Privacy Policy
Last updated: February 2, 2026
1. Introduction
AssetJay ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our IT asset management platform ("the Service").
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address. If you subscribe to a paid plan, payment information is processed by Stripe and we do not store your credit card details.
2.2 Asset & Organization Data
You provide data about your organization, team members, and IT assets including names, purchase information, serial numbers, warranty dates, and uploaded documents such as receipts and photos. This is "Your Data" as defined in our Terms of Service.
2.3 Usage Data
We collect basic analytics data including page views and feature usage to improve the Service. We use privacy-friendly analytics that do not use cookies for tracking and do not collect personally identifiable information.
2.4 Emails
If you use our email-based receipt import feature, we process the contents of forwarded emails to extract asset information. These emails are processed automatically and not read by humans.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Authenticate your identity and manage your account
- Process payments and manage subscriptions
- Send transactional emails (account verification, password resets, billing receipts)
- Extract data from uploaded receipts using AI processing
- Generate activity logs and audit trails within your organization
- Respond to support requests
- Comply with legal obligations
We do not sell your personal information or Your Data to third parties. We do not use Your Data to train AI models.
4. Third-Party Services
We use the following third-party services to operate the platform. Each processes data as necessary to provide their respective functions:
- Supabase — Database hosting, authentication, and file storage
- Stripe — Payment processing and subscription management
- Resend — Transactional email delivery
- Anthropic (Claude) — AI-powered receipt data extraction (document contents are sent for processing but not retained by Anthropic for training)
- Vercel — Application hosting and serverless infrastructure
Each provider operates under its own privacy policy and data processing agreements.
5. Data Storage & Security
Your Data is stored in secure, encrypted databases provided by Supabase. We implement industry-standard security measures including:
- HTTPS encryption for all data in transit
- Row-Level Security (RLS) ensuring organizations can only access their own data
- Strict Content Security Policy and security headers
- Authentication via secure magic links (no passwords stored)
While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure.
6. Data Retention
We retain Your Data for as long as your account is active. If you delete your account, we will delete Your Data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your personal data
- Portability — Request your data in a machine-readable format
- Objection — Object to processing of your data in certain circumstances
To exercise any of these rights, contact us at support@assetjay.com.
8. Cookies
The Service uses essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. Our analytics solution is cookie-free and does not track individual users.
9. Children's Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.
10. International Data Transfers
Your data may be processed and stored in countries outside your own, including the United States and the European Economic Area. We ensure that appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us at support@assetjay.com.