This policy covers the JourneyMaker website at journeymaker.io and the application at app.journeymaker.io. Account, project, AI, and workspace features described below apply when you use the application.
What information do we handle?
Some information comes from you, and some is created as you use JourneyMaker.
- Your account: name, email, sign-in information, and preferences. Clerk provides account authentication.
- Your projects: product descriptions, research, personas, journeys, conversations, documents, images, website links, and generated results.
- Your subscription and usage: plan and transaction references, subscription status, generation jobs, and usage measurements for access, billing, and limits. ThriveCart and its payment providers process payments; we don’t store your full payment-card details.
- Technical information: page visits, feature events, device and browser information, approximate location, and diagnostic records.
- Connections and support: connection details and access tokens for services you connect, such as Figma or Canva, and information you send when you contact us, including your name, email address, and details about your project or team.
How do we use your information?
We use it to run your account and workspaces, import content, generate and save results, support sharing and exports, manage subscriptions and usage limits, answer support requests, and maintain the service. Usage statistics help us improve features and reliability.
JourneyMaker does not display advertising.
When you add a website or App Store link for analysis, we retrieve relevant content from that source. Please only provide content you have permission to use, including any necessary permission to process client research or another person’s personal information.
How does AI process your content?
JourneyMaker uses Microsoft Azure OpenAI for AI generation and analysis. Relevant prompts, project details, extracted document text, images, or linked content are processed through Azure to produce the results you request.
We do not use your project content to train an AI model of our own.
Microsoft states that Azure OpenAI inputs and outputs are not used to train foundation models or improve Microsoft or third-party products without your permission or instruction. They are not made available to OpenAI or other customers.
Microsoft may process content for safety, abuse prevention, and service operation under its applicable data privacy terms.
Where is information stored and protected?
We use service providers to deliver different parts of JourneyMaker.
The application uses HTTPS connections to its hosted services. Connected-account access tokens are encrypted and stored on the server.
Who can access private project records?
Access requires an authenticated account. Database rules restrict direct access to project records to their owner and authorized workspace collaborators. Workspace access follows current membership, including removal. Server-only records use separate server access controls.
File links have the separate access limits described in the next section.
International processing
The service providers listed above may store or process information outside the country where you live. Processing locations depend on the provider and service configuration. JourneyMaker does not currently offer a country-specific storage or processing guarantee.
If your organization requires data to remain in a particular country, contact support@gamethinking.io before uploading it.
Scheduling a demonstration
Our website links to Calendly for scheduling demonstrations. Information you enter there is processed by Calendly under its privacy policy and shared with us to arrange your meeting.
Legal and security disclosures
We may disclose information where required by law, or where reasonably necessary to investigate fraud or misuse, protect people and the service, or respond to a security incident.
How do analytics and diagnostics work?
In the application, we use Vercel Web Analytics for page statistics and feature events, such as generation, imports, exports, and sharing. It does not use third-party cookies.
Our application’s page-event filtering removes query values and replaces identifying project, workspace, and share values with non-identifying placeholders. Product-event fields describe an action or file format, rather than your project’s content.
Sign-in and connected services may use cookies or similar technology to operate. Operational records can include errors, request metadata, and usage information; these are separate from product analytics.
How long do we keep information?
Project content remains in active storage until you delete it.
When you delete a project
We remove its active project records, associated jobs, published snapshots, and files that no surviving project or library item uses.
When you delete your account
We remove active JourneyMaker records, connected credentials, identifiable files owned only by you, and your sign-in account. Cleanup may wait for running generation or temporary upload permissions to finish. If cleanup fails, your account remains available so you can retry or contact support.
What may remain
Other people’s copies, provider logs, and backups may remain under their own retention schedules. Older files without an identifiable owner or stored reference may need additional cleanup. Billing providers may retain some transaction records for accounting or legal purposes. We do not promise immediate erasure from backups or external services.
What choices do you have?
- Edit your content and manage workspace membership.
- Unpublish a storyboard snapshot or delete a project.
- Download your active records or delete your account in Settings.
- Revoke a connected service’s permissions in that provider’s account settings.
About your export: the Settings download is a machine-readable JSON file with active records and stored file links. It does not include the files themselves or provider backups.
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information. Email support@gamethinking.io to make a request or discuss your organization’s privacy requirements. We may need to verify your identity and authority before acting.
Updates and questions
We will update the policy date when this policy changes. We will communicate material changes through the service or an account contact channel.
Let’s make it clear.
If you have a privacy question or need help with a request, contact us at support@gamethinking.io
Provider references
JourneyMaker is operated by Gamethinking Inc.
This page last updated October 21, 2026