Privacy Policy

Super Jeffrey Inc. ("Company," "we," "our," "us") respects your privacy and is committed to protecting it through this Privacy Policy.

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our website, services, the Peasy Platform, and our Ask Peasy mobile app (collectively, the "Services"). By accessing or using our Services, you agree to this Privacy Policy.

Information We Collect

We collect the following types of information:

a. Information You Provide

When you use our Services, you may provide us with information, including:

• Name, business name, and contact details (email address, phone number, etc.)

• Account credentials (username, password)

• Payment information (if applicable)

• Any data you submit through forms or uploads to the platform

• Messages, questions, photos, and files you send to Beacon, our AI assistant (see "AI Features and Beacon")

• If you sign in with Apple or Google, the name and email address that service shares with us (Apple may share a private relay email address instead of your real one)

• Waitlist signup information

b. Information Collected Automatically

When you access our website or Services, we automatically collect certain information, including:

• IP address

• Device information (browser type, operating system, device model, app version)

• Usage data (pages visited, actions taken within the platform, etc.)

• Cookies and similar tracking technologies (see Section 6)

• Crash and error reports from our website and mobile app (see "Ask Peasy Mobile App")

c. Information from Third Parties

We may receive information from third-party services you connect to our platform, such as QuickBooks or other integrated services.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our Services

• Provide AI features, such as answering your questions about your business data with Beacon and reading documents you upload

• Create and manage your account

• Process transactions and send related communications

• Respond to inquiries and provide customer support

• Send important notices, updates, and administrative messages

• Analyze website traffic and user behavior to improve our services

• Provide personalized content and advertisements

• Remember your preferences and settings

• Measure the effectiveness of our marketing campaigns

• Detect, prevent, and address security issues and fraud

• Diagnose and fix crashes and errors

• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers: Third-party companies that perform services on our behalf, such as hosting, payment processing, diagnostics, and AI processing. We require service providers that receive personal information to provide the same or equal protection of that information as described in this Privacy Policy and required by Apple’s App Review Guidelines, through contractual data-protection and security commitments. Cloudinary hosts images and attachments you upload or send and may use aggregated, non-identifiable information to improve its services. Our providers include:

• Google LLC (Analytics, advertising, tag management, and AI processing through the Gemini API)

• Meta Platforms Inc. (Social media advertising)

• LinkedIn Corporation (Professional networking and advertising)

• Instantly.ai (Email marketing and automation)

• Anthropic PBC (AI processing for Beacon and other AI features)

• OpenAI, L.L.C. (AI processing for Beacon)

• Functional Software, Inc. d/b/a Sentry (Error and crash diagnostics)

• 650 Industries, Inc. d/b/a Expo (Delivering updates to our mobile app)

Business Partners: When you choose to integrate with third-party platforms (e.g., QuickBooks), we may share relevant data to enable the integration.

Legal Compliance: When required to comply with legal obligations, enforce our agreements, or protect the rights, property, or safety of Super Jeffrey Inc., our users, or others.

In Connection with a Business Transfer: If we are involved in a merger, acquisition, financing, or sale of assets, your information may be shared or transferred.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Session Cookies: Deleted when you close your browser

• Persistent Cookies: Retained according to their expiration dates (typically 30 days to 2 years)

• Analytics Data: Retained for up to 26 months (Google Analytics default)

• Marketing Data: Retained according to each platform's policy and your consent

• Account Data: Retained for the duration of your account plus applicable legal retention periods

• Beacon Conversations: Conversations and sent attachments, including hosted copies, are retained with your business records so you and your team can refer back to them. Account deletion or withdrawal of AI permission does not automatically delete these business records; contact us for personal-data requests. Delivery-cache copies, backups, and operational logs may remain subject to the hosting provider’s retention practices.

• AI Provider Copies: Anthropic normally deletes API inputs and outputs within 30 days. Content flagged for policy violations may be kept for up to two years and safety classification records for up to seven years; agreed product settings or legal requirements can also extend retention. Google keeps Gemini API prompts, context, and outputs for 55 days for abuse monitoring and required legal or regulatory disclosures. OpenAI may keep API prompts and responses in abuse-monitoring logs for up to 30 days by default, and longer when required by law or reasonably necessary to protect its services or others from harm.

• Crash and Error Reports: Retained for up to 90 days

When the applicable retention period ends, we delete or anonymize the information, subject to legal retention requirements and the cache, backup, and operational-log practices described above.

