Privacy Policy

1What we collect

• Account data. Your email address and a hash of your password.
• Billing data. Amounts, dates and the last four digits of a card. The card number goes straight to the payment processor and never reaches our servers.
• Task data. The captcha payload you send and the answer we return. This is whatever your request contains, which is why clause 7 of the Terms asks you not to put personal data in it.
• Usage data. Request counts, task types, timestamps, response times, errors and the IP address a request came from.
• Support data. Whatever you write to us, and our reply.

2Why we collect it

• to run the service, return solves and keep your balance right
• to bill you and to stop payment fraud
• to find and fix faults, and to size capacity
• to detect abuse under clause 3 of the Terms
• to answer you when you write to us
• to meet a legal duty when one applies

3The basis we rely on

Account, billing and task data are processed because we need them to give you the service you asked for. Usage and abuse data are processed because we have a legitimate interest in keeping the service working and safe. Where a law requires us to keep a record, we keep it for that reason.

We do not run behavioural advertising and we do not build a profile of you for anyone else.

4Who else sees it

Only the suppliers that make the service run, and only the part each one needs:

• the payment processor, for card details and the charge
• the cloud hosts that run the API, the database and the backups
• the email provider that sends account mail
• the error and metrics tools that record a failed request

Each is bound by contract to use the data only for us. We do not sell personal information and we do not share it for cross-context advertising. See Do not sell my info.

We will hand data to an authority only where a valid legal order requires it, and we will tell you unless the order forbids it.

5How long we keep it

• Task payloads and answers: 24 hours, then deleted.
• Usage records: 12 months, then reduced to counts with no IP address.
• Billing records: as long as tax and accounting law requires.
• Account data: until you close the account, then 30 days, then deleted. Backups roll off within a further 30 days.

6Your rights

Whatever law covers you, we will action these:

• ask for a copy of what we hold on you
• ask us to correct something that is wrong
• ask us to delete your data and close the account
• ask us to send your data to you in a machine readable file
• object to processing we do on a legitimate interest basis
• complain to your data protection regulator

Write to privacy@jevcha.com. We confirm inside 10 days and answer inside 30. We will ask you to prove you control the account email before we act, because the request itself is a way to attack an account.

7Cookies

There is no analytics tag, no advertising pixel and no third party tracker anywhere on this site. Logging in sets one cookie, which is the session itself and nothing more, and logging out clears it. If that ever changes, this section changes with it and the date at the top moves.

8Where it is processed

Our suppliers operate in more than one country, so your data may be processed outside the country you are in. Where that happens we rely on the standard contractual clauses or an equivalent safeguard.

9Children

JevCha is a developer tool and is not for anyone under 16. We do not knowingly hold data about a child. If you believe we do, write to privacy@jevcha.com and it will be deleted.

10Changes

We update this policy when the service changes. The date at the top is the version you are reading. A change that materially widens what we collect is emailed to the address on the account before it takes effect.

11Contact

privacy@jevcha.com reaches the people who handle this policy and every request under clause 6.