Privacy Policy

1. Introduction

JasperOps LLC ("Company", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, website, and services (collectively, the "Platform").

By using JasperOps, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

Key Privacy Principles:

• Data Ownership: You own your data. We do not claim ownership of your business information.
• Data Portability: You can export your data at any time in common formats.
• Data Security: We implement industry-standard security measures to protect your data.
• No Data Selling: We never sell your personal or business data to third parties.
• Google Drive Integration: Your product images are stored in your own Google Drive — we never access them without your permission.

2. What Data We Collect

We collect the following types of data to provide and improve our services:

2.1 Personal Information

• Account Information: Name, email address, phone number, and company name.
• Profile Information: Profile photo, job title, and preferences.
• Billing Information: Payment method details (processed through our secure payment partners — we never store full payment card details).
• Communication Data: Emails, chat messages, and support tickets.

2.2 Business Information

• Product Data: Product names, SKUs, descriptions, images, prices, and attributes (weight, purity, stone details, etc.).
• Inventory Data: Stock levels, transfers, and movements per outlet.
• Customer Data: Customer names, contacts, purchase history, and loyalty information.
• Production Data: BOMs, work orders, and quality control records.
• Financial Data: Invoices, purchase orders, and transaction records.
• Certificate Data: GIA/IGI certificates and documentation.

2.3 Technical & Usage Data

• Log Data: IP address, browser type, operating system, and access times.
• Usage Data: Pages visited, features used, and interaction patterns.
• Device Data: Device type, screen resolution, and app version.
• Google Drive Data: Access tokens to store product images (with your explicit permission).

2.4 Data We Do NOT Collect

3. How We Use Your Data

We use your data for the following purposes:

4. Legal Basis for Processing (GDPR)

For users in the European Union (EU) and the United Kingdom (UK), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide the Platform services you have requested.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving the Platform and marketing our services.
• Consent: You have given explicit consent for specific processing activities (e.g., marketing communications).
• Legal Obligation: Processing is required to comply with legal obligations.

5. Data Sharing & Third Parties

5.1 Third-Party Service Providers

We share your data with trusted third-party service providers who assist us in operating the Platform:

• Payment Processors: Paddle, Lemon Squeezy, Stripe, and PayPal for payment processing.
• Google Drive: For storing product images (with your explicit permission).
• Email Services: For sending transactional and marketing emails.
• Analytics Providers: For understanding Platform usage and improving our services.
• Hosting Providers: Cloud infrastructure for Platform hosting.

5.2 Data We Do NOT Share

5.3 Legal Compliance

We may disclose your data if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations.
• Protect the rights, property, or safety of JasperOps, our Users, or the public.
• Prevent or investigate potential fraud or illegal activities.

6. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256).
• Access Control: Role-based access control limits who can view or modify data.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Data Backup: Regular automated backups to prevent data loss.
• Secure Authentication: Two-factor authentication support and strong password requirements.

7. Data Retention

We retain your data only as long as necessary for the following purposes:

• Active Accounts: Data is retained for the duration of your subscription and 30 days after cancellation.
• Legal Compliance: We may retain data longer to comply with legal obligations (e.g., tax records for up to 7 years).
• Anonymized Data: We may retain anonymized data for analytics purposes indefinitely.

You may request deletion of your data at any time by contacting us at legal@jasperops.com.

8. Your Rights (GDPR & Other Laws)

Depending on your location, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Restrict Processing: Request restricted processing of your data.
• Right to Data Portability: Export your data in a structured, commonly used format.
• Right to Object: Object to specific processing activities.
• Right to Withdraw Consent: Withdraw consent at any time.

9. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on the Platform:

• Essential Cookies: Required for basic Platform functionality (authentication, security).
• Preference Cookies: Remember your language and display preferences.
• Analytics Cookies: Help us understand how Users interact with the Platform.
• Marketing Cookies: Used for targeted advertising (with your consent).

You can manage your cookie preferences through your browser settings or the cookie consent tool on our website.

10. Children's Privacy

JasperOps is not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18. If we become aware that we have collected data from a child under 18, we will delete it promptly.

11. International Data Transfers

JasperOps is based in Indonesia. Your data may be transferred to and processed in countries outside your country of residence, including:

• United States: For hosting and infrastructure (Google Cloud).
• Singapore: For regional infrastructure and support.
• Australia: For backup and disaster recovery.
• European Union: For GDPR-compliant data processing.

We ensure that all data transfers comply with applicable laws and include appropriate safeguards, such as Standard Contractual Clauses (SCCs) for transfers from the EU/UK.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Email notification to your registered email address.
• Posting the updated Privacy Policy on our website.
• In-app notification when you log in.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was last revised. Your continued use of the Platform after changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: