Summary: we collect only what we need to run appointments, teams, and billing — and we never sell your data. You control access, deletion, and export at any time.

1. What we collect

• Account: name, email, phone, tenant/role — to authenticate and authorize.
• Operational: bookings, services, staff schedules, inventory moves — scoped to your tenant.
• Technical: device, IP, auth logs, reCAPTCHA score — for security, fraud and lockout.
• Support: messages you send via Contact — retained to resolve cases.

We do not collect payment card numbers directly; Stripe/PayPal process payments.

2. How we use it

• Provide the service, enforce roles/permissions, and sync calendars.
• Secure access (lockout, 2FA, audit log) and prevent abuse.
• Support, product updates, and aggregated analytics (cohorts, never per-user marketing).

3. Sharing

We share only with processors you enable: email/SMS (Twilio), payments, and hosting. Each tenant’s data is isolated; host cannot read tenant data without an explicit impersonation audit.

4. Retention

Active tenant data retained while subscription is active. Logs 12 months, then anonymized. On tenant deletion, data is soft-deleted then purged after 30 days (backups 90 days).

5. Your rights

Access, correction, export, and deletion requests: contact us or email support@jotech.ae. We respond within 30 days. For EU/UAE PDPL, you may also lodge with your supervisory authority.

6. Security

TLS in transit, AES-256 at rest, tenant-isolated UoW, RBAC, and audit trails. SOC 2 controls in progress.

7. Cookies

Essential cookies only (auth, anti-forgery, tenancy). No ad tracking. Manage via browser; blocking auth cookies prevents login.

8. Changes

We’ll notify 14 days before material changes. Continued use after the effective date is consent.

Back to sign in