joana cerejo
Sign inBook a call

Legal

Privacy Policy

Last updated 28 July 2026

In short

  • We collect only what we need to run your account and the tools — your email, what you enter into the tools, and basic usage data.
  • We host in the European Union (Supabase) and never sell your data.
  • Marketing emails are opt-in and you can unsubscribe anytime.
  • You have full GDPR rights — access, correction, deletion, portability, objection.

1. Who we are

These tools at app.jcerejo.com are provided by Joana Cerejo (“we”, “us”), the data controller for the personal data described here. For any privacy question or to exercise your rights, contact support@jcerejo.com.

2. What we collect

  • Account data — your email address and authentication details (or, if you use Google/Microsoft sign-in, the basic profile those providers share).
  • Profile & preferences — your plan, and your newsletter consent and the time it was given or withdrawn.
  • Content you enter — the answers, projects, and reports you create in the tools.
  • Usage & technical data — logs, device/browser information, and cookies strictly necessary to keep you signed in.
  • Payment data — if you subscribe, billing is handled by Stripe; we receive subscription status, never your full card number.

3. Why we use it, and our legal basis

  • To provide the service (create your account, save your work, run the tools) — legal basis: performance of a contract.
  • To send product news & offers — only if you opt in; legal basis: consent, withdrawable anytime.
  • To secure and improve the tools (prevent abuse, fix bugs, understand usage) — legal basis: our legitimate interests.
  • To meet legal obligations (e.g. tax records for payments) — legal basis: legal obligation.

4. Who processes your data (sub-processors)

We use a small set of trusted providers, each under a data-processing agreement:

  • Supabase — database, authentication and hosting (EU region).
  • Vercel — application hosting and delivery.
  • Stripe — payment processing (for Pro subscriptions).
  • Brevo — sending the newsletter (only if you opt in).
  • Google / Microsoft — only if you choose to sign in with them.

5. International transfers

Your data is stored in the European Union. Where a provider processes data outside the EU/EEA, that transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep it

We keep your account and content for as long as your account is active. If you delete your account or ask us to, we delete or anonymise your personal data, except where we must retain some records to meet legal obligations. Newsletter records are kept until you unsubscribe.

7. Your rights

Under the GDPR you can, at any time:

  • access a copy of your data, and correct it if it’s wrong;
  • ask us to delete it, or restrict how we use it;
  • receive it in a portable format, and object to certain processing;
  • withdraw marketing consent anytime (via the toggle in your profile or the unsubscribe link);
  • complain to your local data-protection authority.

To exercise any of these, email support@jcerejo.com.

8. Cookies

We use only cookies that are strictly necessary to keep you signed in and secure. We do not use advertising or cross-site tracking cookies.

9. Changes to this policy

We may update this policy as the tools evolve. We’ll change the “last updated” date above and, for material changes, let you know in-app or by email.

Questions? Read our Terms or email support@jcerejo.com.