Privacy Policy
What personal data we collect, why we collect it, and the rights you have over it.
1. Who we are
Jupiter Day is operated by Jupiter Day Limited, registered in Wales (company number 17306753), registered office Brynmine, Llanfair Clydogau, Llanbedr Pont Steffan, Wales, SA48 8LJ. We are registered with the UK Information Commissioner's Office (ICO). Contact: privacy@jupiter-day.com. Our data protection contact is Lee Essex.
2. Controller and processor
For your own account data we are the controller. For personal data you put into your workspace about other people — your team, your contacts, your customers — you are the controller and we are your processor under our Data Processing Agreement.
3. Data we collect
Account and identity data: your name, email address, a hashed password and your workspace name. Team data: roles, assignments and invitations. Content you create: tasks, notes, comments, tags and attachments. Support and enquiries: messages you send us, including through the contact form. Anything you type to Aida, our built-in AI assistant. Collected automatically: your IP address, device and browser information, log data, and essential cookies. We do not collect payment card data.
4. How we use it, and our legal bases
Running your account and providing the service — performance of our contract with you. Managing your team, roles and invitations — contract and our legitimate interests. Sending service emails such as invitations, notifications and account notices — contract and legitimate interests. Security, abuse prevention and audit logging — legitimate interests and legal obligation. Providing support — legitimate interests. AI features — performance of our contract with you. Legal, accounting and tax compliance — legal obligation.
5. AI features (Aida)
AI requests are routed through the Lovable AI Gateway to Google's Gemini models. Lovable acts as our processor and Google acts as a sub-processor for AI inference. Content sent for processing can include the messages you type to Aida and the related content needed to answer them: task titles, notes, dates, team member names and email addresses, knowledge-base content and support-chat text. Aida acts only when prompted and proposes actions for your approval. We do not use your content to train our own models, and we have opted out of our AI provider using your content to train AI models.
6. Sub-processors
Lovable — hosting, content delivery, email and the AI gateway (US/EU). Supabase, running on AWS — database, authentication and file storage (EU — Ireland). Google — Gemini AI inference (US). Mailgun, via Lovable — delivery of our service emails (US). Cloudflare, via Lovable — preview images and static asset delivery (Global; no personal data). Zoho Mail — our own business mailboxes (EU). The current list is kept at jupiter-day.com/subprocessors. We do not sell your data and we do not share it for advertising.
7. International transfers
Your core account data and content are stored in the EU (Ireland). Some providers (Lovable, Google and Mailgun) may process data in the United States. Those transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
8. How long we keep it
Account data: deleted 90 days after account closure. Your content: deleted when your account is deleted. Audit and system logs: 12 months. Support conversations and contact-form messages: 24 months after last contact. Email delivery logs: 12 months. Unsubscribe and suppression records: kept for as long as needed to honour opt-outs. Billing and financial records: kept for 6 years to meet our tax and accounting obligations. Deleted data is removed from live systems within these windows. Backups are retained for a limited period and then automatically expire, so data may persist in a backup until then.
9. Cookies
We use essential cookies only, to keep you signed in and to keep your session secure. We do not use analytics, advertising or tracking cookies. If that changes we will update this policy and ask for your consent first.
10. Your rights
You have the right to access, correct, erase, restrict and object to the processing of your personal data, the right to data portability, and the right to withdraw consent where we rely on it. Email privacy@jupiter-day.com and we will respond within one month. Where your data sits in a workspace controlled by your employer, we may direct your request to them as the controller. You can also complain to the ICO.
11. Security
We use multi-factor authentication, database row-level security, encryption in transit and at rest, audit logging, EU hosting, and restricted access to production systems.
12. Children
Jupiter Day is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.
13. Changes to this policy
We may update this policy. We will notify you of material changes before they take effect.
14. Contact
Jupiter Day Limited, privacy@jupiter-day.com, Brynmine, Llanfair Clydogau, Llanbedr Pont Steffan, Wales, SA48 8LJ.