Privacy policy

Effective Date: 05/25/2025

1. Introduction

This Privacy Policy explains how Subjam ("we," "us," or "our") collects, uses, stores, and protects personal data when you interact with our AI-powered email service.

We understand the importance of your privacy and are committed to protecting the limited personal data we collect in a transparent and responsible manner. By using the Subjam service, you agree to the terms outlined in this policy.

2. Data We Collect

We collect a limited amount of personal data directly from you when you interact with our service via email.

• Personal Data Collected:
  When you send an email to any @subjam.com address, we collect your email address and your full name as provided in the email correspondence.


• Method of Collection:
  This data is collected solely through the act of you emailing a @subjam.com address. This interaction triggers the creation of a user account associated with your email address.


• Data Not Collected:
  We do not use cookies or track user activity via website cookies as our primary interaction model is via email.

How We Use Your Data

We use the personal data collected (your email address and full name) for the following specific purposes:

• Account Creation and Management
  To create and manage your user account within the Subjam system, which is linked to your email address.


• Service Provision
  To process your email requests and provide the core Subjam AI response service you have requested through your email interaction.


• Communication
  To communicate with you regarding the Subjam service, including responding to your inquiries and providing service updates.

Your data is used solely for the operation and improvement of the Subjam service.

4. Data Sharing and Third Parties

We utilize third-party services to operate Subjam. We share your personal data with these third parties only as necessary for them to perform functions essential to providing our service.

The third-party services we use include:

• Supabase
  Used for database hosting and management. Your user account data (email address, name) is stored here.


• Resend
  Used for sending emails as part of the Subjam service delivery. Your email address is processed via this service to send responses to you.


• Cloudflare
  Used for web infrastructure and potentially as a protective layer for our systems. While Cloudflare may handle traffic, direct personal data processed by Subjam is primarily handled internally or via other services.


• Google Gemini
  Used as the underlying AI model to process the content of emails and generate responses.

These third parties have their own privacy policies governing how they handle data. We encourage you to review their policies to understand their practices. We strive to work with third parties who adhere to robust data protection standards.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

5. Data Security

We implement reasonable technical and organizational measures designed to protect the personal data we collect against unauthorized access, disclosure, alteration, and destruction. While no security system is impenetrable, we are committed to protecting your data.

6. Data Retention

We retain your personal data (email address and name) for as long as your user account is active and as necessary to provide you with the Subjam service. If you request the deletion of your account and data, we will delete your personal data in accordance with applicable laws and our data retention policies, unless retention is required for legal or regulatory purposes.

7. Your Data Rights

You have certain rights regarding your personal data, subject to applicable law. These rights may include:

• Right to Access
  You have the right to request access to the personal data we hold about you.


• Right to Rectification
  You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.


• Right to Erasure (Right to be Forgotten)
  You have the right to request the deletion of your personal data, subject to certain legal exceptions.


• Right to Object or Restrict Processing
  You have the right to object to or request restriction of the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request in accordance with applicable law.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any significant changes by posting the new policy on our website or through other appropriate communication channels. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your data rights, please contact us.