- 1. Who we are
- 2. What we collect
- 3. Why we use it
- 4. Who we share it with
- 5. How long we keep it
- 6. Your rights
- 7. Cookies and local storage
- 8. Security
- 9. Changes to this policy
- 10. Contact
1. Who we are
Joltura is operated by [legal company name], registered at [street, postcode, city], the Netherlands, Chamber of Commerce (KvK) number [KvK number]. We are responsible for the personal data described in this policy.
2. What we collect
- Account details: your name, email address and password when you sign up. Passwords are stored encrypted; we can't read them.
- What you create: the messages you type to our AI, and the projects you build.
- Waitlist and contact forms: your name, email address and the message you send us.
- Payment details: when you upgrade, your payment is handled by our payment provider. We never see or store your full card number.
- Technical data: basic information needed to keep the service running and secure, such as your browser type and when you signed in.
3. Why we use it
- To provide Joltura: creating your account, running your projects and answering your messages (performance of our contract with you).
- To keep it safe and improve it: preventing abuse and fixing problems (our legitimate interest).
- To keep you informed: emails about your account, and waitlist updates you asked for (contract or consent).
- To meet legal duties: for example keeping invoices for tax purposes (legal obligation).
We don't sell your personal data, and we don't use it for advertising.
4. Who we share it with
We only share data with companies that help us run Joltura, under agreements that protect your data:
- Supabase: our database and login system. Your data is stored in the EU (Frankfurt, Germany).
- Anthropic: the AI that answers the messages you type into Joltura.
- Our payment provider [Stripe or Mollie]: processes payments.
- Our hosting provider [Netlify, Vercel or Cloudflare]: serves the website.
- Our email provider [e.g. Resend]: sends account and password emails.
Some of these companies may process data outside the EU. When they do, we rely on safeguards approved by the European Commission, such as Standard Contractual Clauses.
5. How long we keep it
We keep your account data for as long as you have an account. When you delete your account, we delete your personal data within [30] days, except where the law requires us to keep it longer, such as invoices, which Dutch law requires us to keep for 7 years. Waitlist and contact messages are deleted when they are no longer needed.
6. Your rights
Under the GDPR (in Dutch: AVG) you have the right to:
- see the personal data we hold about you;
- correct data that is wrong;
- have your data deleted;
- receive your data in a format you can take elsewhere;
- object to or limit how we use your data;
- withdraw your consent at any time, where we rely on it.
To use any of these rights, contact us. If you're unhappy with how we handle your data, you can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies and local storage
Necessary cookies are always on: they keep you signed in, keep the site secure and remember whether you prefer light or dark mode.
Analytics and marketing cookies are only used if you allow them in the cookie notice. You can change your choice at any time with Cookie settings at the bottom of the page.
8. Security
We protect your data with encrypted connections (HTTPS), encrypted passwords and strict access rules, so each user can only reach their own data. No system is perfectly secure, but we work hard to keep yours safe.
9. Changes to this policy
We may update this policy as Joltura grows. When we make important changes, we'll let you know by email or on the website before they take effect.
10. Contact
Questions about your privacy? Email us at hello@joltura.com or use our contact page.