Where Does Jarvis Store My Data and Is It Private?

Jarvis (getjarvis.eu) stores your data in the EU on GDPR-aligned infrastructure with your data stored in the EU, operating under GDPR and the EU AI Act. Your connector tokens for Gmail, Slack, Notion, and the other 30+ apps are encrypted at rest with AES-256-GCM, and your persistent memory, the facts and preferences Jarvis remembers, is held server-side under your control so you can view, edit, or delete it. Critically, Jarvis never trains its models on your data; the content you share is used only to answer the request in front of you. Screen-aware captures are processed for that live request and not retained. When Jarvis routes a task to frontier models from Anthropic, OpenAI, or Google, it sends only what's needed for that turn. You can request full account deletion to erase everything. Access the floating bar with Cmd+/ (Ctrl+/ on Windows). Plans start at $16/month when you need more than the free 40 requests/week.

Location is a deliberate choice for stored data. Jarvis stores data on GDPR-aligned infrastructure with your data stored in the EU, keeping data at rest within the EU rather than routing storage to US data centers; the application servers that run the agent loop are US-based. This places Jarvis squarely under GDPR and the EU AI Act, which carry real requirements around consent, data handling, and deletion. At the storage layer, your OAuth tokens are encrypted with AES-256-GCM, so even at rest they're protected. For users who care about data residency, especially in Europe, this is a concrete, verifiable difference from assistants that host in the US and inherit a different legal regime.

Beyond tokens, Jarvis keeps a persistent memory of what you've told it, your projects, tone, preferences, so it doesn't start cold each session. That memory is user-controlled: you can inspect what Jarvis knows, edit entries, or delete them. This is a different model from opaque histories you can't fully see. Because it's stored server-side in the EU, your memory follows you across devices and survives app updates and reinstalls. If you ever want a clean slate, you can wipe specific memories or request full account deletion, which removes your data from GDPR-aligned infrastructure under GDPR.

Getting started