Privacy Policy

JCIL.AI is operated by Matthew Moser, 130 Bishop Allen Drive, 5th Floor, Cambridge, MA 02139. JCIL stands for "Jesus Christ is Lord" — a Scripture-aligned AI platform built for churches, universities, K-12 schools, ministries, counseling practices, nonprofits, and individuals who want AI that shares their values.

Your data is processed on US infrastructure via the subprocessors listed in our Trust Center. We do not transfer personal information outside the United States.

Account information. When you create an account we collect your email address, display name, hashed password (or a Google OAuth identifier), and account preferences. Google sign-in returns your name and email; no additional Google data.

Conversations. Messages you send and AI responses are stored so your conversation history is available when you return. Files you upload (images, PDFs, Excel, Word) are stored in encrypted storage and automatically deleted after 14 days.

Long-term memory. We extract a small number of preferences, recurring topics, and explicit feedback from your conversations to make future answers more personal. You can review and clear this memory at any time from your account settings.

Billing. For credit purchases we collect name, email, and payment method via Stripe. Card numbers never touch JCIL.AI servers — Stripe tokenizes everything.

Usage logs. Per-request metadata — which tool ran, token counts, cost in cents — so you can see your spend and we can catch abuse. Not shared with third parties beyond what's required to deliver the service.

Safety events. When the moderation pipeline detects a high-signal crisis pattern (suicide ideation, self-harm, abuse disclosure, child-at-risk), we record the event and — for JCIL Cloud API customers — dispatch a signed webhook to their configured endpoint so real humans can follow up.

Automatic information. IP address, user agent, request timing, and similar request metadata. Used for rate limiting, abuse detection, and debugging. Retained 30 days.

• Deliver and improve the service you signed up for.
• Authenticate you, keep your account secure, and prevent abuse.
• Process payments and apply credits to your balance.
• Personalize future conversations via the long-term memory system you can control.
• Detect and respond to crisis situations (for JCIL Cloud deployments) through the safety webhook.
• Meet legal obligations and respond to valid legal process.

We do not sell your data, rent it, share it for cross-context advertising, or use your conversations to train AI models. Our API providers do not train on JCIL.AI API traffic.

• Active conversations: kept as long as your account is active.
• File uploads: 14 days, then hard-deleted.
• Usage logs: 90 days at row-level, aggregated thereafter.
• Safety events: 180 days, then hard-deleted.
• Moderation logs: 30 days.
• Inactive accounts: deleted 12 months after last sign-in.
• Billing transactions: 24 months (tax / audit requirement).
• Deleted accounts: 30-day grace window (recoverable), then permanent.
• Long-term memory: default 24 months; user-configurable from 30 days to "keep until I clear it."

Regardless of where you live, every US JCIL.AI user has the following rights. California residents are additionally protected by CCPA/CPRA.

• Right to know. Download a full export of your data — profile, conversations, memory, usage, billing — in JSON from account settings.
• Right to delete. Delete your account and associated data. Two options: scheduled (30-day window, reversible) or immediate (permanent hard-delete, irreversible).
• Right to correct. Update or correct any profile field from settings.
• Right to opt out of "sale" or "sharing." We don't sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of. A formal opt-out toggle is still available on the privacy settings page for CCPA compliance.
• Right to non-discrimination. Exercising your rights doesn't change the service you receive.

To exercise any right, use the account settings page or submit the compliance contact form with topic privacy / data rights. We respond within 45 days, typically within one business day.

JCIL.AI consumer accounts are intended for users age 13 and older. We do not knowingly collect personal information from children under 13 on the consumer product. If you believe a child has created an account, contact us through the compliance formand we'll delete it.

For K-12 schools using JCIL Cloud to serve under-13 students under the COPPA school-authorization framework, see our compliance page.

Concrete measures — TLS 1.3, AES-256 at rest, row-level security on every sensitive table, HMAC-signed webhooks, layered moderation, and vulnerability disclosure — are documented in full on our Security page.

We use a handful of first-party cookies for authentication and basic preferences. No cross-site tracking, no advertising pixels. Full details on our cookies page.

JCIL.AI is powered by OpenAI for chat, reasoning, moderation, documents, code, search, and image generation, with supporting providers for video, music, infrastructure, billing, and delivery listed in our subprocessor list. When you ask an AI if it's an AI, it will say yes — JCIL.AI never misrepresents itself as a human.

AI outputs are generated; they are not professional legal, medical, financial, or pastoral advice. Always verify material decisions with a qualified human.

We'll post the updated policy here and change the "Effective" date at the top. For material changes that reduce your rights, we'll notify active account holders by email at least 30 days before the change takes effect.

Privacy questions, data-rights requests, and legal process: use the compliance contact form.

Matthew Moser
JCIL.AI
130 Bishop Allen Drive, 5th Floor
Cambridge, MA 02139
United States