JarvisUltimate
Legal

Privacy Policy

Last updated: 21 October 2026

Service provider and data controller: ULTIMATEFILES - UNIPESSOAL LDA, NIPC 518591719, Praceta Dr. Barbosa de Magalhães, n.º 41, R/c, 2775-162 Parede, Portugal.

1. Who we are

JarvisUltimate is a service to create content with AI and publish it to your own Instagram and TikTok accounts, operated by ULTIMATEFILES - UNIPESSOAL LDA, NIPC 518591719, Praceta Dr. Barbosa de Magalhães, n.º 41, R/c, 2775-162 Parede, Portugal. Contact: contact@jarvisultimate.com

2. Data we collect

We collect the following personal data:

  • Name and email address (JarvisUltimate account)
  • Instagram and TikTok account data (username, display name, profile picture, public metrics)
  • Content created through the platform (posts, captions, generated images)
  • Usage data (session logs, features used, timestamps)
  • Payment information (processed by third parties — we do not store card data)

3. How we use your data

Your data is used to:

  • Provide and improve the JarvisUltimate service
  • Generate AI content tailored to your connected accounts
  • Publish content on Instagram and TikTok on your behalf, only after you confirm each post (explicit authorisation)
  • Send transactional communications (confirmations, account alerts)
  • Performance analysis and metrics for your profile

4. Instagram / Facebook integration

When you connect your Instagram account, JarvisUltimate accesses the Instagram Graph API provided by Meta Platforms, Inc. Data obtained through this API is used solely for the purposes described in this policy. We do not share, sell or transfer your Instagram data to third parties.

The permissions requested include: profile reading, content publishing (with prior approval), metrics reading and comment management.

4.1 TikTok integration

When you connect your TikTok account through TikTok Login Kit, JarvisUltimate requests these scopes: user.info.basic, user.info.profile, user.info.stats, video.list, video.upload, video.publish. They are used to show which account is connected, its public profile, statistics and recent videos, and to send a video to that account when you post or schedule it.

We store your TikTok open_id, the access and refresh tokens (encrypted), their expiry dates and the granted scopes, your username, display name and avatar, and the status of each post you send. Statistics, the video list and the creator info TikTok returns before each post are read live and are not stored.

Nothing is sent to TikTok without your explicit confirmation of the video, caption, privacy level, interaction settings and content disclosure; a scheduled post publishes exactly what you confirmed. We do not sell or share TikTok data. When you remove the TikTok account or delete your JarvisUltimate account, the tokens and all TikTok data are deleted. You can also revoke access at any time in your TikTok app settings.

5. Sharing with third parties

We use the following subprocessors:

  • Meta / Instagram Graph API — publishing and reading Instagram and Facebook data
  • TikTok — publishing content to TikTok
  • Google — Google sign-in and YouTube trend research
  • OpenAI — AI content generation (text and images)
  • Anthropic — language and vision models (Claude) that write the copy and direct the generations
  • Higgsfield — AI video generation (Kling) for motion control
  • Runware — AI image and video generation
  • Apify — collection of public profile data
  • Tavily — web search for trend research
  • Stripe — payment processing
  • Telegram — Telegram bot messages
  • Titan — account e-mail delivery (Titan)
  • DigitalOcean — hosting of the application and database (Frankfurt, EU)

We do not sell your data to third parties.

Connections to AI assistants (MCP)

If you connect Jarvis to Claude, ChatGPT or another assistant through our MCP server, the assistant can only access your account after you authorise it in Jarvis, and only with the permissions you choose (read, generate, publish). The assistant receives the data the tools return (profiles, strategy, campaigns, content and your credit balance). That data is then also processed by the assistant's provider under its own privacy policy. You can revoke access at any time at jarvisultimate.com/mcp/acessos.

6. Data retention

Your data is kept for as long as your account is active. After account deletion, personal data is removed within 30 days, except where applicable law requires longer retention.

7. Your rights (GDPR)

If you reside in the European Union, you have the right to:

  • Access your personal data
  • Rectify incorrect data
  • Erase your data ("right to be forgotten")
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, contact us at contact@jarvisultimate.com

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, role-based access control and continuous security monitoring.

9. Cookies

We use strictly necessary cookies for authentication and session preferences. We do not use third-party tracking or advertising cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify users by email in the event of material changes. Continued use of the service after notification implies acceptance of the changes.

11. Contact

For any privacy-related question: contact@jarvisultimate.com