Privacy Policy

1. Data we process

• Account: your name, email, and a securely hashed password.
• Profile you publish: display name, age, headline, bio, company, job title, location, phone, avatar/banner images, resume, and social links. Age is kept private and is never shown on your public card.
• Connections: the profiles you save and who saves you (your network).
• Tap analytics: when your card or link is tapped we store an anonymous, aggregate count. We store a one-way hash of the visitor’s IP address (never the raw IP), a shortened browser string, and approximate country/city. You can turn tap logging off in your privacy settings.
• Security data: device sessions (a hashed device identifier and browser string) used to keep you signed in and to detect token misuse, and an append-only audit log of privileged actions.

2. Why we process it (lawful bases)

We process account, profile, and connection data to provide the service you asked for (contract). Optional data such as phone and age are processed with your consent. Tap analytics and security data are processed under our legitimate interest in running and securing the product; you can object to tap analytics by opting out. We keep the audit log to meet our accountability and security obligations.

3. Cookies and similar technologies

Jarvo uses only strictly-necessary client storage: a secure, HTTP-only cookie to keep you signed in; Cloudflare Turnstile for bot protection on sign-up and sign-in; and an in-browser device signal used solely to bind your session to your device for security. We do not use advertising, marketing, or cross-site tracking cookies. Because all of this is essential to the service, we show a brief notice rather than a consent wall.

4. Who we share it with (sub-processors)

We host on Cloudflare (application, database, file storage) and use Resend for occasional transactional email. These providers process data on our behalf under data-processing agreements. We do not sell your data.

5. How long we keep it

Account and profile data are kept for the life of your account. Tap analytics are kept on a rolling basis and you can clear them at any time. The security audit log is retained as a minimal, permanent accountability record and survives account deletion. When you delete your account we erase your profile, files, connections, and sessions.

6. Your rights

Depending on your location (including the EU/UK under the GDPR) you may have the right to access, correct, export, delete, or restrict processing of your data, and to object to certain processing. In Jarvo you can:

• Access & export your data from Dashboard → Account → Export.
• Correct your data in the profile editor.
• Delete your account from Dashboard → Account.
• Opt out of tap logging in your privacy settings.

To exercise any right, or to complain, email support.evenworks@gmail.com. You also have the right to lodge a complaint with your local data-protection authority.

7. Security

We protect data in transit with TLS and at rest with our providers’ encryption. Passwords, refresh tokens, and IP addresses are stored hashed. Access to administrative functions is restricted and every privileged action is logged.

8. Changes

We may update this policy; we will change the “last updated” date above and, for material changes, notify you in the app.