1.Who We Are
Growing Entrepreneur, LLC, a Florida limited liability company doing business as Jetpack ("Jetpack," "we," "us," or "our"), operates the Jetpack platform at app.getjetpack.ai, the marketing site at getjetpack.ai, our Model Context Protocol server, and related services (collectively, the "Service").
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices and rights you have. It applies to information we collect from you as a Jetpack user or visitor, and to information about your contacts and customers that you bring into the Service.
This Policy is incorporated into and supplements our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
2.Two Kinds of Personal Information
The Service handles two categories of personal information, and our role differs for each:
2.1 Information about you (our user).
We act as the controller of this information. We decide what we collect and how we use it. Examples: your name, email address, login credentials, payment metadata, and how you use the Service.
2.2 Information about your contacts and customers.
When you upload, sync, score, or otherwise process personal information about your leads, contacts, or customers through the Service, you are the controller of that information and we act as your processor. You decide what to collect, from whom, and why. We handle it only as needed to provide the Service to you and as instructed by you through your use of the Service. Your obligations for this data are set out in Section 7.4 of the Terms of Service.
The rest of this Policy focuses primarily on information we collect about you as a Jetpack user. Information about your contacts is governed by your own privacy notice to those contacts.
3.Information We Collect About You
3.1 Information you give us.
- Account information: your name, username, email address, and password (stored hashed by our authentication provider, never in plain text).
- Profile information: any additional details you add to your profile.
- Payment information: when you subscribe to a paid plan, Stripe collects and processes your payment card details. We receive only limited metadata from Stripe (customer ID, subscription status, last four digits of card, billing country). We do not store full card numbers, CVV, or bank account details.
- Integration credentials: when you connect GoHighLevel, Stripe, or another third-party service, we store the access tokens, API keys, private integration tokens (PIT), and account identifiers needed to make the integration work. These are stored encrypted at rest.
- Communications: when you email us, submit a support request, or fill out a form, we receive whatever you send.
- AI inputs: prompts, instructions, and context you submit to AI features.
3.2 Information we collect automatically.
- Usage data: pages viewed, features used, actions taken, session timestamps, and performance metrics.
- Device and log data: IP address, browser type, operating system, referring URL, and error logs.
- Cookies and similar technologies: see Section 8.
3.3 Information from third parties.
- Google OAuth: if you sign in with Google, we receive your name, email address, and Google account identifier from Google.
- Stripe: we receive subscription and payment status updates from Stripe as part of processing your subscription.
- GoHighLevel: when you connect a GHL location, we read data from that location as authorized by you (contacts, pipelines, custom fields, custom values, workflows, calendars, etc.) to provide the Service.
We do not buy lists of personal information or acquire it from data brokers.
4.How We Use Your Information
We use your personal information to:
- create and maintain your account, authenticate you, and provide the Service;
- process payments and manage your subscription;
- read from and write to the third-party services you connect, as authorized;
- send you transactional messages about your account, billing, security, and material changes to the Service or these terms;
- respond to your questions and provide support;
- generate AI Output in response to your prompts, using third-party AI providers as described in Section 5;
- monitor, secure, and improve the Service, including debugging, load management, fraud prevention, and abuse detection;
- calculate and pay referral commissions if you participate in the affiliate program;
- comply with legal obligations and enforce our Terms.
With your permission, we may also use your email address to send you occasional product updates, tips, and marketing about Jetpack. You can unsubscribe at any time using the link in those emails.
5.AI Features and Third-Party AI Providers
5.1 AI features we operate.
When you use features that generate content, suggestions, or guidance, your prompts and the relevant context are transmitted to third-party AI providers for processing, and the result is returned to you. Current AI providers include Anthropic (Claude models). We may add or change providers as the Service evolves.
5.2 What providers may retain.
AI providers process your prompts under their own terms and privacy policies. Business-tier AI providers we use are contractually restricted from training their models on your prompts and outputs; they may retain data briefly for abuse monitoring and to deliver the response. We do not authorize AI providers to use your data to train models. You should review the current provider's terms if this matters to you.
5.3 MCP access from your own AI applications.
If you enable the Model Context Protocol server to connect Jetpack to an AI application you control (for example, Claude Desktop), data transmitted to that application is governed by your agreement with that provider, not by this Policy or our contracts. See Section 8.2 of the Terms of Service for the full framework. We do not control what your chosen AI provider does with data you route to it through your own MCP connection.
Do not connect the MCP server to an AI application if you are not permitted to disclose your data (or your contacts' data) to that provider under applicable law or your own privacy commitments.
6.When and Why We Share Information
We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We share it only in the situations described below.
6.1 Service providers ("sub-processors").
We use a small set of vendors to run the Service. Each is bound by contract to protect your information and to use it only as needed to provide their service to us.
| Provider | Purpose |
|---|---|
| Supabase | User authentication, database hosting, file storage |
| Cloudflare | Application hosting, CDN, edge compute (Workers), DDoS protection |
| Stripe | Subscription billing and affiliate payouts (Stripe Connect) |
| Anthropic | AI model provider for AI features |
| Email provider | Transactional email delivery |
| Optional Google sign-in |
We may add, change, or remove sub-processors over time. Material additions will be reflected here.
6.2 Integrations you choose to connect.
When you connect a third-party service (such as GoHighLevel or your own Stripe account), we exchange data with that service to provide the Service to you. Your relationship with those providers is separate, governed by their own terms and privacy policies. Disconnecting through Settings stops the flow of new data but does not retrieve data already exchanged.
6.3 Business transfers.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal information may be transferred to the successor entity. We will notify you of any such transfer that materially affects your rights.
