In short
| Who is responsible | Dmitry Dontsov, NIF Y6863460K · info@jampres.com |
|---|---|
| What for | Running JamPres and your account, making presentations with AI, publishing them, sending service emails, keeping the service secure, answering questions in the support chat on the website, and taking payments |
| Legal bases | Our contract with you, legal obligations, our legitimate interests and, where we ask for it, your consent |
| Who else receives data | Providers who work for us — hosting, database, AI models, email — listed in section 8; Stripe and its Link service for payments; authorities when the law requires it. Some providers are based in the United States |
| Your rights | Access, rectification, erasure, restriction, portability, objection, withdrawing consent, and complaining to the Spanish Data Protection Agency (AEPD) |
| Cookies | Only the sign-in cookie when you are signed in. Published presentations set no cookies |
If you viewed a presentation or filled in a form in one, the person or organisation that published it is responsible for that data, and we process it on their behalf — see section 5.
1. Who is responsible
The controller of your personal data is Dmitry Dontsov, NIF Y6863460K, who runs JamPres at jampres.com (“we”, “us”). Other contact details are in the Legal notice.
Postal address: Calle Rioja nº 13 1º C, C.P. 41001 Sevilla, España.
For any question about your personal data or to exercise your rights, write to info@jampres.com. We have not appointed a data protection officer because the law does not require us to.
2. Who this policy is for
- Account holders — people who sign in to JamPres (section 3);
- people who try JamPres without an account (section 4);
- viewers of presentations published with JamPres and people who fill in forms or vote in polls in them (section 5);
- visitors to jampres.com and people who write to us (section 6).
3. Account holders
3.1 What we process and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email address; if you sign in with Google, the name and profile picture Google gives us; interface and email language | Creating your account and signing you in | Contract | While the account exists |
| Your content: text you enter, presentations, templates, images, fonts and files you upload, comments | Providing the Service | Contract | Until you delete it or your account; backup copies disappear within 30 days |
| Text sent to AI models to draft and check presentations, and descriptions of images you ask them to draw | Making presentations and images with AI | Contract | We keep only the result in your account; the providers’ handling is described in section 8 |
| Records of each AI run: time, model, size of the request, cost | Applying usage limits, measuring our costs, preventing abuse | Legitimate interest | While the account exists |
| Invitations, roles and presence of people working with you on a presentation | Working together | Contract | While the presentation exists; invitation emails are sent and then deleted within 2 days |
| Service emails: sign-in links, invitations, comment notifications, view summaries, new form responses, notices of changes to these documents | Running the Service and sending the notices the law requires | Contract; legal obligation | While the account exists. You can switch off notifications in your account; sign-in emails and legally required notices are always sent |
| Plan, subscription status, country and payment status received from Stripe; credit packs bought (pack, price, date, Stripe payment reference); credits spent (action, presentation, date and whether they came from your plan or a pack) | Managing your plan, credits and credit packs | Contract; legal obligation (tax and accounting) | While the account exists; accounting records for as long as the law requires (currently up to 6 years) |
| IP address and browser details in server logs; sign-in attempts; counters of attempts based on a hashed IP address | Security, preventing fraud and abuse | Legitimate interest | Hashed counters up to 48 hours; server logs up to 30 days, longer only if needed for an investigation |
| Error reports from your browser: the error message and where in our code it happened, the page address without parameters, browser and operating system versions, and your account if you are signed in | Finding and fixing faults | Legitimate interest | 30 days |
| Messages to support and complaints | Answering you and handling complaints | Contract; legal obligation | 3 years after the matter is closed |
| Reports of illegal content and our decisions | Complying with the Digital Services Act | Legal obligation | 3 years |
| Acceptance of the Terms and other records of compliance | Being able to show that we comply with the law | Legal obligation; legitimate interest | While the account exists and up to 5 years afterwards |
We do not send advertising. If we ever start a newsletter, we will ask for your consent first.
When you delete your account, everything listed above is deleted except what the law requires us to keep. Comments you left on other people’s presentations remain, but without your name and email address.
