Privacy Policy

1. Who is responsible

The data controller is byvalle (enkeltpersonforetak), organisation number 837 640 482, Sunnfjord, Norway. Contact: support@projectjackal.com.

2. What we process

• Your interview text. The answers you type during a sitting. This is the most sensitive thing we hold.
• Your reading. The structured result the engine produces from your answers.
• Minimal technical data. Enough to run the service securely (for example a hashed identifier and basic request logs). We do not build advertising profiles.

JACKAL is accountless. There is no sign-up, no login, and no password. You do not give us a name or an account to take a sitting.

3. Why, and our legal basis

JACKAL infers patterns in how you think, decide, and work from your own words. Because such inferences can touch on information that data protection law treats as sensitive, we process this data only on your explicit consent (GDPR Article 9(2)(a) and Article 6(1)(a)), which you give on a separate screen before the sitting begins. You can withdraw that consent at any time, as easily as you gave it, and an in-progress sitting stops.

4. This is AI, and what the reading is

Your reading is generated with the help of an AI system. It is an inferred hypothesis about your patterns. It is not a diagnosis, not medical or clinical advice, and not a score against other people. You are told this clearly before you begin (EU AI Act, Article 50 transparency).

5. How long we keep it

Your sitting is ephemeral. Your raw interview text is automatically deleted within 30 days, and your reading is not retained on our servers beyond delivering it to you and that same window. You download and keep your own reading. There are no accounts and no persistent storage of your reading. We keep payment and accounting records only for as long as Norwegian bookkeeping law requires.

6. Who processes data on our behalf

We use a small number of trusted processors to run the service:

• An AI provider (Anthropic) to generate the reading. This means sending your interview text to the provider, which may involve a transfer outside the EEA, carried out under standard contractual safeguards.
• A payment provider (Paddle), our merchant of record, which handles checkout and tax. We do not see or store your card details.
• An email provider for receipts and support messages.
• EEA-based hosting for our database.

We do not sell your data, and we do not share it with anyone for advertising.

7. Where your data lives

Our database is hosted within the EEA. The one exception is the AI inference step described in section 6, which may involve a transfer outside the EEA under standard contractual safeguards. (Draft note for review: the exact transfer instrument, such as the AI provider's data processing agreement and Standard Contractual Clauses, is pending sign-off and will be named here once confirmed.)

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or provide it in a portable form, and you can withdraw consent at any time. Because your sitting is ephemeral and accountless, your raw text deletes itself within 30 days and you already hold your own downloaded reading; to exercise any right sooner, contact support@projectjackal.com. You also have the right to complain to the Norwegian supervisory authority, Datatilsynet (datatilsynet.no).

9. Cookies

We keep cookies to the minimum needed to run the site and remember your choices. We do not use advertising cookies.

10. Changes

If this policy changes materially, we will update the date above and, where appropriate, tell you directly.