Legal

Privacy Policy

Last updated: 30 October 2026

This policy explains how Jonspire handles your personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the EU/UK GDPR.

1. Who we are

Jonspire ("we", "us") is the data controller for personal data collected through this website. Contact: Jonspire, Lagos, Nigeria · jonspirelimited@gmail.com.

2. What we collect and why

• Newsletter survey — name, email, optional profile (role, how you heard about us, topics of interest). Purpose: to send the newsletter and promotional emails you asked for, and tailor their content. Lawful basis: your consent.
• Advisory bookings — name, email, optional phone and company, chosen topic, date/time and notes. Purpose: to arrange and deliver your session. Lawful basis: steps taken at your request before entering into a contract, and your consent.
• Advisory chatbot — the messages you type are processed by Cloudflare Workers AI to generate a reply. We do not store chat conversations. Please do not enter personal or financial identifiers.
• Assistant Plus (paid plan) — your name, phone number, optional email, your payment receipt (image or PDF) and your subscription dates and monthly question count. Purpose: to verify your bank transfer, give you access and let you restore it on another device. Receipts may be read by an AI tool (Cloudflare Workers AI) to help us check them; a person always makes the final decision. Lawful basis: performance of a contract. Your browser also keeps a random device ID and your subscription code in its local storage so the assistant can count your free questions and recognise your plan.
• Start-up Course (paid course) — the same details as Assistant Plus (name, phone number, optional email, payment receipt and access dates), used to verify your transfer and give you 12 months of access. Receipts may be read by an AI tool to help us check them; a person always makes the final decision. Lawful basis: performance of a contract. Your browser keeps your course code in its local storage so the course page can recognise your access. Video links are personal and expire after a few hours.
• Fraud Protect — the text, links, numbers and screenshots you submit are analysed to produce your report and are not stored. To check links and senders we look up public information about them (the website itself, domain registration and DNS records) and, where enabled, Google Safe Browsing; content is analysed by Cloudflare Workers AI. To use it you create an account at fraud.jonspire.com with your name, email and a password. We store the password only as a one-way hash (it cannot be read back), confirm your email with a one-time link, and keep a sign-in cookie on your device for up to 30 days. We use your email only for account messages (confirmation and password resets), sent through Brevo. We keep a count of your checks against your account and a random device ID for your free allowance, and subscription details as for Assistant Plus. You can delete your account at any time from Your account › Delete my account. If you send a scam report, we keep the reported value (for example a phone number, link or name) and your note, with a salted hash instead of your identity, and show how many people reported it to other users. Lawful basis: performance of a contract (checks and subscriptions) and legitimate interests (fraud prevention, for reports). Your browser keeps your recent verdicts and short previews in local storage; you can clear them on the page.
• 2nd Brain — your conversations, attachments, notes, memories, skills, custom instructions and connector settings (connector access tokens are stored on our servers and never shown back in the browser), plus subscription details as for Assistant Plus. Purpose: to provide the service you subscribed to, including remembering what you asked it to keep. Messages and attachments are sent to Anthropic (the maker of Claude) to generate replies, and, if Claude is unavailable, to Cloudflare Workers AI. Web searches and connected services only receive what is needed for the task. Lawful basis: performance of a contract. You can delete conversations, notes and memories in the app at any time, and export your data from Brain › Export.
• Weekly check-in — the interview on our home page is hosted by InfoMie (getinfomie.app), inside an embedded frame. If you start it, your answers go to InfoMie and are shared with us so we can improve what we cover. Taking part is optional. Please do not enter personal or financial identifiers.
• Technical data — to prevent abuse, we keep a scrambled (one-way hashed) form of your IP address for up to 24 hours to limit repeated submissions. It cannot be turned back into your IP address and is never stored with your records. To count the assistant's 2 free questions, we also keep a hashed form of your IP address and of your browser's random device ID, with only a question count, for up to 12 months.

3. Cookies

We use only strictly necessary cookies: __Host-jcsrf, which protects our forms against cross-site request forgery (expires after 7 days), and, for staff only, __Host-jsid, which keeps staff signed in (expires after 8 hours). They contain no tracking data. We do not use advertising or analytics cookies, so no cookie consent is required.

To understand how the site is used, we use Cloudflare Web Analytics, which measures page views and loading speed without cookies, without fingerprinting and without tracking you across other websites. It does not identify individual visitors.

4. Sharing

We do not sell your data. We share it only with service providers that help us run the website — our hosting, storage and chatbot provider (Cloudflare), the AI provider behind 2nd Brain (Anthropic), our newsletter email provider (Brevo, which sends our weekly updates from newsletter@news.jonspire.com) and Google Gmail (our business inbox, jonspirelimited@gmail.com) — under contracts that require them to protect it. The optional weekly check-in on our home page is run by InfoMie, which receives what you enter there. Some providers may process data outside Nigeria; where they do, we rely on appropriate safeguards as required by the NDPA and GDPR.

5. How long we keep it

• Newsletter data: until you unsubscribe. We keep your email on a suppression list so we don't contact you again.
• Booking data: 24 months after your session, then deleted, unless the law requires us to keep it longer.
• 2nd Brain content (conversations, notes, memories, files): until you delete it, or 12 months after your subscription ends.
• Fraud Protect accounts: until you delete your account. Unconfirmed accounts may be removed after 90 days. Sign-in sessions end after 30 days and reset links after 30 minutes.
• Fraud Protect scam reports: until they are no longer useful for warning others, and at most 24 months; we delete reports that are false or contain personal data when we find them or when you ask.
• Assistant Plus, Fraud Protect, 2nd Brain and course records and receipts: for as long as your plan is active and then 6 years, as required for accounting and tax records.

6. Your rights

You may request access to, correction of, or deletion of your personal data; withdraw consent at any time; object to processing; and request data portability. Unsubscribe links are included in every email. To exercise any right, email jonspirelimited@gmail.com. You may also complain to the Nigeria Data Protection Commission (NDPC) or your local data protection authority.

7. Security

We protect your data with encrypted connections (HTTPS), strict access controls for authorised staff only, hashed passwords, security headers, rate limiting and audit logging.

8. Changes

We will post any changes to this policy on this page and update the date above.