Privacy Policy — Jhotter

This Privacy Policy explains how jhotter ("we", "us") collects, uses, and protects information when you use Jhotter (the "Service"). jhotter acts as the data controller for personal data processed through the Service.

Who we are

The Service is operated by jhotter. You can contact us at support@jhotter.app for any privacy-related questions or to exercise your rights.

Information we collect

Account data: name, email, and authentication identifiers.
Content: project notes, tracker rows, and exports you create.
Usage data: counts of builds and feature interactions used to enforce plan limits.
Technical data: cookies, IP address, and similar identifiers (see our Cookie Policy).
Support data: messages you send to us.

How we use information

To provide and improve the Service (contract performance).
To process your notes through AI providers to generate trackers and summaries (contract performance).
To bill subscriptions and prevent abuse (contract performance and legitimate interests).
To send service emails about your account (contract performance).
To comply with legal obligations.

Sub-processors and data sharing

We share data with the following categories of recipients strictly to operate the Service:

Paddle.com Market Limited — our Merchant of Record for payments, subscription management, tax compliance, and invoicing.
Supabase — authentication, database, and storage hosting.
Cloudflare — application hosting, edge compute, and CDN.
OpenAI and Anthropic — AI model inference for generating trackers and summaries from your notes.
Professional advisers (legal, accounting) and authorities where required by law.

Data retention

We retain account data while your account is active and for up to 12 months after account closure, after which it is deleted or anonymised. Billing and tax records are retained for the period required by applicable law (typically 6–7 years). You may delete your account at any time.

Your rights

Subject to your local law (including UK GDPR and EU GDPR), you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. You may also lodge a complaint with your local supervisory authority. To exercise your rights, contact support@jhotter.app. We will respond within one month.

International transfers

Data is primarily processed in the United Kingdom, European Economic Area, and United States. Where data leaves the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and least-privilege administration.

Children

The Service is not intended for users under 16.

Changes

We will update this page when our practices change and update the date above.