Privacy Policy

1. Introduction

Welcome to Jobx ("Jobx", "we", "us", or "our"), operated at jobx.me. We provide an AI-powered support agent platform that helps businesses automate customer interactions across multiple messaging channels, including TikTok Direct Messages, Meta Messenger, Instagram, WhatsApp, Telegram, LinkedIn, and email.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website jobx.me or use our platform. Please read it carefully. By using Jobx you agree to the practices described here.

2. Information We Collect

2.1 Information you provide

• Account registration details: full name, business name, email address, website, and phone number.
• Payment information processed securely through our payment provider (we do not store card details).
• Content you upload to the knowledge base (documents, URLs, text).
• Messages and conversations exchanged through your AI agents.
• Communications you send to our support team.

2.2 Information collected automatically

• Log data: IP address, browser type, pages visited, and timestamps.
• Usage data: features used, agent interactions, and token consumption.
• Device information: operating system and browser version.
• Cookies and similar tracking technologies (see Section 8).

2.3 Third-party integrations (general)

If you connect third-party services (such as Gmail, Meta, or Telegram), we may receive data from those services as permitted by your authorization and the third party's terms.

2.4 TikTok Business Messaging data

When you connect a TikTok Business Account to Jobx via the TikTok Business Messaging API, we collect and process the following Protected Data as defined by TikTok's Business Messaging terms:

Data about your TikTok Business Account (the Jobx user):

• TikTok Open ID (unique identifier assigned by TikTok to your business account)
• Display name / username of your TikTok Business Account
• OAuth access token and refresh token (used to send messages on your behalf)
• Token expiry timestamps

Data about TikTok end users who message your business:

• TikTok unique identifier (user ID of the person sending the DM)
• Display name (if returned by TikTok's API)
• Message content (text of each Direct Message sent to your business)
• Conversation ID assigned by TikTok
• Message timestamps

Why we collect this data:

Solely to operate the AI-automated Direct Message response service on your behalf. Message content is passed to an AI language model to generate a reply. Conversation history is retained to provide context for follow-up messages.

Data we do NOT collect from TikTok:

• TikTok profile photos or follower data
• Video content, likes, or analytics
• Any data beyond what is strictly required to process and reply to Direct Messages

2.5 LinkedIn Page messaging & community data

When you connect a LinkedIn Company Page to Jobx via LinkedIn's Community Management API, we collect and process the following data, limited to the scopes you authorize:

Data about your LinkedIn Company Page (the Jobx user):

• Organization (Company Page) URN — the unique identifier LinkedIn assigns to your page
• OAuth access token and refresh token (used to read and reply on your behalf)
• Token expiry timestamps

Data about LinkedIn members who interact with your page:

• LinkedIn member URN / unique identifier of the person who commented or messaged
• Display name (if returned by LinkedIn's API)
• Comment content on your page's posts
• Message / conversation content sent to your page
• Conversation and comment timestamps

Page-level engagement data:

Where you authorize the analytics scope, we read aggregate engagement metrics for your page's posts (such as impression, reaction, and comment counts) to surface performance insights inside Jobx. We do not collect analytics about individual members beyond the comments and messages they send you.

Why we collect this data:

Solely to operate the AI-automated comment-reply and message-reply service on your behalf, and to display the page analytics you ask us to show. Comment and message content is passed to an AI language model to generate a reply; conversation history is retained to provide context for follow-ups.

Data we do NOT collect from LinkedIn:

• Member profiles, connection lists, or contact details beyond the identifiers above
• Personal (non-page) messages or feed data unrelated to your Company Page
• Any data beyond what is strictly required to operate the service and scopes you granted

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Provide, operate, and improve the Jobx platform.
• Power your AI agents and process knowledge base content.
• Send automated replies to your customers' Direct Messages and comments on connected platforms, including TikTok and LinkedIn.
• Send transactional emails (account confirmation, password reset, billing).
• Respond to support requests and communicate platform updates.
• Monitor usage against your plan limits and prevent abuse.
• Comply with legal obligations.

We do not sell your personal data or your customers' personal data to third parties.

4. How We Share Your Information

We may share your information only in the following circumstances:

• AI model providers: message content and knowledge base queries are sent to AI model APIs (Anthropic and/or OpenAI) to generate automated responses. These providers process data under their own privacy policies and data processing agreements.
• Database hosting: all data is stored in Supabase (PostgreSQL), a cloud database service with encryption at rest and in transit.
• Payment processors: billing data is handled by our payment provider. We do not store card details.
• Legal requirements: we may disclose data if required by law, court order, or to protect the rights and safety of Jobx, our users, or the public.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice.

Messaging data from connected platforms — including TikTok Direct Messages and LinkedIn comments and messages (content, user/member IDs) — is shared only with the AI model provider for the purpose of generating a reply. It is not shared with any other third party.

5. Data Retention

We retain data only as long as necessary to deliver the service:

• Account data: retained while your Jobx account is active. Deleted within 30 days of account closure.
• Conversation history: retained while you maintain the connected messaging channel. Deleted within 30 days if you remove the channel or close your account.
• TikTok Business Messaging data specifically: when you disconnect your TikTok Business Account from Jobx, all associated conversation history, message content, and TikTok user identifiers are automatically and immediately deleted from our systems. OAuth tokens are revoked and removed. See our Data Retention & Deletion Policy for full details.
• Backups: encrypted backups are purged within 30 days of the primary data deletion.

You may also request deletion at any time by contacting privacy@jobx.me.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption at rest: all data in our database is encrypted using AES-256.
• Encryption in transit: all data transmitted between your browser, our servers, and third-party APIs uses TLS 1.2 or higher.
• Access control: data access is restricted by user account (row-level security). Platform employees access data only on a need-to-know basis.
• Authentication tokens: TikTok OAuth tokens are stored encrypted and are accessible only to the account that authorized them.
• Vulnerability management: we conduct regular vulnerability scans and address identified issues promptly.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using best practices.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our cloud infrastructure and AI providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws, including GDPR Standard Contractual Clauses where required.

For TikTok Business Messaging: TikTok end-user messages originating from the European Economic Area (EEA) are processed in accordance with GDPR requirements. We process these messages solely to deliver the automated response service you have configured.

8. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the platform.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request permanent deletion of your personal data.
• Portability: request your data in a machine-readable format.
• Objection / restriction: object to or restrict certain processing activities.
• Withdraw consent: disconnect a third-party integration (e.g. TikTok or LinkedIn) at any time from your dashboard, which will immediately stop data collection and trigger automatic deletion of associated data.

To exercise any of these rights, contact us at privacy@jobx.me. We will respond within 30 days. For TikTok-related data requests, see our Data Retention & Deletion Policy.

10. Children's Privacy

Jobx is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of Jobx after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: