending you a notification

• Other appropriate means

Data Subject Rights

9.1 Your Rights

As a data subject, you have certain rights regarding your personal information:

Right to Access: You can request information about what personal data we process about you and obtain a copy of that data.

Right to Rectification: You can request the correction of inaccurate personal data or the completion of incomplete personal data we hold about you.

Right to Erasure: You can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing: You can request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability: You can request to receive your personal data in a structured, commonly used format and transmit this data to another service provider.

Right to Object: You can object to the processing of your personal data in certain circumstances, particularly regarding direct marketing.

9.2 Exercising Your Rights

To exercise any of these rights:

Email us at support@joinajax.com Include "Data Subject Rights Request" in the subject line Specify which right(s) you wish to exercise Provide sufficient information to identify yourself

We will respond to your request within 30 days. This period may be extended by an additional 60 days when necessary, taking into account the complexity and number of requests.

9.3 Verification Process

To protect your information, we will verify your identity before processing your request. We may ask for additional information to confirm your identity.

9.4 Limitations

While we will make every effort to accommodate your rights request, we may need to retain certain information for:

Legal compliance Fraud prevention Dispute resolution Enforcement of our agreements

We may also deny your request if it adversely affects the rights and freedoms of others or if it is manifestly unfounded or excessive.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:
📧 support@joinajax.com

11. Governing Law

This Privacy Policy is governed by the laws of the state of Delaware, and any disputes will be adjudicated in the state or federal courts located in New York.