Privacy Policy

1. Introduction

Welcome to Jastrok ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including connected WhatsApp, email, and calendar features. Please read this policy carefully. If you disagree with its terms, please discontinue use of the service.

2. Information We Collect

We may collect the following categories of information:

• Account Information: Name, email address, company name, and authentication details when you register.
• WhatsApp Message Data: Message content, sender and recipient phone numbers, and timestamps processed on behalf of your business.
• Google Account and Calendar Data: Connected Google account email, calendar names, and calendar event details such as title, date, time, location, and description when you authorize these features.
• Usage Data: IP address, browser type, pages visited, and feature usage for security, analytics, and service improvement.
• Business Data: Connected account details, phone numbers, and integration settings needed to provide the service.

3. WhatsApp Data

When you connect WhatsApp to Jastrok, WhatsApp-related message events and account details are processed by our platform so we can provide the service you subscribed to. We do not sell WhatsApp message content to third parties. Your use of WhatsApp through Jastrok is also subject to Meta's own Privacy Policy and WhatsApp Business Platform policies.

4. Google User Data

When you connect a Google account, Jastrok uses the permissions you approve to provide the connected email and calendar features. Google Calendar event details read through the integration are displayed live inside your Jastrok workspace and are not stored in Jastrok's database as Calendar event content. We store the connection credentials required to maintain the integration securely, and we do not sell Google user data, use it for advertising, or use Google Workspace API data to train or improve generalized AI or machine learning models.

You can revoke Jastrok's access from the integration settings in Jastrok or from your Google Account permissions. You may also request deletion of associated data by contacting contact@jastrok.com.

Jastrok's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Legal Basis and GDPR Compliance

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using personal information under the General Data Protection Regulation (GDPR) includes:

• Contractual necessity: Processing required to deliver the service you requested.
• Legitimate interests: Security monitoring, fraud prevention, and service improvement.
• Consent: Where you have explicitly authorized a connected service or opted in to communications.
• Legal obligation: Compliance with applicable laws.

You have the right to access, rectify, erase, restrict, or port your personal data, and to object to its processing. To exercise these rights, contact us at contact@jastrok.com.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the service. Connected-account credentials are retained while the integration remains active. If you disconnect an integration, cancel your subscription, or request account deletion, associated data is deleted in accordance with the service workflow and within 30 days unless longer retention is required by law.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with trusted service providers that help us operate Jastrok, such as cloud infrastructure providers, under appropriate contractual and security obligations. We may disclose data when required by law or to protect our rights. In the event of a merger or acquisition, data may be transferred to the successor entity subject to this policy and applicable law.

8. Security

We implement security measures including encryption in transit, encryption of stored integration credentials, access controls, and tenant-scoped authorization. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Cookies

We use essential cookies to operate the service and may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings. We do not use advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the service, by email, or through a prominent website notice where appropriate.

11. Contact

For privacy-related questions or requests, contact us at:
contact@jastrok.com