Your Choices and Rights

You may have certain rights regarding your personal information, depending on your location. These may include:

• Accessing or updating your personal information

• Requesting deletion of your data

• Objecting to certain processing activities

• Withdrawing consent (where applicable)

• Opting out of the "sale" or "sharing" of personal information (California residents)

For European Union Users (GDPR)

Under the General Data Protection Regulation (GDPR):

• You have the right to explicit consent before we place non-essential cookies

• You can withdraw consent at any time

• You have rights to access, rectify, delete, or port your data

• You can object to processing or request restriction of processing

For California Users (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• You have the right to know what personal information we collect

• You have the right to delete your personal information

• You have the right to opt-out of the "sale" or "sharing" of personal information

• We do not sell your personal information to third parties

California residents can exercise these rights by:

• Using browser settings to manage cookies

• Contacting us at hello@peasyos.com

• Adjusting cookie settings in our consent banner

To exercise these rights, please contact us at hello@peasyos.com.

Deleting Your Account

You can delete your account from inside the Ask Peasy app: open Account, then Delete Account, and confirm your identity. You can also ask us to delete your account by emailing hello@peasyos.com.

When you delete your account, we immediately stop anyone from signing in to it, on the web or in the app, and end its active sessions. We also remove you from your workspace, disconnect apps you connected to Peasy (such as Claude or Zapier), turn off API keys you created and the phone number you used to message Beacon, and, if you used Sign in with Apple, revoke Peasy's access with Apple. We remove your name, email address, and phone number from your account. Records you created for your company, such as orders, invoices, inventory changes, documents, and Beacon conversations, belong to the company and stay with its workspace, including for as long as the law requires us to keep financial records; these records may still show your name where it was entered on them. To ask about any other personal information, email hello@peasyos.com.

Withdrawing AI Consent

In the Ask Peasy app you can review or withdraw your consent to AI data sharing at any time under Account → AI Data and Privacy. Withdrawing blocks new AI requests and photo uploads from the Ask Peasy app on every device. It does not cancel work already started, reverse completed provider processing, or delete conversations and attachments already saved. Signing out and signing back in does not restore withdrawn permission.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit our website. They help us provide you with a better experience by remembering your preferences, analyzing how you use our site, and enabling certain functionalities.

Why We Use Cookies

We use cookies and similar tracking technologies to:

• Ensure our website functions properly and securely

• Analyze website traffic and user behavior to improve our services

• Provide personalized content and advertisements

• Remember your preferences and settings

• Measure the effectiveness of our marketing campaigns

• Enable features like our waitlist signup functionality

Types of Cookies We Use

Essential Cookies

These cookies are necessary for the website to function properly and cannot be disabled. They enable core functionality such as security, network management, and accessibility.

Examples:

• Session management for secure browsing

• Load balancing and performance optimization

• Security and fraud prevention

Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.

We use:

• Google Analytics: Tracks website usage, page views, user sessions, and traffic sources

• Framer Analytics: Provides anonymized website performance metrics (cookieless)

Marketing/Advertising Cookies

These cookies are used to deliver personalized advertisements and measure the effectiveness of advertising campaigns.

We use:

• Google Ads: Enables conversion tracking and remarketing

• Google Tag Manager: Manages marketing and analytics tags

• Meta Pixel (Facebook/Instagram): For social media advertising, retargeting, and audience insights

• LinkedIn Insight Tag: For LinkedIn advertising, lead generation, and professional audience targeting

• Instantly.ai: For email marketing and lead tracking

Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your preferences.

Examples:

• Language preferences

• Waitlist signup status

• User interface customizations

Third-Party Cookies

Our website may contain third-party content and services that may set their own cookies, including:

• Google LLC: Analytics, advertising, and tag management services

• Meta Platforms Inc.: Social media integration and advertising

• LinkedIn Corporation: Professional networking and advertising

• Instantly.ai: Email marketing and automation services

These third parties have their own privacy policies and cookie practices. We recommend reviewing their policies:

• Google Privacy Policy

• Meta Privacy Policy

• LinkedIn Privacy Policy

Your Cookie Choices and Control

Browser Settings

You can control cookies through your browser settings:

• Chrome: Settings > Privacy and Security > Cookies and other site data

• Firefox: Settings > Privacy & Security > Cookies and Site Data

• Safari: Preferences > Privacy > Manage Website Data

• Edge: Settings > Cookies and site permissions

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Integrations

Google Integrations

Peasy allows users to connect their Google account to enable exporting data to Google Sheets. When a user connects Google, Peasy uses Google OAuth to request permission to create and write data to Google Sheets and to access only the specific files created by Peasy on the user’s behalf.

