Privacy Policy

This policy covers jimp.io, the Jimp dashboard, and the accounts of the professionals who use the service. It does not cover the websites our customers publish with Jimp: on those, the customer is the controller and answers for their own visitors' data.

Controller

PANDACORP SARL, 7B rue du Chapeau Rouge, 21000 Dijon, France (RCS Dijon 823 671 524). Contact for any privacy question: contact@jimp.io.

What we collect, and why

Data	Why	Legal basis
Account details (email, password hash, name, company, country)	Creating and running your account	Performance of the contract
Billing details (VAT number, invoicing address, subscription and payment history)	Charging you, issuing invoices, meeting tax obligations	Contract, and legal obligation
The sites you create and their configuration	Delivering the service	Performance of the contract
Technical logs (IP address, user agent, timestamps, error traces)	Security, abuse prevention, diagnosing failures	Legitimate interest in a service that works and is not abused
Support messages	Answering you	Contract, and legitimate interest

We do not sell personal data, and we do not use it for advertising profiling.

Payment data

Card and payment details are handled by our payment processor and are never stored on our systems. We receive the result of a payment, the amount, and what is needed to issue an invoice and prove where VAT is due.

Who processes data for us

We use a small number of providers, each acting on our instructions:

• Supabase (database and authentication)
• Cloudflare (delivery, storage, protection of the platform and the sites it serves)
• Vercel (hosting of this site and of the application)
• Railway (content ingestion services)
• Resend (transactional email)
• OpenRouter and Anthropic (text generation for the editorial features you trigger)
• our payment processor, for subscriptions and invoicing

Some of these providers operate outside the European Union. Where that is the case, transfers are covered by the European Commission's standard contractual clauses or an equivalent mechanism.

How long we keep it

• Account and site data: for as long as the account exists, then up to 12 months after closure so that an account can be restored and disputes resolved.
• Invoices and accounting records: 10 years, as French law requires.
• Technical logs: up to 12 months.
• Support messages: up to 3 years.

Your rights

You may ask for access to your data, its correction, its deletion, a copy in a portable format, or the restriction of its processing, and you may object to processing based on our legitimate interest. Write to contact@jimp.io; we answer within one month.

If you believe we have handled your data badly, you may complain to the French supervisory authority, the CNIL (www.cnil.fr), or to the authority of the country where you live.

Cookies

This site and the dashboard use cookies that are strictly necessary: keeping you signed in, remembering your language, and remembering that you chose to reveal blurred imagery. We do not use advertising cookies on jimp.io.

The websites our customers build with Jimp may embed third-party players and advertising, which set their own cookies. Those are governed by the policies of the third parties concerned and by the policy of the site you are visiting.

Changes

We will publish any change to this policy on this page, with the date of the revision above.