Privacy Policy

Last updated: September 27, 2026

1. Who we are

Jephelen is run by Woshi Studio in Mississauga, Ontario, Canada. For privacy questions or requests, use the feedback button inside the app, or the form on Remove my business data.

2. Your data as a user

• Account: your name, email and login details.
• Billing: handled by Stripe. We keep your plan and a Stripe customer id, never your card number.
• Your business data: customers, leads, tasks, money, invoices, files and notes you choose to store.
• Usage: what features you use and how much (for limits and fixing problems).
• Lead Finder: your intake answers (your business, offer, target customer, area) and your search history.

We keep it while your account is open. When you delete your account, we delete it within 30 days, except billing records the law says we must keep.

3. Business contact data we find (the Lead Finder)

• Sources: the business's own website, OpenStreetMap and open government data. Every contact keeps a link to where we found it.
• What we never collect: anything from LinkedIn, home addresses, guessed email addresses, and anything behind a login. Emails only when the business publishes them on its own website. We don't ask mail servers whether a mailbox exists.
• People: a search for a person only works at the company they work for, and only finds them where that company lists them as a business contact on its own website. We never search personal social media or people-finder sites, and we don't keep people's names in our shared records.
• Legal basis: business contact information used to reach people about their work. For Quebec, the EU and the UK we keep company-level contacts only (like info@).
• How long: 12 months after we last checked it, unless we check it again.
• Removal: any business or person can ask us to remove their data on Remove my business data. We delete it and add it to a do-not-collect list so it doesn't come back.

4. How searches make the service better

When we find a company for one user, we keep the company-level result so the next person who asks gets it faster. We never add the personal data you upload or type about your own customers to these shared records.

5. Who else handles data

Supabase (database and file storage), Vercel (hosting), Stripe (payments), our email provider (sending emails you ask us to send) and the AI provider behind the writing help (the relevant piece of text, only to produce your result, not to train public models). Data may be stored and processed outside Canada, including in the United States. We don't sell your data or share it with advertisers.

6. Your rights and complaints

You can ask to see, correct or delete your personal information, and to withdraw consent. We answer within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

7. Security

Your data is protected so only your account can read it. Keys and passwords are stored as hashes, connections are encrypted, and access to the shared records is limited to our servers.

8. Cookies

We use cookies only to keep you logged in and remember your theme. No tracking cookies, no ad networks.

9. Under 18

Jephelen is for businesses and is not meant for anyone under 18.

10. Changes

If this policy changes in a meaningful way, we'll announce it inside the app before it takes effect.