Privacy Policy

1. Who we are

JayJob Ltd is a company registered in England and Wales (Company No. 17402492). We provide the JayJob web application at jayjob.co.uk — a job management tool for UK sole traders and small trade businesses. We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZC225222.

Contact us: contact@jayjob.co.uk

2. What data we collect

We collect the following categories of personal data:

• Account data: your email address and hashed password (stored by Supabase, our authentication provider)
• Profile data: your name, trade, business name, phone number, address, bank details (sort code and account number), and VAT number — provided by you during setup
• Job data: customer names, phone numbers, email addresses, job descriptions, addresses, values, dates, and notes — entered by you
• Financial data: expense descriptions, amounts, VAT, mileage, and receipt images — entered by you
• Usage data: our marketing website (jayjob.co.uk) and the app itself (app.jayjob.co.uk) both use Plausible Analytics, a privacy-focused analytics tool, to understand how the site and app are used. Plausible does not use cookies, does not track individuals across sites, and does not collect any personal data — it only reports aggregate, anonymous statistics (e.g. page views, which parts of the app are used, referral source, country). See Plausible's data policy for full detail.

3. How we use your data

We use your data to:

• Provide and operate the JayJob application
• Generate AI-powered quotes, invoices, messages, and receipt scanning using Groq's API (see section 5)
• Sync your data across devices via Supabase cloud storage
• Send transactional emails (account verification, password reset) via Supabase
• Display notifications about overdue invoices, unanswered quotes, and upcoming jobs
• Improve the service based on aggregate, anonymised usage patterns

We do not use your data for advertising, sell it to third parties, or share it except as described in section 5.

4. Legal basis (UK GDPR)

• Contract performance (Art. 6(1)(b)): processing your account and job data to deliver the service you signed up for
• Legitimate interests (Art. 6(1)(f)): improving the service, preventing fraud, and maintaining security
• Consent (Art. 6(1)(a)): sending optional marketing communications (you can withdraw at any time)

5. Third-party processors

We share data with the following sub-processors:

• Supabase Inc. (USA) — cloud database, authentication, and file storage. Data is stored on servers in the EU (Frankfurt). Supabase Privacy Policy.
• Groq Inc. (USA) — AI text and image processing. When you use AI features (quotes, invoices, messages) or scan a receipt, the relevant job details or receipt image are sent to Groq's API for processing. Groq does not use this data to train models. Groq Privacy Policy.
• Stripe, Inc. (USA/Ireland) — payment processing for subscriptions. When you subscribe, your payment card details are handled entirely by Stripe — JayJob never sees or stores your card details. Stripe Privacy Policy.
• FreeAgent Central Ltd (UK) — optional, only if you choose to connect FreeAgent in Settings. If connected, invoice and expense details you choose to sync are sent to your own FreeAgent account. You can disconnect at any time in Settings. FreeAgent Privacy Policy.
• Cloudflare Inc. (USA) — CDN and hosting. Cloudflare processes request metadata (IP addresses, browser type) for security and performance. Cloudflare Privacy Policy.
• Plausible Analytics OÜ (Estonia, EU) — website and app analytics for both jayjob.co.uk and app.jayjob.co.uk. Cookie-free, does not collect or process any personal data, reports aggregate statistics only. Plausible Data Policy.
• Google LLC (USA) — optional, only if you choose to connect Gmail in Settings. If connected, your Gmail inbox is read to automatically detect new customer enquiries (Communications feature). Only enquiry-relevant emails are processed and stored; you can disconnect at any time. Google Privacy Policy.
• Microsoft Corporation (USA) — optional, only if you choose to connect Outlook in Settings. If connected, your Outlook inbox is read to automatically detect new customer enquiries (Communications feature). Only enquiry-relevant emails are processed and stored; you can disconnect at any time. Microsoft Privacy Statement.
• Meta Platforms, Inc. / WhatsApp (USA/Ireland) — optional, only if you choose to connect your own WhatsApp Business number in Settings. If connected, messages sent and received through JayJob — including message content and your customers' phone numbers — are processed via Meta's WhatsApp Business Platform on your behalf. You are the data controller for your own customers' data processed this way; JayJob and Meta act as processors. WhatsApp Privacy Policy, WhatsApp Business Data Processing Terms.
• Twilio Inc. (USA) — optional, only if you use JayJob's SMS features. Twilio processes the recipient's phone number and message content to deliver the SMS. Twilio Privacy Policy.
• Plaid Inc. — optional, only if you choose to connect your bank account in Settings for automatic transaction import (Open Banking). Plaid is a regulated financial data provider. You can disconnect at any time. Plaid Privacy Policy.
• Calendly, LLC (USA) — used only on our marketing website (jayjob.co.uk), if you choose to book a demo call. Calendly processes the name and email you provide to schedule. Calendly Privacy Notice.

All processors are subject to Data Processing Agreements and operate under adequate transfer mechanisms (EU-US Data Privacy Framework or Standard Contractual Clauses).

Bank statement imports: if you upload a bank statement CSV to help populate your expenses, the file is read and processed entirely within your browser — it is never uploaded to our servers or any third party. Only the individual transactions you choose to import are saved as expense records in your JayJob account.

6. Data storage and retention

Your data is stored in two places:

• Your browser (localStorage): a local copy is kept on your device for offline use
• Supabase cloud: if you configure cloud sync, data is stored in Supabase's EU (Frankfurt) data centre

We retain your data for as long as your account is active. If you delete your account, your data is removed from our live systems immediately. A copy may still exist in our automated encrypted backups for up to a further 7 days, after which it is permanently gone — well within the 30-day window described here. Local browser data is removed when you clear your browser storage.

7. Your rights (UK GDPR)

You have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate data (most data you can edit directly in the app)
• Erasure — delete your account and all associated data (available in Settings → Delete my account)
• Portability — download all your data as JSON (available in Settings → Export all data)
• Restriction — ask us to stop processing your data in certain circumstances
• Object — object to processing based on legitimate interests

To exercise any right, email contact@jayjob.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies and local storage

JayJob uses browser localStorage (not cookies) to store your data locally. We use a single session cookie for authentication managed by Supabase. We do not use advertising cookies or third-party tracking pixels.

See our Cookie Policy for full details.

9. Children

JayJob is a business tool intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via the app or by email. The "Last updated" date at the top will always reflect the current version.

Your rights under GDPR

As a data subject, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (the "right to be forgotten").
• Right to restrict processing: Ask us to limit how we use your data.
• Right to data portability: Receive your data in a machine-readable format — use the Export function in Settings.
• Right to object: Object to processing of your data for certain purposes.

To exercise any of these rights, email contact@jayjob.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.

11. Contact

JayJob Ltd
Email: contact@jayjob.co.uk
Website: jayjob.co.uk