Security
Your data, your server, your assistant. Not ours.
Jootle is built around a hard architectural choice: every customer runs on a dedicated VPS we provision for them. That choice changes what we can and can’t see, and it shapes everything below. For the legal version, see the Privacy Policy and Terms in the footer.
Dedicated infrastructure
Every customer gets their own VPS, provisioned the moment they subscribe. Your data, your code, your AI keys never share runtime with another customer. There is no multi-tenant database to accidentally cross-leak.
Database backups every 6 hours
A scheduled pg_dump runs every 6 hours and gzips into your instance’s data directory. The most recent eight are retained. You can list and download them yourself, or trigger one on demand, from System Settings → Backups.
Your data is yours to extract
The Backups page lets you download any DB dump in standard PostgreSQL format. Because your assistant has full access to its own server, you can also set up a Goal that ships backups + your files (sites, artifacts, uploads, images) to whatever destination you want: Dropbox, S3, your own server, email.
Encryption everywhere
TLS in transit, encrypted disks at rest, secrets stored in a vault rather than environment variables, HMAC signatures validated on every inbound webhook, automated SSL certificate management via Let’s Encrypt.
We can’t read your work
The control plane only receives aggregate health pings: uptime, schema version, basic counters. It has no access to conversations, knowledge graphs, files, agent prompts, or AI provider responses. That data lives only on your VPS.
Open about what we don’t do
No model training on your data. No cross-customer fine-tunes. No advertising network. No data sales. The platform earns revenue one way: subscriptions.
Your AI calls, your AI account
Jootle today is bring-your-own-AI: your VPS calls Anthropic, OpenAI, Gemini, or DeepSeek directly using your credentials, so your conversations never pass through our infrastructure and your token bill goes straight to your provider. We never see the prompts, the responses, or the spend. An AI Included tier where Jootle bundles the AI is in the works for after launch.
Real disclosures about data, retention, transfers, and your rights live in the Privacy Policy. The Terms describe what you’re agreeing to when you subscribe. Both are linked in the footer.
Start Early Access →