Jifflenow: Automatic Rolling Data Obfuscation

Managing personal data at scale has always required someone to remember to act. For organizations running dozens of events a year, manually initiating obfuscation is unsustainable; PII lingers in the system long after it should be gone, creating compliance risk and operational burden. Jifflenow now automates this with a configurable User Data Obfuscation policy: every week the system evaluates all users against the inactivity threshold, notifies the right Meeting Managers before acting, and executes automatically if no one intervenes. Meeting Managers configure the rules once: the inactivity period, which roles are in scope, and who gets notified, and the system handles the rest, with a full audit trail at every step.

Key Highlights

Policy Configuration: Meeting Managers with "Can manage settings" permission control the inactivity period (30–730 days), role scope, and notification recipients from the User Data Obfuscation settings page.

Weekly Evaluation: Every week, Jifflenow automatically reviews all users against the inactivity policy and data-kept safeguard, and builds a candidate list of users whose data is due for deletion.

Pre-Run Notification: Configured Meeting Managers receive an email at the start of the 7-day review window with a direct link to the deletion list and an explicit irreversibility warning.

Review Window: Meeting Managers with the "Can delete personal information of attendees" permission have 7 days to review the list, remove anyone they want to exclude, and confirm or let the window close to proceed with automatic execution.

Auto-Execution: If no action is taken within 7 days, Jifflenow automatically obfuscates all eligible, non-excluded users and sends a summary email upon completion.

Internal Users: Both internal and external attendee roles can be included in manual. For automatic obfuscation, admins select which user types and roles are in scope independently for each mode.

Why Does It Matter

Compliance Assurance: PII no longer lingers indefinitely; organizations can demonstrate a consistent, documented data-retention practice without relying on anyone to remember to run it.

Reduced Risk: The "data is kept for users with ongoing or upcoming events" safeguard and the 7-day review window prevent accidental deletion of users who are still active or have future engagements.

Role-Based Control: Separating the "configure" and "manage deletion" permissions means the right people control each part of the workflow: configuration stays with settings owners, and execution stays with privacy owners.

Broader Coverage: Internal attendees, requestors, and executive admins are now eligible for obfuscation, alongside external attendees, providing organizations with a complete view of their PII footprint.

Note

• This feature will be available via the Jifflenow web UI under Settings → User Data Obfuscation. Mobile and SFDC are not in scope for this release.

• The automatic obfuscation toggle will be off by default — a Meeting Manager with "Can manage settings" must explicitly enable it before any scheduled runs occur.

• The automatic evaluation runs on a fixed weekly cadence; the review window is a fixed 7 days.

• The inactivity threshold is configurable between 30 and 730 days.

• Disabling the feature stops future scheduled runs but does not reverse data that has already been obfuscated.

• Obfuscation is irreversible; it appears as a persistent warning on the review screen and in all notification emails.