Skip to content

Privacy Policy

Last updated: October 13, 2026

I. Scope of this Privacy Policy

This Privacy Policy describes the types of personal information Castle Information Systems, Inc (“Castle,” “Jatter”, “we,” “us,” or “our”) collects through www.jatter.ai, the Jatter Desktop Browser (“the Desktop Browser”), the Jatter Mobile Browser (the “Mobile Browser”) and the Jatter website (www.jatter.ai) and any and all options and services available on or through, the Browsers, the Website or otherwise provided by us in connection with the Browsers or the Website (the App and such options and services, collectively, the “Services”). This Privacy Policy does not govern our collection of personal information through any website or other means, other than through or in connection with the Services.

The Services provide registered users the ability to ask questions, take notes, browse the web, and receive personalized answers. To personalize answers, the Services can learn from your chats and notes and, with your explicit permission, from your browsing activity and from web pages inside your logged-in accounts. What the Services learn about you is kept in a memory that you can view, export, and delete.

Your notes, browsing history, memory, retained chat history, and data learned from authenticated websites are protected with client-side encryption: they are encrypted with keys controlled on your device before they are stored, and Castle and Jatter do not have access to their unencrypted contents. Chat content exists in plaintext only in transit while it is being processed, and is never stored in plaintext in any database.

To generate a response, chat content must be temporarily unencrypted and sent to a hosted large language model (“LLM”) service without information intended to directly identify you. Content used to learn authenticated web pages and to build or apply your memory must likewise be processed temporarily in unencrypted form. Section IV describes what is shared with our LLM and web search providers and how long they may retain it.

Our Trust and Privacy page explains these practices, and their current limitations, in plain language.

By using the Services, you explicitly accept, without limitation or qualification, our practices surrounding the collection, use, and sharing of personal information provided by you in the manner described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access, browse, or use the Services.

This Privacy Policy is effective as of October 13, 2026.

II. Personal Information We Collect

A. Actively Collected Information

You do not have to give us any personal information to browse the Services. To register with the Services, you will need to provide us with your phone number. If you wish to register as a user of the Services, you will be required to create a username, password and PIN.

User profile and account information is not client-side encrypted, because we need access to it to operate your account, provide the Services, manage subscriptions, and support account recovery and deletion.

B. Content You Create and Information Jatter Learns

  • Chats. The questions you ask and the responses you receive. Chat content is in plaintext only in transit while it is processed; chat history retained for you is client-side encrypted and never stored in plaintext.
  • Notes. Notes you create in the Services are client-side encrypted.
  • Browsing history. The Browsers record your browsing history, which is client-side encrypted. The Services do not currently provide a setting to disable this collection.
  • Authenticated web pages. If you grant permission for a specific website, Jatter learns pages on that website that you open while signed in. Permission is granted website by website. Jatter learns pages only as you visit them and does not independently browse your accounts. Learned data is client-side encrypted after processing.
  • Memory. Jatter derives a memory about you from your chats and notes. If you opt in, memory may also be derived from your browsing activity and from authenticated web pages Jatter has learned. Memory is client-side encrypted.

C. Passively Collected Information

We may collect certain information about your use of the Services through the use of tracking technologies or by other passive means. This “passively collected” information includes, but is not limited to, the domain name of the website that allowed you to navigate to the Services, search engines used, the internet protocol (IP) address used, the length of time spent on the Services, the type of internet browser you have, the frequency of your visits to the Services, and other relevant statistics, including the following:

  • Log Information. When you access the Services, our servers automatically record information that the Browsers send. These server logs may include information such as your web request, IP address, browser type, browser language, the date and time of your request, and one or more cookies (small text files containing a string of characters) that may uniquely identify your browser.
  • Links. The Services may include links in a format that enables us to keep track of whether these links have been followed by IP addresses. We use this information to improve the quality of the Services and Site design.
  • Cookies. When you visit or access the Services, we send one or more cookies (small text files containing a string of characters) to your computer that uniquely identifies your browser. We use cookies to improve the quality of the Services by storing user preferences and tracking user trends. Most web browsers accept cookies automatically but can be configured not to do so or to notify the user when a cookie is being sent. If you wish to disable cookies, refer to your browser help menu to learn how to disable cookies. Please note that if you disable cookies, you may not be able to use some customized features on the Services.

D. Location Information

The Jatter Browser may access or transmit location information in the same manner as other Chromium-based browsers. Websites may request access to your device’s location in order to provide location-based features. When a website requests precise location information, Jatter will ask for your permission before providing it. You can allow or deny location access and manage previously granted permissions through the Browser or your device settings.

