JhaX.ai is software for running restaurant operations. It brings tasks, vendors, purchase orders, invoices and payments together, so every location works from the same place.

Is there a free plan?

Yes. You can use JhaX.ai free for one location with the core features. Paid plans add more locations, approvals and integrations.

Does JhaX.ai work for multiple locations?

Yes. Add as many locations as you need, share vendors between them and compare results side by side.

Do I have to sign a contract?

No. Plans are month to month and you can cancel at any time.

Can I try the paid features first?

Yes. Try everything free for 14 days. You don't need a credit card to start.

How hard is it to learn?

Most teams are up and running within a few days. We include setup help and short how-to guides.

JhaX.ai: Purchasing, tasks and payments for multi-location restaurants.

1. What JHAX does

JHAX is an AI operations assistant for restaurants and small businesses. It connects to the systems a business already uses — its point of sale, its accounting software, its review profiles and, if the owner chooses, its email — reads the data from those systems, and turns it into dashboards, daily summaries, action items and plain-language answers about how the business is doing.

This policy explains what information JHAX collects, why it collects it, how it is stored and protected, who it is shared with, and how you can access or delete it. It applies to the JHAX web application and to every service you connect to it.

2. Information we collect, and why

What we collect	Why we collect it
Name	To identify your account, label your workspace, and attribute actions such as tasks and notes to the right person.
Email address	To create and sign you into your account, to send you service messages such as daily summaries and alerts, and to reach you about your account.
Phone number (only if you sign in by phone)	To send a one-time verification code and confirm it is you. We store a hashed PIN if you set one — never the PIN itself.
Payment and transaction details	Orders, sales, payments, tips, refunds and the related item and customer records read from the point-of-sale system you connect, plus bills and invoices from the accounting system you connect. Used to produce your sales dashboards, financial summaries, forecasts and the assistant's answers about revenue and costs.
Google account information (when you use Google login)	Your Google account identifier, name, email address and profile picture, received through Google sign-in. Used only to create and authenticate your JHAX account — we never receive your Google password.
Gmail data (only if you connect the Gmail connector)	Described in detail in section 3 below. Used to triage your inbox into action items and, at your request, to send replies.
Documents you upload	Bills, receipts and invoices you upload, including the original file or photo, so JHAX can read their fields, check for duplicates and — on your confirmation — record them in your accounting system.
Technical and usage information	Log data, error reports and basic feature usage, to operate, secure and debug the service.

We do not sell your data, and we do not use it for advertising or share it with advertisers.

JHAX is not a payment processor. It reads transaction records from the systems you connect; it does not take payments and does not store full card numbers or bank credentials.

3. Gmail data and the Gmail connector

The Gmail connector is optional and off until you turn it on. You enable it yourself from the Connectors page, and you grant access through Google's own OAuth consent screen. We never see or store your Google password.

Scopes we request

https://www.googleapis.com/auth/gmail.readonly — to read the messages the assistant triages.
https://www.googleapis.com/auth/gmail.send — to send a reply when you ask JHAX to send one. This scope can only send mail; it cannot read, label or delete anything.

What we access

Message metadata — sender, recipients, subject line and date.
Message content — the snippet and the plain-text body of the message.
Attachments on those messages, where a message needs one to be understood (for example an invoice PDF).

Why we access it

To triage recent mail and identify what actually needs the owner's attention, rather than making you read everything.
To turn actionable messages into tasks and action items inside JHAX.
To summarize threads and answer your questions about your inbox.
To draft and — only when you confirm — send a reply from your mailbox.

What we do not do

We do not delete, label or otherwise modify your mailbox. We do not request the gmail.modify scope.
We do not sell, rent or transfer Gmail data, and we do not use it for advertising.
We do not use Gmail data to train generalized artificial-intelligence or machine-learning models.
No human reads your mail, except where you ask us to for support or where the law requires it.

Limited Use

JHAX's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Turning it off

You can disconnect Gmail at any time from the JHAX Connectors page, or revoke JHAX's access directly at myaccount.google.com/permissions. Either action stops all further access; we then delete the stored Gmail access and refresh tokens.

4. How your data is stored and protected

Encryption in transit. All traffic between you, JHAX and every service we connect to travels over TLS/HTTPS.
Where it lives. The application runs on Google Cloud Run, and application data is stored in a managed PostgreSQL database. Data is stored and processed in the United States.
Credentials. OAuth access and refresh tokens for the services you connect are stored server-side, are never exposed to the browser, and are used only to make the calls described in this policy. Application secrets are held in Google Secret Manager, not in code.
Authentication. Sign-in is handled by Google Firebase Authentication. PINs, where used, are stored only as bcrypt hashes.
Access control. Each business's data is scoped to its own workspace. Access to production data is limited to the people who need it to operate the service.

5. AI processing

JHAX uses AI models to summarize your data, answer your questions, read fields from documents you upload and transcribe voice input. To do that, the relevant content — a receipt image, an email body, a computed data summary — is sent to our AI providers (Google Gemini for text and vision, Groq for speech) solely to generate a response for you. We do not permit these providers to use your content to train their models. AI output is generated automatically and can be wrong; treat it as a starting point, not as professional advice.

6. Third-party services we use

We share data only with the providers that make JHAX work, and only as far as the feature requires. These are the services actually used by JHAX:

Google Firebase Authentication — account creation and sign-in, including Google login.
Google Cloud Platform (Cloud Run, Cloud Build, Secret Manager) — hosting, deployment and secret storage for the application.
Managed PostgreSQL hosting (Google Cloud SQL / Neon) — the application database.
Google Gmail API — the optional Gmail connector described in section 3.
Google Business Profile and Google Places — your business's ratings and reviews.
Intuit QuickBooks Online — accounting data, read and (only on your confirmation) written back.
The point-of-sale and payments provider you connect — for example Square, Clover or Shift4 — to read the sales and transaction data you authorize.
Yelp — review and rating data, where you connect it.
Twilio — one-time passcodes and SMS notifications.
WhatsApp Business (Meta) — delivery of the daily business summary, where you opt in. Nothing is read from WhatsApp.
Google Gemini and Groq — the AI providers described in section 5.

We may also disclose information where the law requires it, or where it is necessary to protect the rights and safety of our users.

7. How long we keep your data

We keep your data for as long as your account is active, or as long as we need it to provide the service. When you disconnect a service, we delete the stored credentials for it. When you delete your account, we delete your account data and the connected data cached alongside it, except where we are required to retain records by law.

Records that JHAX wrote into another system at your direction — for example a bill synced to QuickBooks, or a reply sent from your mailbox — live in that system and are managed there, not by JHAX.

8. Accessing or deleting your data

You can, at any time:

Disconnect a service from the JHAX Connectors page — this stops all further access and deletes the stored tokens for that service.
Request a copy of the personal information we hold about you, or ask us to correct it.
Request deletion of your account and its associated data, including cached data from connected services and any documents you uploaded.

To make any of these requests, email jhapayapp@gmail.com from the address on your account. We will verify the request and action it within 30 days, and we will tell you if anything must be retained for legal reasons.

Depending on where you live, you may also have the right to export your data, object to certain processing, or withdraw consent. The same address handles those requests.

9. Children

JHAX is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, give additional notice.

11. Contact us

Questions about this policy, or about your data? Email jhapayapp@gmail.com.