Security and privacy

• Isolated workspaces: each workspace's data is separated from every other, enforced in the database with row-level security.
• Encrypted connections: everything travels over HTTPS.
• Encrypted secrets: integration tokens and keys (Slack, Teams, webhooks, calendar and email links) are stored encrypted with AES-256-GCM. API tokens are stored only as one-way hashes.
• Private files: attachments are stored privately and served through short-lived links.
• Private projects: limit sensitive projects to the people you choose. Search, AI assistants, calendars, Slack and the API all respect it.
• Payments by Stripe: card details go straight to Stripe and never touch our servers.
• You stay in control of AI access: approve each app, see when it was last used, and disconnect it instantly. See Manage AI access.

Your data

• We don't sell your data or use your content for advertising.
• We use only essential cookies (sign-in, your last workspace and display preferences).
• When someone leaves a workspace, their tokens, connected apps and calendar feeds for it stop working.

Read the full Privacy policy and Terms of service. Questions or data requests: privacy@jinkoup.com.