PRIVACY POLICY

Last Updated: January 7, 2026

1. INTRODUCTION

Jillii Inc. (“Jillii,” “we,” “us,” or “our”) is a corporation incorporated under the Business Corporations Act (Ontario), R.S.O. 1990, c. B.16, with its principal place of business in Ontario, Canada.

This Privacy Policy explains how we collect, use, disclose, store, transfer, and safeguard personal information when you access or use:

• the Jillii mobile applications (iOS and Android),
• the Jillii website (https://www.jillii.com),
• the Jillii web-based admin/service panel (restricted access), and
• any related features, tools, and communications (collectively, the “Services”).

This Privacy Policy forms part of, and is incorporated by reference into, our Terms of Use available at https://www.jillii.com/terms.

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

2. GEOGRAPHIC AVAILABILITY AND EXCLUDED JURISDICTIONS

Jillii currently does not offer services to residents of, or individuals located in, the following jurisdictions due to regulatory and compliance constraints: China, Russia, Vietnam, and Indonesia.

If you access or use the Services from any excluded jurisdiction, you do so at your own risk and without authorization. Jillii makes no representations regarding the legality or availability of the Services in such regions.

3. SCOPE AND DEFINITIONS

• “Personal Information” means any information that identifies or can reasonably be linked to an identifiable individual.
• “User” means any person who accesses or uses the Services, including hosts and guests.
• “Processing” includes collecting, using, storing, transferring, disclosing, or deleting personal information.

Jillii generally acts as a controller for Personal Information we collect for our own purposes (account management, security, product improvement). In certain cases, Jillii may act as a service provider/processor where we process Guest information on behalf of a Host (for example, delivering invitations and RSVP functionality for a Host’s event).

4. INFORMATION WE COLLECT

4.1 Information You Provide Directly

We may collect the following categories of personal information:

• Full name
• Email address
• Username
• Phone number
• Mailing or billing address (where provided)
• Country code
• Account credentials
• Date of birth
• Gender (including “prefer not to disclose” where offered)
• Event details (event name, location, date, time, guest list, RSVPs, event description, hosts/co-hosts, guest categories e.g., adults, children, toddlers, notes)
• Uploaded content (invitations, posts, photos, videos, messages, comments, greetings, checklists, polls, and other user-generated content within the Services)
• Profile information (profile photo, bio, preferences, event history)
• Gift tracking (record keeping entries)
• Calendar event history data (events you host, co-host, RSVP to, attend, decline, or that are cancelled)
• Communications with Jillii (support requests, feedback, survey responses)

4.2 Information About Other Individuals

If you upload or submit personal information relating to another individual (including Guests and contacts), you represent and warrant that:

• you have obtained all required consents and legal authority to share their information with Jillii for the Services, and
• such disclosure complies with applicable privacy laws

You are solely responsible for ensuring the legality of such disclosures.

4.3 Automatically Collected Information

We automatically collect certain technical and usage information, including:

• IP address
• Device identifiers
• Browser type and version
• Operating system
• App version
• Advertising identifiers (where enabled by device settings)
• App usage statistics
• Language settings
• Log files, crash reports, performance data
• Usage analytics (e.g., screens viewed, features used, session duration)
• Approximate location data (derived from IP address)

5. LOCATION DATA

With your device permissions, Jillii may collect approximate location data to:

• suggest event locations,
• facilitate directions via third-party map providers, and
• improve service functionality.

You may disable location services at any time through your device settings. Disabling location services may limit certain features.

6. PAYMENT INFORMATION

All payments are processed exclusively by Stripe, Inc. Jillii does not store or process full credit card or banking information.

We may receive limited transactional metadata such as:

• payment confirmation,
• billing name,
• subscription status.

Stripe’s Privacy Policy is available at: https://stripe.com/privacy.

7. HOW WE USE PERSONAL INFORMATION

We use personal information for the following purposes:

• To provide, operate, maintain, and improve the Services
• To create and manage user accounts
• To process payments and subscriptions
• To enable event creation, invitations, RSVPs, updates, messaging, content sharing, and related features
• To deliver event invitations, reminders, and notifications
• To communicate with users regarding service updates and support
• To provide analytics and performance monitoring
• To prevent fraud, abuse, or security incidents
• To comply with legal obligations
• To improve our Services, we may process de-identified and aggregated data to analyze usage patterns and enhance functionality. We do not use identifiable personal information, photos, videos, or private event content to train artificial intelligence models.
• To enforce our Terms of Use

Disclosure to Event Hosts: When you RSVP to an event, we share your name, email, and response details with the Event Host. Please be aware that Jillii acts only as a service provider to the Host. We are not responsible for the privacy practices of Event Hosts. Once your information is shared with a Host, it is subject to that Host’s own policies and discretion.

7.1 SMS and Mobile Communications

We value your privacy. We do not sell or share consumers' mobile numbers or SMS consent with third parties or affiliates for marketing or promotional purposes.  We may share information with service providers solely to operate and support our services (for example, to deliver SMS messages).  All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for their own marketing purposes.

7.2 Email Communications and Tracking

By creating an account, you consent to receive transactional emails (e.g., account verification, order confirmations).

• Tracking: We use email tracking technologies (such as pixels) to monitor the effectiveness of our campaigns (e.g., open rates). You can disable this by blocking images in your email client.
• Unsubscribe: You may opt out of marketing emails at any time by clicking the "Unsubscribe" link at the bottom of the email. You cannot opt out of essential transactional emails.

