Privacy Policy
Effective [effective date]
Draft for review. This document is a working draft prepared for the demo. It is not legal advice and has not been reviewed by an attorney. Bracketed items must be completed before it is used with paying customers.
This policy explains how JEZT Digital ("we") handles personal information in JEZT Digital Console (the "Service").
1. Our two roles
- For our customers' business records (for example, a store's customer list, contacts and notes), the business using the Service decides what is collected and why. We process that information on the business's behalf and only under its instructions. Questions about those records should go to that business.
- For people who use the Service (store owners and staff), we decide how account and security information is handled, as described below.
2. Information we collect
| What | Examples | Why |
|---|---|---|
| Account information | Name, email, phone, role, workspace | To create accounts, sign you in and let administrators manage access |
| Security information | Password (stored only as a one-way hash), authenticator settings (encrypted), recovery codes (hashed), trusted-browser records, sign-in history | To keep accounts secure and investigate misuse |
| Business records you enter | Customer accounts, contacts, addresses, notes, documents such as exemption numbers | To provide the Service to the business that entered them |
| Technical information | IP address (stored in audit logs only as a keyed, one-way code), browser type, pages requested, error logs | Security, troubleshooting and preventing abuse |
| Sign-in provider details (optional) | If you use Google or Microsoft sign-in: the provider's account identifier, email and name | To connect that sign-in to your account |
We do not sell personal information, and we do not use Customer Data to train artificial-intelligence models or for advertising.
3. Cookies
The Service uses only essential cookies: a session cookie that keeps you signed in, and, if you choose "remember this computer", a trusted-browser cookie. There are no advertising or cross-site tracking cookies.
4. How we share information
We share information only with service providers that help us run the Service, under contracts that require them to protect it, or when required by law. Current providers may include:
- Web hosting and databases: Hostinger
- Email delivery (the email account configured by the administrator)
- Google or Microsoft, only if sign-in with those providers is turned on and you use it
- Payment processors and accounting software, only when a business turns those features on
5. Security
We protect information with encryption in transit (HTTPS) and for sensitive secrets at rest, strong password hashing, two-step verification, role-based permissions, per-business data separation, rate limiting and an audit log of sign-ins and changes. No system is perfectly secure; we will notify affected customers without undue delay if we learn of a breach affecting their data, as required by law.
6. Retention
We keep account and business information while the business's subscription is active. After it ends, we keep data available for export for 30 days and then delete it from active systems; backups expire on their normal schedule. Audit and security logs are kept for up to [retention period, e.g. 24 months] to investigate security events.
7. Your choices and rights
You can view and update your profile under My account. Depending on where you live (for example California, Colorado, Virginia or other states with privacy laws), you may have rights to access, correct, delete or obtain a copy of your personal information. If your information is in a business's records, contact that business first; we will help them respond. You can also contact us at [privacy contact email]. We will not discriminate against you for exercising your rights.
8. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
9. Where data is stored
Data is stored in the United States unless the business's agreement says otherwise.
10. Changes
We will post updates here and, for material changes, notify account administrators by email or in the Service.
11. Contact
JEZT Digital · [business mailing address] · [privacy contact email]