The short version
Jalten is a workspace for using ChatGPT and Claude models at work. People work in Jalten in the browser at app.jalten.com or in Jalten for Mac (coming soon); a company sets up its workspace in the admin console, also at app.jalten.com; and an AI gateway passes chats to the AI provider.
- Your conversations are kept on your device (your Mac, or the browser you use Jalten in), encrypted, and nowhere else. That includes the link between each real detail and the stand-in it was replaced with.
- Before a request is sent, sensitive details are replaced on your device. Your AI provider receives the stand-ins. Anything the detection does not catch is sent as you wrote it.
- Company chats, and chats with your own key in the browser, pass through our AI gateway in Sydney, which hands them to your provider using your company’s key or your own. The gateway does not store or log what passes through it.
- Administrators see usage, not content: who uses Jalten, which models, how much it costs and how many details were protected. Never a prompt, a reply or a protected detail.
- This website uses Google Analytics and Microsoft Clarity, only where your consent allows. The Mac app, the browser app and the admin console use neither.
Who we are
Jalten is operated by Oliver Scholefield, a sole trader based in Australia, ABN 70 947 234 028. “We” and “us” in this policy mean the operator. You can reach us at hello@jalten.com.
We also operate Browser Protection, a separate Chrome extension sold under the Guard4AI name. It has its own privacy policy; nothing on this page describes it.
What stays on your device
Jalten for Mac (coming soon)
Jalten for Mac keeps your work in its own folder on your Mac, encrypted with a key held in your macOS login Keychain:
- Conversations: the protected text that was exchanged, and the mapping between each real detail and its stand-in, encrypted per conversation.
- Projects: their names, instructions and text files.
- Your own API keys, if you add an OpenAI or Anthropic key for personal use. A key is decrypted only at the moment a request is sent, and is never shown again.
- The Mac’s company sign-in: a key that belongs to this Mac, and its sign-in tokens.
- Logs: event names, counts and error codes, never text.
We cannot read any of this. Removing the app’s folder removes it. Local encryption protects against disk theft, backups and other accounts on the computer; it does not protect against malicious software already running as you.
Jalten in your browser
Jalten in the browser keeps the same things, apart from provider keys, in that browser’s storage for app.jalten.com. They are encrypted with a key the browser creates for Jalten and cannot export: conversations and their mapping, projects and their files, the browser’s sign-in key and tokens, and logs of event names and codes. Your provider key is never kept in the browser (see What reaches our servers).
We cannot read any of this. It stays in that one browser: it is not shared with your other browsers or your Mac. Clearing the browser’s data for app.jalten.com deletes it, and we cannot recover it. The encryption protects what is stored; it does not protect against a malicious browser extension or software already running as you.
What reaches our servers
If you use Jalten with your company
- Your account: your name, your work email, your role in the workspace and the two-step sign-in you set up. Passwords are stored by our sign-in provider as one-way hashes.
- Your company’s workspace: its name, its members and invitations, the models it has approved, its protection rules and usage caps, and a record of administrators’ changes.
- Each signed-in Mac: the name you give it, the app version, the policy version it applied, and when it last checked in.
- Your company’s provider keys, entered by an owner or admin in the console. They go straight to the AI gateway, which stores them in a key store in Sydney. They are never shown again, not even to administrators.
- A usage record for each request: the model, the person, the number of tokens the provider reported, the calculated cost, whether it succeeded and how long it took. No text.
- Protection counts: how many details of each kind (names, phone numbers and so on) were replaced, as totals for the workspace and the day. Never a value, and never per person.
If you use Jalten in your browser on your own
On your own, Jalten in the browser uses a workspace with one member: you. We keep:
- Your account: your name, your email and the two-step sign-in you set up. Passwords are stored by our sign-in provider as one-way hashes.
- Your provider key, if you connect an OpenAI or Anthropic key. You type it once in the app; it goes over an encrypted connection straight to our AI gateway, which stores it in its key store in Sydney. It is never stored in your browser, never shown again and never logged. Disconnecting it deletes it from the key store at once.
- Each signed-in browser, as for a company’s Macs, and the same usage record and protection counts for each request. No text.
Chats through the gateway, in transit
When you use a company model, or your own key in the browser, the protected request goes from your device to our AI gateway in Sydney, which checks it against your workspace’s policy and passes it to OpenAI or Anthropic with your company’s key or your own. The reply streams back the same way. The gateway holds the request only while it is being passed on: it does not store or log prompts, replies, keys or provider error messages, and it never receives the mapping, so it could not restore your details even if it tried.
If you use your own API key in Jalten for Mac (coming soon)
Chats with your own key in the Mac app go from your Mac straight to OpenAI or Anthropic. We receive nothing about them.
Updates
To find out whether a new version exists, Jalten for Mac asks downloads.jalten.com for the latest version. That request carries no account information.
