Skip to content
Jenteraby AISAR

Privacy at Jentera

Privacy notice

This notice explains how Kitakod Ventures collects, uses, discloses, stores and protects personal data when you visit jentera.ai, use Jentera or its mobile apps, and connect other services.

Effective: 17 September 2026

1. Who we are

Kitakod Ventures (SSM 202203226187 (003430123-M)) operates Jentera and is the data controller for the personal data described in this notice. Contact us at hello@kitakodventures.com for any privacy question or request.

2. Personal data we collect

Depending on how you use Jentera, we may collect:

  • Account and contact data: email address, sign-in method, verification state, team membership, invitations and messages you send to support.
  • Business data: business name, address, contact details, descriptions, confirmed knowledge, connections, policies, approvals and team or workspace settings.
  • Content and work data: chats, instructions, documents, photographs, website addresses, extracted facts, task and activity history, AI outputs, files, reminders and routines.
  • Connected-service data: account identifiers, credentials or tokens, messages and actions needed for a connection you choose, such as Telegram, Google sign-in or Google Calendar. Section 14 explains Google data specifically.
  • Device and technical data: session cookies, IP-derived security records, browser or app information, push-subscription tokens, service logs, errors and security events.
  • Limited product analytics: an allowed event name, a random 30-day browser identifier, a coarse route and elapsed time. These events exclude prompts, answers, emails, business names, URLs, connector names and error messages.
  • Optional public-page analytics: if you allow Google Analytics, Google receives public pageviews, approved campaign labels, a referrer origin, cookie identifiers and browser/device information. Our tag does not run in sign-in, onboarding, Chat, billing or other private screens. We do not send chat content, uploads, credentials, emails, business names or URL tokens to Google Analytics.

3. Where the data comes from

We receive data from you; your business owner or team; services you choose to connect; public pages you ask Jentera to read; Google when you choose Google sign-in; and technical or security signals created when the service is used.

4. Why we use it

We process personal data to provide and secure Jentera: create and verify accounts, operate your business workspace, carry out requested work, generate and deliver results, maintain business knowledge, connect chosen services, send service messages and notifications, provide support, prevent abuse, measure whether core features work, improve reliability, and meet legal obligations.

We do not sell personal data or use it for third-party targeted advertising.

5. AI, documents and photographs

Jentera sends the relevant parts of your instructions, business context and uploaded content to AI and infrastructure providers to perform the work you request. AI output can be incomplete or wrong. Review important customer, financial, legal or operational work before relying on it.

The document-ingestion feature processes source documents or photographs to extract text without keeping the original upload. Chat attachments are different: original pictures, spreadsheets and other files may be stored in private file storage and copied to your business’s computer so the agent can work on them and answer follow-up questions. Extracted facts, suggestions, task records and deliberately saved outputs may also be retained. The retention practices in section 9 apply; uploading a file does not mean it is immediately deleted after processing.

Voice notes you send to your business’s Telegram bot are transcribed by Cloudflare Workers AI so Jentera can answer them. The audio is not kept; the transcript is kept in your history like a typed message.

Do not provide sensitive personal data, confidential third-party data or a person’s photograph unless it is necessary for the task and you are authorised to do so.

6. Who receives data

We disclose only what is needed to operate a feature, to authorised personnel, and to service providers acting for us. Current categories and examples include:

  • Cloudflare for website delivery, API security, logs, file storage and document conversion;
  • Neon for the application database, and Fly.io/Sprites for each business’s isolated computer;
  • AI/model providers, currently including DeepSeek, and other providers where a task requires them;
  • Resend for service email, Google for optional sign-in and Calendar access, and Telegram or another connection only when you choose to connect or use it;
  • Google for optional public-page analytics when you allow it;
  • websites and services you instruct Jentera to access or contact; and
  • professional advisers, regulators, courts or authorities when reasonably necessary or legally required.

A third-party service you connect also handles data under its own privacy terms.

