1. Who we are
JayJob Ltd is a company registered in England and Wales (Company No. 17402492). We provide the JayJob web application at jayjob.co.uk — a job management tool for UK sole traders and small trade businesses. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZC225222.
Contact us: contact@jayjob.co.uk
2. What data we collect
We collect the following categories of personal data:
- Account data: your email address and hashed password (stored by Supabase, our authentication provider)
- Profile data: your name, trade, business name, phone number, address, bank details (sort code and account number), and VAT number — provided by you during setup
- Job data: customer names, phone numbers, email addresses, job descriptions, addresses, values, dates, and notes — entered by you
- Financial data: expense descriptions, amounts, VAT, mileage, and receipt images — entered by you
- Usage data: our marketing website (jayjob.co.uk) and the app itself (app.jayjob.co.uk) both use Plausible Analytics, a privacy-focused analytics tool, to understand how the site and app are used. Plausible does not use cookies, does not track individuals across sites, and does not collect any personal data — it only reports aggregate, anonymous statistics (e.g. page views, which parts of the app are used, referral source, country). See Plausible's data policy for full detail.
- Marketing signup data: if you submit your email address via the "keep me posted" form on our marketing website, we store it so we can send you occasional updates about JayJob. You can unsubscribe or ask us to delete it at any time by emailing contact@jayjob.co.uk.
3. How we use your data
We use your data to:
- Provide and operate the JayJob application
- Generate AI-powered quotes, invoices, messages, and receipt scanning using Groq's API (see section 5)
- Sync your data across devices via Supabase cloud storage
- Send transactional emails (account verification, password reset) via Supabase
- Display notifications about overdue invoices, unanswered quotes, and upcoming jobs
- Improve the service based on aggregate, anonymised usage patterns
We do not use your data for advertising, sell it to third parties, or share it except as described in section 5.
4. Legal basis (UK GDPR)
- Contract performance (Art. 6(1)(b)): processing your account and job data to deliver the service you signed up for
- Legitimate interests (Art. 6(1)(f)): improving the service, preventing fraud, and maintaining security
- Consent (Art. 6(1)(a)): sending optional marketing communications (you can withdraw at any time)
5. Third-party processors
We share data with the following sub-processors:
- Supabase Inc. (USA) — cloud database, authentication, and file storage. Data is stored on servers in the EU (Ireland). Supabase Privacy Policy.
- Groq Inc. (USA) — AI text and image processing. When you use AI features (quotes, invoices, messages) or scan a receipt, the relevant job details or receipt image are sent to Groq's API for processing. Groq does not use this data to train models. Groq Privacy Policy.
- Stripe, Inc. (USA/Ireland) — payment processing for subscriptions. When you subscribe, your payment card details are handled entirely by Stripe — JayJob never sees or stores your card details. Stripe is also used for JayPay, our optional feature letting your own customers pay their invoices online by card — if you connect JayPay in Settings, your customers' payment details are likewise handled entirely by Stripe, never by JayJob directly. Stripe Privacy Policy.
- Xero (UK) Limited — optional, only if you choose to connect Xero in Settings. If connected, invoice and expense details you choose to sync are sent to your own Xero account. You can disconnect at any time in Settings. Xero Privacy Notice.
- Intuit Inc. (USA) — optional, only if you choose to connect QuickBooks in Settings. If connected, invoice and expense details you choose to sync are sent to your own QuickBooks account. You can disconnect at any time in Settings. Intuit Privacy Statement.
- Plaid Inc. (USA) — optional, only if you choose to connect your bank account in Settings (Open Banking). If connected, Plaid provides read-only access to your transaction history so JayJob can help populate your expenses — Plaid never gives JayJob or anyone else the ability to move money. You can disconnect at any time in Settings. Plaid End User Privacy Policy.
- FreeAgent Central Ltd (UK) — optional, only if you choose to connect FreeAgent in Settings. If connected, invoice and expense details you choose to sync are sent to your own FreeAgent account. You can disconnect at any time in Settings. FreeAgent Privacy Policy.
