Legal

Privacy Policy

Last updated: July 2026 · Jiminy is operated by Chelnok Industries Ltd, registered in England and Wales.

1. Who we are

Jiminy is an AI agent accountability platform operated by Chelnok Industries Ltd ("Jiminy", "we", "us", "our"). We provide audit, attestation, and reporting infrastructure for organisations deploying AI agents in regulated and accountability-sensitive contexts.

If you have questions about this policy, contact us at hello@jiminy.uk.

2. Data we collect

We collect and process the following categories of personal data:

Account data: name, email address, organisation name, and account type collected at registration.
Audit trace data: AI agent decision traces submitted via the API. These contain the inputs, tool calls, reasoning steps, and outputs your agent produced. You control what you submit.
Usage data: API call logs, authentication timestamps, and audit counts associated with your API key.
Technical data: IP addresses, browser type, and device identifiers collected automatically when you access the dashboard or marketing website.

3. How we use your data

To authenticate you and provide access to the Jiminy platform.
To evaluate AI agent traces and produce accountability reports on your behalf.
To generate and store tamper-evident audit records for your organisation.
To monitor platform usage, diagnose issues, and improve the service.
To communicate with you about your account, updates, and support.

We do not use your submitted trace data to train our AI models. Your data is used solely to produce audits for your account.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

Contract: processing necessary to provide the Jiminy service you have signed up for.
Legitimate interests: platform security, abuse prevention, and service improvement.
Legal obligation: where we are required to retain data by law.

5. Data sharing

We do not sell your personal data. We share it only with:

Infrastructure providers: Google Cloud Platform (compute, storage, Firestore database) under appropriate data processing agreements.
Firebase (Google): for authentication services.
Professional advisors: lawyers and accountants under confidentiality obligations.
Regulators or law enforcement: where required by law.

6. Data retention

Account data is retained for the duration of your account and for 90 days following account closure. Audit trace data and reports are retained according to your plan's data retention terms. Usage logs are retained for 12 months. You may request deletion of your data at any time (see Your Rights below).

7. International transfers

Your data is stored and processed in Google Cloud's europe-west2 (London) region. We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.

8. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your personal data (subject to legal retention obligations).
Object to or restrict certain processing.
Data portability: receive your data in a machine-readable format.
Withdraw consent where processing is consent-based.

To exercise any of these rights, email hello@jiminy.uk. We will respond within 30 days.

9. Cookies

The Jiminy dashboard uses localStorage to store your API key and theme preference on your device. We do not use third-party tracking cookies or advertising cookies.

10. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encrypted storage, access controls, and tamper-evident audit records. API keys are stored securely and are never logged in plain text.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered account holders. The "Last updated" date at the top of this page reflects the most recent version.

12. Contact and complaints

For privacy enquiries: hello@jiminy.uk.

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.