7. Processing outside Malaysia

Jentera uses providers outside Malaysia. Core database and business-computer infrastructure is configured in Singapore. Other processing may occur where a provider operates; for example, current DeepSeek processing is in the People’s Republic of China and global infrastructure providers may process data in other countries. We assess these transfers and use contractual, security and access controls appropriate to the data and service.

8. Cookies, local storage and choices

Jentera uses essential cookies and browser storage for sign-in, security, language, setup state and app operation. We do not use advertising cookies. First-party activation analytics stops when your browser sends Global Privacy Control or Do Not Track. Push notifications, camera access, document upload, Google sign-in and service connections are optional and start only when you choose them.

Google Analytics is separate and optional. Its tag and analytics cookies load only after you allow analytics on a public page. The choice is stored in this browser for up to 180 days. Global Privacy Control and Do Not Track override an opt-in. Change or withdraw your choice below; withdrawal disables our Google tracking, clears accessible Google Analytics cookies and reloads the page. Cloudflare traffic measurement and first-party product measurement are separate from this Google preference.

You can disconnect a service, turn off notifications in Jentera or your device, and remove browser permissions in browser or phone settings.

9. How long we keep data

We keep data only while it is needed for the purposes above. Sign-in sessions normally expire after 30 days; temporary authentication and security records expire or are periodically removed; operational model-call records are normally swept after 90 days. Account, business, task and saved-output records are kept while the service is used and until they are deleted or no longer needed. Some records may remain longer where required for security, fraud prevention, legal duties, disputes or backup recovery. We delete or anonymise data when it is no longer needed.

10. Security and incidents

We use access controls, tenant isolation, encryption in transit, restricted credentials, audit records and service-level safeguards. No online service is completely secure. If a personal-data breach meets the legal notification threshold, we will notify Malaysia’s Personal Data Protection Commissioner and affected people within the periods required by law.

11. Your rights

Subject to applicable law, you may ask whether we hold your personal data; request access or correction; withdraw consent; object to or limit particular processing; ask us to delete data; or ask about a cross-border transfer. We may need to verify your identity and may retain information where the law permits or requires it.

Email hello@kitakodventures.com. Please state the account email and what you need. You may also complain to Malaysia’s Personal Data Protection Commissioner.

12. What is required

An email address, essential security data and the minimum business information are required to create and operate an account. If you do not provide them, we cannot provide the workspace. Other information and features are optional, but Jentera may be unable to complete a particular task or connection without the data it needs.

13. Children and changes

Jentera is a business service and is not intended for children under 18. Do not use it to submit children’s data unless you have a lawful business need and appropriate authority.

We may update this notice when the product, providers or law changes. We will publish the new date here and give additional notice when a change materially affects how we use personal data.

14. Google sign-in and Google Calendar

Access and purpose: Google sign-in provides your account identifier, email address and basic profile information to authenticate you. Calendar is a separate, optional connection: you authorise it on Google’s page in your normal browser. Its permission covers reading and managing events on calendars you own. Current Jentera tools read your primary calendar within requested ranges of up to 31 days and create events only after a separate owner approval. They do not edit or delete existing events, read Gmail or access Google Drive.

Data used and shared: Calendar reads return event identifiers, titles, status, start and end times, locations and event links. Event drafts may also contain the description you supply. Relevant event information may be passed to your business’s computer and the AI and infrastructure providers in section 6 to answer your question or perform the requested task; an approved event is sent to Google. Your Google password is not requested by Jentera. Calendar refresh tokens are encrypted in the application database and are not given to the agent, included in chat replies or sent to AI providers.

Storage and withdrawal: Connection identifiers and encrypted authorisation are kept while needed for the connection. Event information may remain in chats, proposals, outputs and work records under section 9. Disconnect Calendar in My Business → Connections or revoke Jentera’s access in your Google Account. Disconnection does not delete Google events already created or automatically erase historical Jentera records. Contact us to request deletion as described in section 11.

Google-derived data is subject to the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace user data and developer policy. These restrict advertising, resale, human access and general-purpose AI training. Google data is not permission for unrelated processing.

Google analytics preferences

Optional Google analytics runs only on public pages. Change your choice here at any time; account access is unaffected.

See also our terms of service.