Privacy Policy

1. Who we are

[Company legal name], [Registered address], runs Joley. For your account information we are the controller. For the contacts and subscribers you collect and email through Joley, you are the controller and we process that data on your behalf, only to provide the Service. Contact: [contact email].

2. What we collect

• Account data: your name, email address, a hash of your password (never the password itself), and when you signed in.
• Workspace content: launches, copy, conversations with the coach, settings, and the contacts, sign-ups and social posts you manage.
• Usage and security records: an activity log of important actions (sign-ins, changes, sends), with IP addresses stored only as a one-way keyed hash.
• Billing: handled by Stripe. We store your plan and Stripe customer reference, never your card details.
• Email engagement: for emails sent through Joley, whether they were opened or links were clicked, to show you results.

3. Cookies

• A session cookie keeps you signed in (essential).
• On launch pages, a cookie remembers a subscriber so they can comment and see the next video (essential to that feature).
• When someone follows a tracked social link, a 30-day cookie records which post they came from, so sign-ups can be attributed to it.

We don't use advertising cookies or sell data to anyone.

4. Why we use it

• to provide the Service you signed up for (contract);
• to keep it secure, prevent abuse and keep records the law requires (legitimate interests and legal obligation);
• to send account emails such as password resets, confirmations and billing notices.

5. Who we share it with

Only the service providers needed to run Joley, under contracts that protect your data:

• hosting and database: [hosting provider], [database provider];
• payments: Stripe;
• account emails: [platform email provider];
• providers you connect: your chosen AI provider (your prompts and drafts go to it), your email provider, and social networks, Zernio or Ayrshare.

Data may be processed outside your country; where required, we use standard contractual clauses or equivalent safeguards.

6. How long we keep it

While your account is active. Deleting your account deletes it, along with any workspace where you were the only member. Backups are kept for [14] days and then overwritten. Activity-log entries may be kept for [12 months] for security.

7. Your rights

You can see, correct, export and delete your data: download your account data or delete your account in Settings → Account, and workspace owners can export everything in Settings → Workspace. For contacts on a customer's list, please contact that customer; they can erase a person in Joley with one click. You may also complain to your data protection authority.

8. Security

Passwords are hashed; saved API keys and provider credentials are encrypted; each customer's data is separated at the database level; and connections use HTTPS. If a breach affects your data, we'll tell you without undue delay.

9. Changes

We'll post updates here and tell you about material changes before they take effect.