This policy explains what personal data we collect when you use jjato.com or any app published under a jjato.com subdomain (for example, parkboard.jjato.com), what we use it for and what rights you have over it. We call jjato.com and those apps “the Services”.
Who is responsible
The data controller is Jaime Aza, an individual based in Colombia who builds and operates the Services. For anything about your data, write to contacto@jjato.com.
We process data in accordance with Colombia’s Law 1581 of 2012 and Decree 1377 of 2013 on personal data protection.
What we collect
When you sign in with Google
If you sign in with your Google account, Google shares with us, with your permission, only:
- your name,
- your email address,
- your profile picture,
- your Google account identifier.
We do not request access to your Gmail, contacts, Drive files or any other data in your Google account.
When you use an app
Each app stores the content you create in it so it can show it back to you, for example the cards and projects you create in Parkboard.
Technical data
To keep the Services working and secure, basic technical data is logged, such as IP address, browser type and the date and time of each request. We use strictly necessary cookies to keep you signed in. We do not use advertising or third-party tracking cookies.
How we use it
- To identify you and keep you signed in to the Services.
- To give you access to the apps and the content you create in them.
- To keep the Services secure and prevent abuse.
- To answer your messages and requests.
We do not sell your data, we do not use it for advertising and we do not share it with third parties for their own purposes.
Use of TikTok data
Some apps, such as boost.jjato.com, let you connect your TikTok account to publish your own videos. If you connect it, TikTok shares with us, with your authorization and only for the scopes you accept: your basic profile information (display name, avatar and ID), public statistics of your profile and videos (followers, views, likes), the list of your published videos, and permission to upload and publish the videos you choose.
We only publish the video, caption and privacy setting you define in the app. We never post anything without your instruction and we do not read your direct messages. TikTok data is used only to publish the content you request and to show you your post statistics inside the Services; it is not sold, not used for advertising and not used to train artificial intelligence models. You can disconnect your account at any time from the app or from TikTok settings (Settings and privacy → Security → Apps and services); when you do, we delete the access tokens.
Use of Google data
The Services’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to sign you in and to show your name and picture inside the Services; it is not used to train artificial intelligence models and is not transferred to third parties, except to the providers listed below in order to run the service.
Who we share it with
We rely on providers that process data on our behalf and under their own security measures:
- Clerk (authentication and session management),
- Vercel (website hosting),
- Railway (databases and app servers),
- Composio (secure connection to TikTok and other social networks, and custody of access tokens).
These providers may store data outside Colombia, mainly in the United States. By using the Services you authorize that transfer, which is made to providers that offer adequate levels of protection.
We may also disclose data when a competent authority lawfully requires it.
How long we keep it
We keep your data while you have an active account in the Services. If you ask us to delete your account, we delete your personal data and the content you created, except what we must keep by law.
Your rights
As the data subject you have the right to:
- know, update and correct your data,
- ask for proof of the consent you gave us,
- know how we have used your data,
- withdraw your consent and ask us to delete your data,
- file complaints with Colombia’s Superintendence of Industry and Commerce.
To exercise them, write to contacto@jjato.com from your account’s email. We will answer inquiries within 10 business days and claims within 15 business days, as required by law.
You can also remove the Services’ access to your Google account at any time from Google’s security settings.
Security
Connections to the Services are encrypted with HTTPS and access to data is restricted. No system is infallible, but we apply reasonable measures to protect your information.
Minors
The Services are not directed to people under 18 and we do not knowingly collect data from minors.
Changes to this policy
If we change this policy, we will publish the new version on this page with its update date. If the change is significant, we will let you know by email or inside the Services.
Contact
Jaime Aza · contacto@jjato.com · jjato.com