Privacy Policy
1. Information Collection
We collect information you provide directly to us when you:
- Create an account
- Use our service
- Communicate with us
This may include your name, email address, and any other information you choose to provide.
2. Use of Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Communicate with you about our services
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities in connection with our services
- Detect, investigate, and prevent fraudulent transactions and other illegal activities
- Comply with legal obligations
3. Information Sharing and Disclosure
We may share personal information as follows:
- With your consent
- With vendors, consultants, and other service providers who need access to such information to carry out work on our behalf
- In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process
- If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of Djoby, our users, or others
Our service providers include:
- Hetzner (DE) - for hosting services
- Amazon SES (USA) - for email processing and delivery
These providers process your data under strict data processing agreements with appropriate safeguards for international data transfers.
3.1 Legal Bases for Processing
We process your personal data under the following legal bases:
- Contract fulfillment: To provide our services to you
- Legitimate interests: For analytics and service improvement
- Legal obligation: To comply with legal requirements
- Consent: Where specifically required by law
3.2 Email Processing
We use Amazon SES to handle our email communications. When processing emails, we share:
- Email addresses
- Email content and subject lines
- Metadata (timestamps, delivery status, open rates)
Amazon SES processes this data on US-based servers under strict data processing agreements that include Standard Contractual Clauses for international data transfers. You have the right to request information about your email data, opt-out of non-essential emails, and request deletion of your email data.
4. Data Security
We take reasonable measures to help protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.
5. Data Retention
We store the information we collect about you for as long as is necessary for the purpose(s) for which we originally collected it. We may retain certain information for legitimate business purposes or as required by law.
6. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request that your personal information be corrected or deleted
- Object to or restrict our processing of your personal information
- Request a copy of your personal information in a structured, commonly used, and machine-readable format
To exercise these rights, please contact us at hello@djoby.com.
7. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top of this policy.
8. Contact Us
If you have any questions about this privacy policy, please contact us at hello@djoby.com.
9. Data Location and International Transfers
We store and process your data on servers located in the United States through our service providers DigitalOcean and Mailgun. When we transfer your personal data outside of the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) with our service providers. These transfers are necessary for the performance of our contract with you and to provide our services effectively.
10. Supervisory Authority
If you are located in the European Union and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).