Privacy Policy
Last updated 2026-09-17
This policy covers jimp.io, the Jimp dashboard, and the accounts of the professionals who use the service. It does not cover the websites our customers publish with Jimp: on those, the customer is the controller and answers for their own visitors' data.
Controller
PANDACORP SARL, 7B rue du Chapeau Rouge, 21000 Dijon, France (RCS Dijon 823 671 524). Contact for any privacy question: contact@jimp.io.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Account details (email, password hash, name, company, country) | Creating and running your account | Performance of the contract |
| Billing details (VAT number, invoicing address, subscription and payment history) | Charging you, issuing invoices, meeting tax obligations | Contract, and legal obligation |
| The sites you create and their configuration | Delivering the service | Performance of the contract |
| Technical logs (IP address, user agent, timestamps, error traces) | Security, abuse prevention, diagnosing failures | Legitimate interest in a service that works and is not abused |
| Support messages | Answering you | Contract, and legitimate interest |
| Forum profile and messages (pseudonym, avatar, bio, website, country, what you post, the images you attach, a hash of your IP address at sign-up and at each message) | Running the forum, keeping it readable, identifying who published what when the law requires it | Performance of the contract, and legal obligation for the identification data |
We do not sell personal data, and we do not use it for advertising profiling.
Payment data
Card and payment details are handled by our payment processor and are never stored on our systems. We receive the result of a payment, the amount, and what is needed to issue an invoice and prove where VAT is due.
Who processes data for us
We use a small number of providers, each acting on our instructions:
- Supabase (database and authentication)
- Cloudflare (delivery, storage, protection of the platform and the sites it serves)
- Vercel (hosting of this site and of the application)
- Railway (content ingestion services)
- Resend (transactional email)
- OpenRouter and Anthropic (text generation for the editorial features you trigger)
- our payment processor, for subscriptions and invoicing
Some of these providers operate outside the European Union. Where that is the case, transfers are covered by the European Commission's standard contractual clauses or an equivalent mechanism.
How long we keep it
- Account and site data: for as long as the account exists, then up to 12 months after closure so that an account can be restored and disputes resolved.
- Invoices and accounting records: 10 years, as French law requires.
- Technical logs: up to 12 months.
- Support messages: up to 3 years.
- Forum: the IP hashes 12 months; messages for as long as the forum exists, anonymised when the account is deleted unless you ask for their erasure.
Your rights
You may ask for access to your data, its correction, its deletion, a copy in a portable format, or the restriction of its processing, and you may object to processing based on our legitimate interest. Write to contact@jimp.io; we answer within one month.
If you believe we have handled your data badly, you may complain to the French supervisory authority, the CNIL (www.cnil.fr), or to the authority of the country where you live.
The forum
On jimp.io/forum, your pseudonym, avatar, bio, website, country and messages are public and indexed. Your email address never is; other members reach you through mentions and replies, and the notification emails we send (through Resend) can be turned off in your forum settings or from the link in each email. Images you attach are stored on Cloudflare R2 and served from media.jimp.io. When you delete your account, your profile, avatar and images are erased and your messages stay online under an anonymous author; tick "also erase my forum messages" on the deletion screen, or write to us, to have them erased as well. Reports sent from the forum keep the reporter's account or email address for as long as the report is open, then in the moderation log.
Cookies
This site and the dashboard use cookies that are strictly necessary: keeping you signed in, remembering your language, and remembering that you chose to reveal blurred imagery. We do not use advertising cookies on jimp.io.
The websites our customers build with Jimp may embed third-party players and advertising, which set their own cookies. Those are governed by the policies of the third parties concerned and by the policy of the site you are visiting.
Changes
We will publish any change to this policy on this page, with the date of the revision above.