Like other internet services, Jatter and websites you visit may also receive your Internet Protocol (“IP”) address as part of normal network communications. An IP address can be used to estimate your general geographic area, such as your city or region, but generally does not provide your precise physical location.

Certain Jatter services may use approximate location information derived from your IP address when location is relevant to the service. For example, Jatter’s AI chat service may use an approximate location to provide locally relevant answers, and the Jatter Maps app may use approximate or device-provided location information to identify nearby places, provide map results, or otherwise respond to location-based requests.

Location information used by the Jatter Maps app is processed only as necessary to provide the requested Maps functionality and is not persisted by Jatter as Maps data.

When location information is included as context in an AI chat request, it is handled in the same manner as other chat content: it exists in plaintext only in transit for processing and is never stored in plaintext. Chat content is transmitted to our hosted LLM provider for processing, and our provider may retain an anonymized version for a limited period in accordance with its data-retention practices. Chat history retained for the user by Jatter is client-side encrypted.

Jatter does not use precise or approximate location information to track your movements, create a history of places you visit, serve targeted advertising, or sell location information to third parties.

III. How We Use Information

Information collected through the Services may be used by Castle and its affiliates for purposes of:

  • Providing the services you select through the Services;
  • Responding to your questions;
  • Building and applying your memory to personalize answers, using the sources described in Section II.B;
  • Contacting you with information about the Services, or to conduct surveys regarding the Services;
  • For such purposes as you may authorize at the time you submit the information;
  • Auditing, research, and analysis to maintain, protect, and improve our service offerings;
  • Creating a profile based on the information you have provided;
  • Ensuring the technical functions of our network;
  • Developing new services; or
  • Compiling information and other information collected through the Services on an aggregate basis.

We do not use your chats, notes, browsing history, learned website data, memory, or profile information to train AI models, and we require the AI services we use not to use Jatter user data for model training.

IV. Information We Share

We do not sell, rent, trade, or otherwise share information collected through the Services, except as described below:

  • LLM Provider. To generate responses and to build and apply your memory, we send temporarily unencrypted chat content to a hosted LLM service, without information intended to directly identify you. When relevant, portions of your memory, notes, or data learned from authenticated websites may be included in these requests. Our LLM provider may retain this anonymized data for a limited period for security, abuse prevention, and compliance purposes. It may not use Jatter user data to train its models or to track individual Jatter users.
  • Web Search Provider. When a question requires open-web information, relevant portions of a chat may be sent to our web search provider. Data sent to this provider is subject to a zero-data-retention policy.
  • Service Providers. We work with third parties that provide services on our behalf. Such services may include website hosting, email hosting, marketing, analytics, and other such services as we may deem necessary. We may share information with these third parties for the purpose of enabling them to provide these services.
  • Consent. We may share information in accordance with any consent you provide.
  • Required by Law. We may disclose information if we are required to do so by law or pursuant to legal process, in response to a request from government officials or law enforcement authorities, or as necessary or appropriate in connection with an investigation of illegal activity.
  • Certain Transactions. We may disclose or transfer information to third parties who acquire all or a portion of Castle’s business, whether such acquisition is by way of merger, consolidation, or purchase of all or a portion of our stock or assets, or in connection with any bankruptcy or reorganization proceeding brought by or against us.
  • Other Users of the Services. Castle does not exercise control over users of the Services. You acknowledge that you Transmit this information in your sole discretion, and that Castle is not responsible for the actions of users of the Services with respect to this information.

Client-side encrypted data, as stored, is not accessible or visible to us or to third parties. Because client-side encrypted data is not accessible to us in unencrypted form, we cannot disclose its unencrypted contents to anyone, including in response to legal process.

V. Aggregate Information

We may compile information and other information collected through the Services on an aggregate basis. This information may include, without limitation, the number of users who have registered for the Services, the volume of Information Transmitted through the Services, and demographic information about users of the Services. Such aggregate information does not identify you individually. We may use aggregate information and share aggregate information with third parties for any of the purposes specified in Section III and Section IV of this Privacy Policy, or for any other lawful purpose.

VI. Your Choices

A. Information You Provide

You can always choose whether or not to provide information through the Services. However, if you choose not to disclose certain information, you may not be able to register as a user of the Services, which may limit your access to certain portions of the Services.

B. What Jatter Learns

Jatter learns authenticated web pages only from websites you have authorized, one website at a time. Memory is derived from your browsing activity and learned web pages only if you opt in.

C. Access, Export, and Deletion

You have full access to and control over your memory. You can view it, delete individual memories, export it, or delete all of it at any time.

You can also delete individual chats, notes, data learned from authenticated websites, and browsing history.