- Cloudflare Inc. (USA) — CDN and hosting. Cloudflare processes request metadata (IP addresses, browser type) for security and performance. Cloudflare Privacy Policy.
- Plausible Analytics OÜ (Estonia, EU) — website and app analytics for both jayjob.co.uk and app.jayjob.co.uk. Cookie-free, does not collect or process any personal data, reports aggregate statistics only. Plausible Data Policy.
- Google LLC (USA) — optional, only if you choose to connect Gmail in Settings. If connected, your Gmail inbox is read to automatically detect new customer enquiries (Communications feature). Only enquiry-relevant emails are processed and stored; you can disconnect at any time. Google Privacy Policy.
- Microsoft Corporation (USA) — optional, only if you choose to connect Outlook in Settings. If connected, your Outlook inbox is read to automatically detect new customer enquiries (Communications feature). Only enquiry-relevant emails are processed and stored; you can disconnect at any time. Microsoft Privacy Statement.
- Meta Platforms, Inc. / WhatsApp (USA/Ireland) — optional, only if you choose to connect your own WhatsApp Business number in Settings. If connected, messages sent and received through JayJob — including message content and your customers' phone numbers — are processed via Meta's WhatsApp Business Platform on your behalf. You are the data controller for your own customers' data processed this way; JayJob and Meta act as processors. WhatsApp Privacy Policy, WhatsApp Business Data Processing Terms.
- Calendly, LLC (USA) — used only on our marketing website (jayjob.co.uk), if you choose to book a demo call. Calendly processes the name and email you provide to schedule. Calendly Privacy Notice.
- Resend, Inc. (USA) — sends transactional and notification emails on our behalf, including replies to our contact form and the "keep me posted" signup on our marketing website. Resend Privacy Policy.
All processors are subject to Data Processing Agreements and operate under adequate transfer mechanisms (EU-US Data Privacy Framework or Standard Contractual Clauses).
Bank statement imports: if you upload a bank statement as a CSV or text file to help populate your expenses, the file is read and processed entirely within your browser — it is never uploaded to our servers or any third party. If you upload a PDF bank statement instead, the transaction text is extracted in your browser and then sent to Groq's API (see section 5) to identify individual transactions — PDF statement layouts vary too much to parse reliably without AI, the same processing already described above for receipt scanning. Only the individual transactions you choose to import are saved as expense records in your JayJob account.
6. Data storage and retention
Your data is stored in two places:
- Your browser (localStorage): a local copy is kept on your device for offline use
- Supabase cloud: if you configure cloud sync, data is stored in Supabase's EU (Ireland) data centre
We retain your data for as long as your account is active. If you delete your account, your data is removed from our live systems immediately. A copy may still exist in our automated encrypted backups for up to a further 7 days, after which it is permanently gone — well within the 30-day window described here. Local browser data is removed when you clear your browser storage.
7. Your rights (UK GDPR)
You have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate data (most data you can edit directly in the app)
- Erasure — delete your account and all associated data (available in Settings → Delete my account)
- Portability — download all your data as JSON (available in Settings → Export all data)
- Restriction — ask us to stop processing your data in certain circumstances
- Object — object to processing based on legitimate interests
To exercise any right, email contact@jayjob.co.uk. We will respond within 30 days.
Making a complaint: If you're unhappy with how we've handled your personal data, you can complain to us directly by emailing contact@jayjob.co.uk. We will acknowledge your complaint within 30 days, investigate it, and let you know the outcome without undue delay. If you're not satisfied with our response, you have the right to escalate your complaint to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and local storage
JayJob uses browser localStorage (not cookies) to store your data locally. We use a single session cookie for authentication managed by Supabase. We do not use advertising cookies or third-party tracking pixels.
See our Cookie Policy for full details.
9. Children
JayJob is a business tool intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via the app or by email. The "Last updated" date at the top will always reflect the current version.
11. Contact
JayJob Ltd
Email: contact@jayjob.co.uk
Website: jayjob.co.uk