Who we are
The jakallabs app is provided by JAKALLABS LTD, registered in England and Wales, company number 17507001. Our registered office is Unit 12 Mica Close, Tamworth, England, B77 4DR. This notice covers app.jakallabs.co.uk. Our website privacy notice covers jakallabs.co.uk and enquiries. Our customer terms cover the service itself.
We are the controller of your account and billing information and of the records we keep to run, secure and support the app. For the information a business and its people put into their own business account, we act as a processor for that business: we use it only to provide the app on its instructions. If you are a member of a business, that business decides how its information is used, so please contact it first; we will help it respond.
Information we use
- Your account: accounts are by invitation only. We keep your name, email address and password, stored only as a secure hash, and your two-factor sign-in settings. Owners and admins of a business must use two-factor sign-in.
- Your business account: what you and your team add, such as members and their roles, product information and the websites we look after for you.
- Sign-ins and changes: we record sign-ins, failed sign-ins and changes made in the app, with the network they came from and the browser and system in a few words, such as "Chrome on macOS". We keep the network, not your full IP address: the first three parts of an IPv4 address (a /24), or a /48 for IPv6. A failed sign-in records why it failed, never what was typed.
- Emails: we send account, billing and service emails. We record who each email went to, its subject and type, and whether it was delivered, opened, bounced or marked as spam. We do not keep the email's content, and we do not store which link was clicked.
- Payments: payments are taken by Revolut. Card details go straight from your browser to Revolut and never reach us. We keep the billing name, email, address and any VAT number, and what Revolut tells us about a saved card: its brand, last four digits and expiry date. We issue and keep our own invoices.
- The assistant: the app's AI assistant answers questions from your business's own data, limited to what your role can already see in the app. Questions and answers are logged. Questions that look harmful or off-limits are flagged for our staff to review.
- Notifications: if you turn on notifications in a browser, we keep that browser's push subscription so your browser's push service can deliver them.
The app uses only essential cookies, to keep you signed in and protect your requests. It uses no advertising or marketing cookies.
Activity in the app
Inside a business's account, the app records the screens people open and the buttons they press. It records a screen's name, never its address, and nothing anyone types. We use these events to support customers, investigate problems and improve the app. Our staff see them; they are kept for 13 months and then deleted.
This is the app's own record of activity in your business's account. It sets no cookies of its own, is shared with nobody and is not used for advertising, so the app does not follow your browser's Do Not Track setting.
Owners and admins of a business can see what its own people changed, and the emails sent to them, under Settings › Activity.
When our staff view your account
To help with a problem, our staff can view a business as one of its members. This is read only, lasts 30 minutes, needs a fresh two-factor code to start and is logged in our admin records.
Why we use it
- Providing the app: to run your account, your business account, payments, emails and the assistant. We rely on performance of our contract with your business, or our legitimate interest in providing the app to the people a business invites.
- Security and support: our legitimate interest in protecting accounts, preventing abuse, resolving faults and helping customers, including the activity records above.
- Business obligations: legal requirements, including accounting, and our legitimate interest in handling legal claims.
We do not sell personal information or make solely automated decisions with legal or similarly significant effects.
Keeping your information
- Screens and buttons: 13 months, then deleted automatically.
- Website visit statistics: for websites a business connects, individual visits are kept 13 months and daily totals 16 months.
- Invoices and payment records: as long as accounting law requires.
- Accounts and business accounts: while the account is in use, and afterwards only as needed for contracts, accounting or legal claims.
- Sign-ins, changes, emails and assistant conversations: kept for security and support while we set a fixed period. We will add it to this notice when it is set.
- Backups: database backups and exports are deleted after 35 days.
We use access controls, encryption in transit and separation between businesses to protect this information. Contact us about retention of your particular information.
Your rights
Subject to legal conditions, you can request access, correction, deletion, restricted use or a portable copy of your personal information. Email sales@jakallabs.co.uk to make a request. We may need to confirm your identity. For information a business controls, we will pass your request to that business or help it respond.
Your right to object
You can object to processing based on legitimate interests for reasons relating to your circumstances, and to any direct marketing at any time.
Contact and complaints
Email sales@jakallabs.co.uk or write to our registered office with a question or concern. You also have the right to complain to the Information Commissioner's Office.
We review this notice as the app changes. The date above shows its latest update.