Privacy Policy

1. Who we are

Jabbly ("Jabbly", "we", "us") is the controller of the personal data described in this policy. You can reach us at:

2. Scope

This policy covers our website (jabbly.com) and the Jabbly platform, where creators build platforms, digital products, courses, newsletters, drip campaigns, webinars and tracked shortlinks.

For data that creators collect from their own audience through Jabbly (subscribers, buyers, comments), the creator is the controller and Jabbly acts as a processor on their behalf, under section 8.

3. Data we collect

• Account data: name, email address, password hash, workspace and billing details.
• Content data: the platforms, products, courses, emails, campaigns and files you create.
• Audience data you upload or collect: subscriber names, email addresses, purchase and engagement records.
• Usage and analytics data: page views, clicks, link opens, downloads, completion, device and browser type, approximate location derived from IP, and referral source.
• Payment data: handled by our payment providers. We never store full card numbers.
• Support data: messages you send to hi@jabbly.com.

4. Why we use it and on what legal basis

• Performance of a contract: to provide your account, host your content, deliver emails, process purchases and gate access.
• Legitimate interests: to secure the service, prevent abuse and fraud, measure product usage and improve Jabbly.
• Consent: for non-essential analytics or marketing cookies and for marketing emails where consent is required. You can withdraw consent at any time.
• Legal obligation: to keep invoices and tax records.

5. Cookies and tracking

We use essential cookies to keep you signed in and to keep the service secure. We also use analytics to understand how the site and your links perform, including our own shortlink and pixel tracking features. Creators may add their own tracking pixels to their Jabbly pages; those are governed by the creator's own privacy policy.

6. Sharing your data

We share data only with providers that help us run Jabbly, including:

• Hosting and database infrastructure providers
• Payment processing (Stripe)
• Email delivery providers
• Product and website analytics providers

We do not sell personal data. We may disclose data if required by law or to protect our rights.

7. International transfers

Some providers may process data outside the European Economic Area. Where that happens we rely on adequacy decisions or the EU Standard Contractual Clauses with appropriate safeguards.

8. Jabbly as processor

When you use Jabbly to collect and email your own audience, you decide what data you collect and why. We process it on your documented instructions, keep it confidential, apply appropriate security measures, and delete or return it when your account ends. You are responsible for having a lawful basis for contacting your subscribers and for your own privacy notice.

9. Retention

We keep account and content data for as long as your account is active. After closure we delete or anonymise data within 90 days, except where we must keep records longer for legal or tax reasons (generally 7 years for invoices under Dutch law).

10. Security

We use encryption in transit, access controls, and least-privilege access to protect your data. No system is completely secure, so we cannot guarantee absolute security.

11. Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Email hi@jabbly.com and we will respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

12. Children

Jabbly is not intended for anyone under 16. We do not knowingly collect their data.

13. Changes

We may update this policy. Material changes will be announced by email or in the app. The date at the top shows the latest version.

14. Contact

Questions? Email hi@jabbly.com.