Peasy does not read, import, or access unrelated files in a user’s Google Drive.

OAuth access and refresh tokens are stored securely and used only to maintain the Google Sheets export functionality. Users may revoke access at any time through their Peasy account settings or directly via their Google Account permissions.

AI Features and Beacon

Peasy includes AI features. The main one is Beacon, an assistant that answers questions about your business and can prepare actions, such as creating a to-do, that happen only after you confirm them. We also use AI to read documents you upload or forward to Peasy (such as bills and sales orders), to match and categorize items, to suggest mappings and settings, and to draft replies.

To provide these features, we send the relevant information to third-party AI providers: Anthropic, Google (through the Gemini API), and OpenAI. Depending on the feature, this can include:

• Your messages, relevant conversation history, and the photos, files, and other content you choose to send to Beacon

• Relevant records from your Peasy business, such as customers, vendors, orders, invoices, inventory, and documents you can access. These may contain names, email addresses, phone numbers, addresses, and financial information

• Account, workspace, and technical identifiers needed to protect access, operate the service, and troubleshoot failures

To answer some questions, Beacon may search the public web; when it does, the search terms are sent to our AI provider's search service. When you sign up, we may also use AI to review public information about your business, such as your company's website, to help set up your account.

Anthropic, Google (Gemini API), and OpenAI process this information on our behalf through commercial API services. They do not use this content to train their general-purpose AI models. Providers may retain or review content for safety, abuse monitoring, or legal requirements. Google may use abuse-monitoring data to improve models that enforce safety policies. Peasy may select any of the listed providers for a request, including switching providers if a request fails.

After your first sign-in or sign-up, Ask Peasy presents an AI data disclosure that names Anthropic, Google (Gemini API), and OpenAI and explains what information may be sent. AI requests and photo uploads stay blocked until you tap "Allow & continue." Signing in or accepting our Terms does not grant AI permission. You may choose "Not now" and still access Account, sign-out, and account deletion. Once you accept, you are not asked on every sign-in; a material disclosure change or withdrawal requires a new choice. You can review or withdraw permission in Account → AI Data and Privacy.

Ask Peasy Mobile App

Ask Peasy is our iOS app for using Beacon on your phone. In addition to the information described above:

• Signing in: You can sign in with your Peasy email and password, or with Sign in with Apple or Google. Your sign-in session, basic account details, business choice, and a limited AI-consent receipt are stored in your device’s iOS Keychain. Conversations are kept in memory while you use the app. Signing out clears the session and account/conversation state from the device. Selected photos may remain in the temporary cache described below.

• Crash and error reports: When the app crashes or hits an error, it sends a report to our error-monitoring provider, Sentry, which stores it in the United States. Reports include technical details such as the app version, device model, operating system, the error and where in the app it happened, and identifiers that let us match the error to our own server logs. They are designed not to include your messages, Beacon's answers, your business records, or your name or email address, although a crash inside the phone's own software can include an error message whose text we don't control. The app also reports whether each app session ended in a crash, so we can measure the app's stability.

• App updates: The app checks with our app-update provider, Expo, for updates. These checks send a random installation identifier created by the app, your device's platform, the app and update versions, and, if an update fails to load, details of that error.

• No tracking: The app does not use advertising identifiers, does not track you across other companies’ apps or websites, and does not include advertising or third-party analytics tools. It does not access your location, contacts, or microphone.

• Photos and camera: You can select individual photos using the iOS system photo picker or take a photo after granting camera permission. The app does not browse your whole photo library. When you send a photo after allowing AI data sharing, Peasy uploads it to Cloudinary and shares it with the selected AI provider to answer your request. The app temporarily caches selected photos while preparing attachments and clears that photo cache on a later app launch. Sent copies remain with your business’s conversation records.

Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete it.

International Users

Your information may be processed and stored in the United States and in other countries where our service providers operate. Those countries may have different data-protection laws from your country.

For European Union Users

We process your data lawfully under GDPR based on:

• Consent: For marketing cookies and communications

• Legitimate Interest: For analytics and service improvement

• Contract Performance: For providing our services

• Legal Obligation: For compliance requirements

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy

• Notify you by posting a prominent notice on our website or sending you an email

• Display a notification on our website

• Request new consent if required by law

Your continued use of the Services after the effective date constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Super Jeffrey Inc. 1601 5th Ave Suite 1900 Seattle, WA 98101 Email: hello@peasyos.com

For data protection inquiries from EU users, you may also contact your local data protection authority.