You may delete your Jatter account. When an account is deleted, Jatter deletes the user data associated with that account, subject to any limited information we may be legally required to retain. Because our LLM provider may retain anonymized data for a limited period for security and compliance purposes, deletion from Jatter may not immediately remove data held within that provider’s retention window.

D. Communications From Us

If at any time you decide that you no longer wish to receive notices from us regarding the Services, you may indicate this preference by contacting us at support@jatter.ai.

VII. Subscriptions and Payments

You are not required to register or pay for basic services. To access premium services, you must subscribe. This requires that you provide an email or phone number, create a username and password, and provide valid payment information via credit card. Subscriptions are offered on a monthly and annual basis. WE DO NOT OFFER REFUNDS. To cancel the service, you must actively choose to cancel through the Settings in the browser. If you cancel, you are entitled to continue to use the service until the end of your subscription term.

All payments are processed securely via Apple, Google and Stripe, a third-party payment processor. Apple, Google and Stripe may collect identifying information about your device and transaction to prevent fraud. We do not see, store or process payment card details. Payment information is collected and handled directly by Apple, Google and Stripe in accordance with their Privacy Policies.

VIII. Information Storage and Security

We employ reasonable security precautions to protect personal information about you. The Services are operated from a secure environment with integrated security measures to help protect against the loss, misuse, and alteration of personal information provided through the Services. Your notes, browsing history, memory, retained chat history, and data learned from authenticated websites are client-side encrypted with keys controlled on your device before they are stored. Chat content is never stored in plaintext. Information is encrypted in transit. Other security measures include encrypted passwords and professionally hosted, security-tested infrastructure resources.

Some data is not client-side encrypted: user profile and account data, and content while it is temporarily processed in unencrypted form as described in Section I. However, no method of transmitting or storing data is completely secure. As a result, although we strive to protect personal information about you, we cannot guarantee the security of any information you transmit to us through or in connection with the Services. If you have reason to believe that personal information is no longer secure, please notify us immediately by contacting us in accordance with the last section below.

IX. A Special Note about Children

The Services are neither designed nor intended to attract children under the age of 13, and we do not collect personal information from any individual who we actually know is under the age of 13. We ask that children under the age of 13 not submit any personal information to us.

X. External Links

The Services contain links to various websites that Castle does not control. When you click on one of these links, you will no longer be transacting business through the Services. Third party websites maintain their own privacy policies, and we do not exercise any control over any of the third-party websites that may be linked to the Services. If you visit a website that is linked to the Services, you should consult that website’s privacy policy before providing any personal information. Please be aware that we are not responsible for the privacy practices of such other websites, and we are not liable for their misuse of personal information about you.

XI. United States and Foreign Countries

The Services are domiciled in the United States of America. All matters relating to the Services are governed by the laws of the State of North Carolina in the United States of America. If you are located outside of the United States of America and you contact us, please be advised that any information you provide to us will be transferred to the United States of America and that by submitting information, you explicitly authorize such transfer.

XII. Updating Information

We encourage registered users of the Services to keep their personal information current. You may change personal information you have provided about you at any time by logging into the personal profile you created on the Services. After you enter your username and password, you can edit personal information about you.

XIII. Updates to this Privacy Policy

We may change or update the Services or any of our policies and procedures without prior notice. We will post a notice on this Site to advise you of any significant changes to this Privacy Policy and indicate at the top of this statement when it was most recently updated. Your continued use of the Services signifies your continued assent to the terms of this Privacy Policy, as updated or amended at that time.

XIV. Questions Regarding this Privacy Policy

If you have any questions or comments regarding this Privacy Policy, please send us an email at support@jatter.ai.

Notice of Privacy Rights to California Residents

California law requires that we provide you with a summary of your privacy rights under the California Online Privacy Protection Act (the “Act”) and the California Business and Professions Code. As required by the Act, you have the right to know whether your personal information is being collected; the right to request the specific categories of information a business collects upon verifiable request; the right to know what personal information is being collected about you; the right to say “no” to the sale of personal information, the right to delete your personal information, the right to equal service and price, even if you exercise your privacy rights. We will provide you with the categories of personally identifiable information that are collected through this website and the categories of third-party persons or entities with whom such personally identifiable information may be shared for direct marketing purposes at your request. California law requires us to inform you, at your request: (1) the categories of personally identifiable information we collect and what third parties we share that information with; (2) the names and addresses of those third parties; and (3) examples of the products marketed by those companies. The Act further requires us to allow you to control who we can and cannot share that information with. To obtain this information, please send a request by email or standard mail to the address found below. When contacting us please indicate your name, address, email address, and what personally identifiable information you do not want us to share with third parties. Please allow thirty (30) days for a response. Also, please note that there is no charge for controlling the sharing of your personally identifiable information or requesting this notice.