What administrators can see, and what they cannot
Owners and admins of your company’s workspace can see the people in it, their roles, their signed-in Macs and browsers, which models they use and when, the usage and calculated cost, and the protection counts described above. Cost per person is shown only to owners, admins and the billing role; auditors see totals. In a personal workspace you are the only owner, so only you see these.
No administrator can see a prompt, a reply, a file or a protected detail. None of it is sent to our servers, so there is nothing for the console to show and nothing we could hand over.
What your AI provider receives
Whatever is sent: the protected version of your request, with replaced details as stand-ins, and anything the detection did not catch as you wrote it. Detection is pattern matching tuned for Australian details; it can miss things, which is why every new finding opens a review you can correct.
OpenAI and Anthropic are your organisation’s own providers, under your organisation’s agreement with each. What a provider keeps, and for how long, is set by that agreement and your account settings there. For company chats the gateway asks OpenAI not to store the conversation (its store: false setting).
Who else is involved
- Supabase hosts the workspace database and sign-in, in Sydney.
- Amazon Web Services runs the AI gateway and the key store for provider keys, in Sydney. Requests reach the gateway through Amazon CloudFront’s network, and the app’s downloads and updates are delivered the same way.
- Vercel hosts jalten.com and app.jalten.com and runs the website’s server functions, such as the contact form. Those functions may run outside Australia.
- Resend sends account emails, such as invitations and confirmations.
- Cloudflare runs the spam check on the contact form, and sees that request only.
- Google Analytics and Microsoft Clarity measure this website, only where your consent allows. They are not in the Mac app or the admin console.
- OpenAI and Anthropic receive company chats as your organisation’s providers, as described above.
Where it is held, and for how long
Your workspace database, provider keys and AI gateway run in Sydney, Australia.
Some of the services above handle the data they need outside Australia: Vercel’s functions (the website’s forms and sign-in steps) run in the United States; Resend sends our emails from Japan; Google, Microsoft, OpenAI and Anthropic process data mainly in the United States; and Cloudflare’s and CloudFront’s networks handle each request at a location near the person making it.
- Usage records are kept in full for 13 months, then reduced to daily totals.
- The gateway’s logs are kept for 30 days. They hold event names and codes, never text.
- Account and workspace records are kept while the workspace exists, or until you ask us to delete them.
This website
This section is about jalten.com, the website you are reading. The Mac app and the admin console are separate and carry no analytics of any kind.
The website uses two measurement tools. Google Analytics 4 counts visits. Microsoft Clarity records them. When you load a page here, Google receives:
- which page you opened, and when;
- roughly where you are (country, region, usually city), worked out from your IP address, which Google uses for that and does not store;
- your device type, browser, operating system, screen size and language;
- how you arrived: a search engine, a link from another site, or directly;
- a random identifier kept in a cookie, so a second visit can be recognised as the same browser.
We see reports built from that, such as how many people read a page. None of it is joined to a Jalten account.
Microsoft Clarity records your visit, and we would rather say so first
Clarity rebuilds your visit so we can watch it back: the pages you moved through, where you moved the pointer, what you clicked and how far you scrolled. It is a reconstruction of the page, not a video of your screen, and it never reaches outside the browser tab. It stores two cookies, _clck and _clsk, and one session storage entry, _cltk.
What is never recorded. Clarity masks the contents of every input box and dropdown, in every mode, and that cannot be switched off by us. Your email address, your name and anything else you type into a field on this site are masked in your browser before anything is uploaded.
If you fill in the contact form
The contact form asks for your name, company, work email, an optional phone number, a rough headcount and anything you want to add. It goes to a row in our database and an email to us, and is used to answer you. We keep it while we are dealing with you, and delete it when you ask. It is not added to a mailing list and is not passed to anyone. Cloudflare Turnstile checks that a person is sending it, and the form limits how many messages can come from one connection in an hour by storing a one-way hash of your IP address, not the address.
Asking first, where asking is required
In the EEA, the UK and Switzerland, nothing is stored in your browser for analytics until you say it may be. Google’s tag starts with that storage switched off and a bar asks; Clarity is not loaded at all until the answer is yes. Elsewhere, Australia included, we do not ask first; you can turn analytics off at any time below. The advertising side of Google’s tag is switched off everywhere and never switched on.
Your answer is remembered in your own browser and nowhere else. You can change it here at any time:
Because we set the page address we report ourselves, the part of a link after a # is never sent to Google.
Your rights
Under the Australian Privacy Act, and the GDPR where it applies to you, you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@jalten.com. If you use Jalten through your company, your company’s administrators can also correct your details and remove you from the workspace.
We will answer within 30 days. If you think we have got it wrong, you can complain to the Office of the Australian Information Commissioner, or to your local supervisory authority in the EU or UK.
Changes
If we change what Jalten collects or where it is held, we will change this page, move the date at the top and tell workspace owners by email.
Contact
Privacy questions, access requests, deletion requests.