8. THIRD-PARTY SERVICE PROVIDERS

We use trusted third-party providers to operate the Services:

• Amazon Web Services (AWS): Hosting, servers, databases, storage, security
• Stripe: Payment processing
• Twilio: SMS delivery
• SendGrid: Transactional and marketing email
• GoDaddy: Domain registration
• GitHub: Source code hosting and version control

Each provider processes personal information only as necessary to perform services on our behalf and under contractual confidentiality and security obligations.

9. DATA STORAGE AND INTERNATIONAL TRANSFERS

Personal information may be stored or processed in Canada, the United States, or other jurisdictions where our service providers operate.

Notice to Quebec Residents: Your personal information is communicated outside of Quebec. By using the Services, you acknowledge and explicitly consent that your personal information will be transferred to, and processed in, the United States and other jurisdictions where our service providers (such as AWS and Stripe) maintain servers. You understand that these jurisdictions may not have data protection laws equivalent to those in Quebec.

By using the Services, you consent to such cross-border data transfers and acknowledge that foreign laws may apply.

10. GDPR & EUROPEAN USERS

For users located in the European Economic Area (EEA), Jillii complies with the General Data Protection Regulation (GDPR).

You have the right to:

• access your data
• correct inaccuracies
• request deletion
• restrict processing
• data portability
• object to certain processing

Requests may be submitted to info@jillii.com

11. CALIFORNIA PRIVACY RIGHTS (CPRA)

For California residents, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CPRA”) provides specific rights regarding personal information.

Subject to applicable law, California residents have the right to:

• Know the categories and specific pieces of personal information we collect, use, and disclose
• Request deletion of personal information
• Request correction of inaccurate personal information
• Limit the use and disclosure of sensitive personal information
• Opt out of the sale or sharing of personal information (note: Jillii does not sell or share personal information for cross-context behavioral advertising)
• Not be discriminated against for exercising privacy rights

Exercising Your Rights: Requests may be submitted by contacting us at info@jillii.com. We may verify your request before responding.

Authorized Agents: California residents may designate an authorized agent to make requests on their behalf, subject to verification requirements.

Jillii will respond to verified requests within the timeframes required by applicable law.

12. DATA RETENTION

We retain personal information only as long as necessary for:

• service provision,
• legal compliance,
• dispute resolution,
• enforcement of agreements.

You may request deletion of your account at any time, subject to legal retention obligations. Deleted data may persist in secure backups for a limited period (up to 90 days) before being permanently overwritten.

13. SECURITY MEASURES

We implement administrative, technical, and organizational safeguards including:

• encryption in transit and at rest,
• access controls,
• monitoring and auditing,
• secure cloud infrastructure.

Access to personal information is limited by role-based permissions, subject to least-privilege principles, and logged for audit and compliance purposes.

However, no system is completely secure, and we cannot guarantee absolute security.

14. DISCLOSURE FOR LEGAL PURPOSES

We may disclose personal information if required to:

• comply with law or legal process,
• protect rights, safety, or property,
• prevent fraud or abuse,
• cooperate with law enforcement.

15. INTERNATIONAL DATA RIGHTS (GDPR, UK & ASIA)

15.1 Europe & UK (GDPR): If you are located in the EEA or UK, we process your data based on Contractual Necessity (to provide the App), Legitimate Interests (security), and Consent. You have the right to access, correct, delete, or transfer your data. Contact info@jillii.com to exercise these rights.

15.2 Singapore (PDPA): If you are located in Singapore, we collect, use, and disclose your personal data in accordance with the Personal Data Protection Act 2012 (PDPA). You may withdraw your consent for any purpose at any time by contacting our Data Protection Officer at info@jillii.com. Please note that withdrawing consent for essential services may impact your ability to use the App.

15.3 Japan (APPI): If you are located in Japan, we handle your "Personal Information" and "Retained Personal Data" in compliance with the Act on the Protection of Personal Information (APPI). We will not provide your personal data to third parties without your prior consent, except as permitted by Article 23 of the APPI (e.g., for legal compliance or detailed in Section 7.1).

15.4 Cross-Border Transfers: Your data may be processed in Canada and the United States. By using the Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than those of your country.

16. BUSINESS TRANSFERS

In the event of a merger, acquisition, or asset sale, personal information may be transferred as part of the transaction, subject to applicable privacy laws.

17. COOKIES POLICY

17.1 What Are Cookies?

Cookies are small text files stored on your device that help websites function efficiently and improve user experience.

17.2 Types of Cookies We Use

• Essential Cookies – required for core functionality
• Analytics Cookies – usage analytics (e.g., Google Analytics)
• Preference Cookies – language and region settings

17.3 Managing Cookies

You may disable or delete cookies through your browser settings. Disabling cookies may affect functionality.

18. NO ADS/NO SALE OF PERSONAL INFORMATION

Jillii is intended to be an ad-free experience. We do not sell Personal Information to third parties. We do not share Personal Information for cross-context behavioral advertising as defined under applicable privacy laws.

19. CHILDREN’S PRIVACY

Jillii is intended for users 16 years of age or older. We do not knowingly collect personal information from children under 16. If we discover such data, we will delete it immediately.

20. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Changes become effective upon posting. Continued use of the Services constitutes acceptance.

21. CONTACT INFORMATION

Privacy Officer

Jillii Inc.
info@jillii.com