GDPR · CCPA · Global Compliance
We build tools, not data empires. This document explains exactly what we collect, why we collect it, and the rights you hold over your information.
We Collect
We Never Collect
Data collection is limited to what is strictly necessary to operate the platform. Your email authenticates your account. Your IP address protects us both from abuse and unauthorized access. Usage logs help us identify bugs and improve performance. Nothing is sold, rented, or traded to third parties — ever.
All sensitive fields are encrypted at rest using AES-256. Data is stored on servers located in the region closest to your account. We enforce TLS 1.3 for all data in transit.
We use only essential cookies — session management and CSRF protection. We do not use advertising cookies, third-party trackers, or analytics platforms that profile you across the web. Any analytics we run are aggregated, server-side, and stripped of personally identifiable information.
We work with a minimal set of third parties, each bound by their own strict privacy standards:
Stripe
Payment processing. We never receive your raw card data.
Maya
Regional payment gateway. PCI-DSS Level 1 certified.
Cloudflare
DDoS protection & CDN. No behavioral profiling.
Under applicable global data protection laws — including GDPR and CCPA — you hold the following rights over your personal data:
Right to be Informed
Know what data we hold and why.
Right to Access
Request a copy of your personal data.
Right to Correction
Fix inaccurate or incomplete records.
Right to Erasure
Delete your account and all associated data.
Right to Object
Opt out of specific data processing activities.
Right to Portability
Receive your data in a machine-readable format.
Jrlicos Labs services are intended for users aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, contact us immediately and we will delete it.
If this policy changes in a material way, we will notify registered users via email at least 14 days before the new policy takes effect. Continued use of our services after that date constitutes acceptance.
To access, correct, or delete your data — or to ask any privacy-related question — reach out directly. We respond within 72 hours.