Trust & Security

How Junna.ai protects your brand data

🔒 256-bit SSL Encryption 🛡️ OAuth 2.0 Authentication 📖 Read-Only Access 🚫 We Never Sell Data 🔑 No Passwords Stored

Our Data Promise

Junna.ai exists to help your brand grow smarter — not to monetize your data. We access only what's needed to generate your report, we never share it with third parties, and you can delete everything at any time.

What We Access & Why

Every integration uses the minimum permissions needed. Here's exactly what Junna can and cannot do:

Integration	What We Access	Permission	What We Can't Do
Instagram	Follower count, engagement rates, post performance	Read Only	Post, DM, follow, or modify your account
Facebook	Page insights, audience demographics	Read Only	Post, message, or change page settings
TikTok	Video views, engagement, audience data	Read Only	Upload, delete, or modify videos
Pinterest	Pin performance, audience insights	Read Only	Create, delete, or modify pins
LinkedIn	Company page analytics	Read Only	Post, connect, or message
Shopify	Products, orders, customer demographics	Read Only	Modify products, process orders, or access payment data

How We Protect Your Data

🔐

Encryption

In transit and at rest

All data transmitted over HTTPS with TLS 1.3 (256-bit encryption)
OAuth tokens stored securely in our database with access controls
Passwords hashed with bcrypt (12 rounds) — we cannot read them
API keys stored as server-side environment variables, never in client code

🔑

Authentication

We never see your passwords

OAuth 2.0 for all social and Shopify connections — your credentials go directly to the platform, not through us
Tokens auto-rotate — expired tokens are refreshed automatically, old tokens invalidated
You can revoke Junna's access at any time from your platform settings (Instagram, Shopify, etc.)

🛡️

Infrastructure

Enterprise-grade hosting

Hosted on Railway with automatic SSL certificates
PostgreSQL database with encrypted connections
Rate limiting on all API endpoints to prevent abuse
Security headers via Helmet.js (HSTS, CSP, XSS protection)
No data stored in browser localStorage or cookies beyond session ID

📊

Audit Trail

Every access is logged

All data access is logged with timestamp, action type, and provider
Audit logs available upon request — contact us anytime
No employee has access to your raw social or Shopify data

What We Never Do

Never sell your data — to anyone, for any reason
Never share your data with other brands, advertisers, or third parties
Never store payment information — Stripe handles all billing
Never access more than we need — all scopes are read-only
Never post on your behalf — we analyze, we don't act
Never use your data to train AI models — your reports are yours
Never retain data after deletion — when you delete, it's gone

Your Rights

Access: Request a copy of all data we have about your brand
Delete: Request complete deletion of your account and all associated data
Export: Download your reports and analytics data at any time
Revoke: Disconnect any integration instantly from your account settings
Audit: Request a log of when and how your data was accessed

To exercise any of these rights, email privacy@junna.ai

AI & Your Reports

Reports are generated by Claude AI (Anthropic) using your brand inputs
Your data is sent to the AI only during report generation — it is not stored by the AI provider
Reports are saved to your account only — no one else can see them
Aggregate, anonymized insights may be used to improve Junna's recommendation accuracy — never individual brand data

Questions?

If you have any questions about how we handle your data, reach out:

Email: privacy@junna.ai
Or contact us through the platform