Privacy
A plain-language summary of how Jithox handles your data. It is an honest startup baseline, not a lawyer-reviewed document, and it says so.
Last updated: August 2026.
What Jithox does
Jithox for WhatsApp prepares business work — quotes, invoices and customer questions — from the messages you give it. Every real-world action happens only after you approve the exact content, and every action is recorded with a receipt.
Jithox MCP answers read-only EU e-invoicing checks for software and AI agents. It processes the business identifiers a call submits — VAT numbers, Peppol participant ids, invoice documents — to answer that call.
What we store
- The messages you paste or forward, and the invoices, drafts and questions prepared from them.
- Your business details (name, VAT number, address, IBAN) that you enter once for your invoices.
- Customer details you explicitly save — never saved without your confirmation.
- Approvals and receipts: who approved what, when, and what the provider confirmed.
- Sign-in identity via our sign-in provider (e-mail, name). Its own privacy policy applies on top of ours.
- For MCP: usage counts and signed receipts per accepted call, so a balance and an accounting trail exist.
What we do not do
- No sending, invoicing, replying or publishing without your explicit approval.
- No invented invoice facts — only what your message or your input contains.
- No selling of your data, and no advertising network embedded.
- No card data stored by us. Card payments run on Stripe's hosted checkout and card details never touch jithox.com.
- Your data belongs to your workspace only — it is never visible to another customer.
Analytics on the public site
The public pages measure aggregated visits with Vercel Web Analytics, and nothing else. There is no second analytics vendor, no advertising pixel and no session replay.
The funnel events we record carry exactly three properties: which product the page belongs to, its language, and the deploy environment. No e-mail address, no account id, no phone number, no message content, no invoice data and no error text can be attached to an event, because the event shape has no field for any of it.
Where data lives
Application data lives in our European-region database. Sign-in data lives with our sign-in provider, e-mail delivery runs through our e-mail provider, and card payments run through Stripe. We keep this list current as the product grows.
Security and certifications
Jithox is an early-stage product. We do not claim SOC 2, ISO 27001, HIPAA or PCI certifications, and there has been no independent penetration test yet. Secrets stay server-side, workspaces are strictly separated, and every outbound action is approval-gated and receipted.
Deletion requests
Deleting a WhatsApp connection, closing an account, removing one customer and erasing an invoice are four different requests with four different answers. The deletion page states each of them, including where the answer is no and why.