Privacy policy

Last updated: 30 July 2026

What we collect

• Account data — your email address and a password (stored hashed by our authentication provider, Supabase).
• Request content — everything you enter in the builder: goods, addresses, time windows, and contact details (names, phone numbers, emails) of pickup and delivery contacts. You are responsible for having the right to share those third-party contact details.
• Usage events — when a brief is exported, copied, or saved, we record the action, its outcome, and your plan tier for product statistics.
• Billing data — handled by Stripe; we store only your Stripe customer reference and subscription status, never card numbers.

Cookies

Strictly necessary cookies (your authentication session, an admin-only preview preference) are always set. One optional analytics cookie is set only if you accept the banner — it lets us recognize returning visits; declining keeps fully anonymous, cookieless page counting. No advertising or cross-site tracking cookies, ever. Withdraw your choice any time:

Processors

Supabase (database and authentication), Stripe (payments), Mapbox (address search — your typed address queries are sent to Mapbox to return suggestions), Sentry (error monitoring), PostHog (cookieless usage statistics and, if you allow it, navigation recordings that show us where Jaly gets confusing — anything you type and your customers' details are hidden from them, EU region), and Vercel (hosting, Web Analytics, and Speed Insights).

Retention

Account and request data are kept while your account exists. Deleting your account from the account page permanently removes your profile, saved requests, and export history.

Your rights (GDPR)

You can access, rectify, export, or erase your data. Deletion is self-service on the account page; for anything else contact privacy@jaly.app. You may also lodge a complaint with the CNIL.