Short version:
- we try to collect as little information as we can
- we do not run an ads business
- we do not sell personal data
- we only use your information to run the hosted service, secure accounts, handle billing, and support the product
What We Collect
Account information
When you create an account, we may store:
- your email address
- your name, if you provide one
- your profile image, if your login provider sends one
- your login provider identifiers
- password-reset and email-verification records
- session records such as IP address and user agent
If you use Google sign-in, we receive the account information Google shares for authentication, such as your email address, name, and avatar.
Billing information
If you pay for hosted service, billing is handled by Stripe.
We store operational billing data such as:
- Stripe customer IDs
- Stripe subscription IDs
- billing status
- plan-related metadata needed to keep your hosted sites online
We do not store your full payment card details ourselves.
Hosted service data
To operate hosted sites, we also process service data such as:
- hosted site names and site keys
- managed and custom domains
- site memberships
- provisioning, lifecycle, and retention status
- storage and quota metadata used to operate hosted media limits
Your site content and media are part of the hosted service too. They are not the control-plane's main data model, but we still process them as needed to host, deliver, retain, export, and delete your site.
Email delivery and operational logs
If we send password reset or email verification messages, we may process:
- your email address
- the delivery provider metadata needed to send the message
- basic operational logs and error logs
What We Do Not Do
We do not use your data to:
- build an advertising profile
- sell personal data
- broker your information to data resellers
- track you across unrelated websites for marketing purposes
We are not trying to know more about you than the service actually needs.
How We Use Information
We use information to:
- create and secure your account
- sign you in and keep sessions working
- send verification and recovery emails
- provision and operate hosted sites
- handle billing and plan lifecycle
- prevent abuse, spam, fraud, and security incidents
- respond to support requests
- improve the reliability of the service
When We Share Information
We only share information with service providers that are needed to run the hosted product. Depending on which features you use, that may include:
- Stripe for billing
- Google for sign-in
- AWS SES for transactional email delivery
- hosting, storage, DNS, and infrastructure providers used to run Jant
We may also disclose information if we reasonably believe we have to do so to comply with law, protect the service, or respond to abuse or security issues.
Retention
We keep data for as long as it is needed to run the service and honor the hosted lifecycle.
Current hosted lifecycle rules:
- canceling a paid hosted plan keeps the site online until the paid period ends
- after expiry, hosted site data enters a 90-day retained window
- explicit
Delete site nowcan bypass that retained window and proceed to permanent deletion
Operational backups and logs may remain for a limited period after deletion.
Your Choices
You can:
- choose whether to use Google sign-in
- request password reset and email verification
- delete hosted sites
- cancel renewal for a paid hosted plan
If you need help with account deletion, data export, or privacy questions, use
the contact address listed on jant.me.
Security
We use reasonable technical and operational measures to protect the service, but no hosted system can promise absolute security.
You are responsible for keeping your account credentials safe and for securing devices that you use to access the service.
Changes
We may update this policy as the product evolves. If the changes are material,
we will update the date at the top and, when appropriate, provide clearer
notice inside the service or on jant.me.