6.4 Legal and safety.
We may disclose personal information if we believe in good faith that it is necessary to comply with a law, regulation, subpoena, or lawful government request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Jetpack, our users, or the public. Where we can do so lawfully, we will notify affected users first.
6.5 With your consent.
We may share information in other ways with your consent or at your direction.
6.6 Aggregated and de-identified information.
We may generate and use aggregated, de-identified statistics about how the Service is used. This does not identify you, your Team Members, or your contacts, and we may use it without restriction.
7.How Long We Keep Your Information
- Account information: retained for as long as your account is active.
- After account closure: retained for 30 days so you can request an export (see Section 10), after which we may permanently delete it. Backups may take up to an additional 90 days to purge.
- Billing records: retained for at least 7 years to meet tax and accounting obligations.
- Support communications: retained for up to 3 years after the last interaction.
- Log and security data: typically retained for 90 days, longer if needed to investigate an incident.
- AI prompts and outputs: retained on our systems only as long as needed to deliver the Service to you and troubleshoot issues. Provider-side retention is governed by the provider.
- Data we cleared from your GoHighLevel location on downgrade: we save a copy on your Jetpack account before clearing, and restore it if you resubscribe. See Section 6.8 of the Terms of Service for details.
Where a longer retention period is required by law or reasonably necessary to resolve disputes, enforce agreements, or protect our legal rights, we may retain personal information for that longer period.
8.Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, and secure your session. Categories used:
- Strictly necessary: authentication, session management, security. These cannot be disabled without breaking the Service.
- Functional: remembering preferences and UI state.
- Analytics: measuring usage of the Service so we can improve it.
You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in.
We do not use third-party advertising cookies on the Service.
9.Security
We take reasonable technical and organizational measures designed to protect personal information, including:
- HTTPS/TLS in transit for all connections to the Service;
- encryption at rest for stored credentials, integration tokens, and sensitive fields;
- password hashing via our authentication provider (never plain text);
- least-privilege access controls for the small team that operates the Service;
- routine backups and monitoring;
- reliance on established infrastructure providers (Supabase, Cloudflare, Stripe) whose security programs exceed what we could build alone.
No system is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law and take reasonable steps to mitigate the impact. You are responsible for keeping your own credentials safe (see Section 3.4 of the Terms of Service) and for maintaining independent backups of any data important to you.
10.Your Rights and Choices
10.1 Access and export.
You can view and export data associated with your account at any time from Settings while your account is active.
10.2 Correction.
You can update most account information directly in Settings. Contact us for corrections you cannot make yourself.
10.3 Deletion.
You can delete your account at any time from Settings. Deletion follows the schedule in Section 7.
10.4 Email preferences.
You can unsubscribe from marketing emails using the link in any such email. You cannot opt out of transactional emails (billing, security, material changes) while your account is active.
10.5 Do Not Track.
We do not currently respond to browser Do Not Track signals, as no consistent standard has emerged.
10.6 Contacts and customers.
If you receive a request from one of your own contacts to access, correct, delete, or opt out of processing of their information, you are responsible for handling it as the controller. Contact us if you need help executing a deletion of a specific contact from within your Jetpack account.
11.California Residents (CCPA/CPRA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the CPRA:
- Right to know what categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we share it with.
- Right to correct inaccurate personal information.
- Right to delete personal information we have collected from you, subject to legal exceptions.
- Right to opt out of "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Right to limit the use of sensitive personal information. We use sensitive personal information (such as account credentials) only as needed to provide the Service and for the purposes permitted under §7027 of the CCPA regulations.
- Right to non-discrimination for exercising your rights.
- Right to designate an authorized agent to submit requests on your behalf.
To exercise these rights, email [email protected] from the address associated with your account, or use the deletion and export tools in Settings. We will verify your identity before responding to a rights request and respond within the timeframes required by law. We will not discriminate against you for exercising these rights.
12.Other US State Privacy Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of certain processing. To exercise these rights, contact us at [email protected]. We will respond within the timeframes required by your state's law. Where applicable law requires an appeals process, we will provide one on request.
We do not use personal information for targeted advertising, do not sell personal information, and do not engage in profiling that produces legal or similarly significant effects.
13.Users Outside the United States
Jetpack is operated from the United States. If you access the Service from outside the United States, you understand that your personal information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your jurisdiction. By using the Service, you consent to that transfer.
The Service is intended for use by businesses and individuals in the United States. We do not currently target the Service at residents of the European Economic Area, the United Kingdom, or Switzerland. If you are located in one of those regions and choose to use the Service, note that we do not currently offer the specific mechanisms (Standard Contractual Clauses, EU representative, Data Protection Officer designation) that some of those laws contemplate. Contact us at [email protected] if you have questions before signing up.
14.Children
The Service is not directed to children under 18, and you must be at least 18 to use it (see Section 2 of the Terms of Service). We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete it. If you believe a child has provided us with personal information, contact us at [email protected].
15.Changes to This Policy
We may update this Policy from time to time. If a change is material, we will provide notice by email or through the Service at least 14 days before it takes effect and will update the Last Updated date at the top. Continued use of the Service after the effective date constitutes acceptance of the updated Policy. If you do not agree, stop using the Service and cancel your subscription.
16.Contact Us
Questions, requests, or complaints about this Policy or our handling of personal information:
Growing Entrepreneur, LLC
Kissimmee, FL 34758
Email: [email protected]
If you have raised a concern with us and are not satisfied with our response, you may have the right to lodge a complaint with your local data protection or consumer protection authority.