3.2 Signing in with Google
If you choose “Continue with Google”, Google confirms your identity to us and gives us your email address, name and profile picture. Google processes this sign-in as an independent controller under its own privacy policy.
3.3 Payments
Payments go through Stripe’s merchant of record service: the subscription or pack is sold to you by Link (Sold through Link, LLC), part of Stripe, which takes the payment, charges tax, issues receipts and invoices and handles payment questions. Stripe and Link process your payment data as independent controllers under their own privacy policies: link.com/privacy-center and stripe.com/privacy. We receive your name, email address, country, the plan or pack you bought and the payment status, but never your full card details.
3.4 AI models
To draft a presentation and check it against your text, we send the text you provided and the parts of the presentation being worked on to the AI providers listed in section 8. To draw an image, we send Google’s image model the description you wrote, the chosen style and the colours of your presentation. The providers process this on our behalf and return the result; every image carries an invisible SynthID watermark identifying it as generated by AI.
If you paste a link to a web page, our server opens that page once to take its text. The site sees a request from our server and your interface language, but not your IP address or your cookies. We don't store the address, and from then on the page text is handled like text you provided.
To answer you in the support chat on the website, we also send your chat messages to the AI providers (section 6).
- We do not use your content to train AI models.
- We use providers under terms that do not allow them to use your content to train their models.
- Please do not enter health data or other sensitive information about yourself or other people unless you need to.
3.5 No automated decisions
We do not take decisions about you based solely on automated processing that have legal or similarly significant effects. Decisions to restrict content or accounts are taken by a person.
3.6 If you do not give us your data
We need your email address to create an account and the content you want to work with to make presentations. Without them we cannot provide the Service.
4. Trying JamPres without an account
When you make a presentation without signing in, we process the text you enter and the presentation generated from it to provide the Service (contract or steps at your request before a contract), and a hashed version of your IP address to limit the number of free attempts and prevent abuse (legitimate interest). Before the presentation is generated, your browser solves a small computational puzzle that protects us from bots; no third party is involved.
The presentation is kept for 7 days so that you can save it to an account, and then deleted. Your text and a reference to the presentation are also kept in your browser’s local storage so that nothing is lost when you sign in (section 7).
5. Viewers of published presentations and people who fill in forms
Presentations published with JamPres are made and published by our users. The person or organisation that published a presentation is the controller of the personal data collected through it — the responses to its forms and the email addresses entered to open it — and we process that data on their behalf under a data processing agreement. To exercise your rights over it, contact the publisher; their identity is shown on the page or next to the form. If you cannot reach them, write to info@jampres.com and we will pass your request on.
5.1 Viewing statistics without cookies
Published presentations set no cookies and store nothing on your device. While a presentation is open, the page sends our server short technical messages: which slide is shown and for how long.
From these messages and the request itself we produce statistics for the publisher. Your IP address and browser details are combined with a random value that changes every day and is deleted after 24 hours; the result is a code that cannot be traced back to you and does not let anyone recognise you on another day. We store that code, the time, the slides viewed and for how long, the website you came from (its domain only), your approximate country and the type of device. We do not store your IP address or browser details. The publisher sees aggregated figures. These records are kept for up to 24 months and then deleted.
We do this on behalf of the publisher, and on our own behalf in aggregated form to understand how the Service is used (legitimate interest).
5.2 Presentations that ask for your email address
Some publishers ask for your email address before showing a presentation. In that case the publisher can see that you, identified by that email address, opened it and how long you spent on each slide. You are told this before you enter your email address.
5.3 Forms and polls
If you send a form, what you enter goes to the publisher, who also gets an email notification. Together with your answers we store the time of sending and the exact notice and consent text you were shown, so that the publisher can show that consent was given. The answers are kept until the publisher deletes them.
In polls we count votes per option and do not record who voted.
To protect forms, polls and password-protected presentations from spam and abuse, your browser solves a small computational puzzle, and we keep counters based on a hashed IP address for up to 24 hours.
5.4 Content from other services
Stock images in presentations are loaded from the servers of Pexels, so Pexels receives your IP address and browser details when you view them. Videos and other content embedded from services such as YouTube or Vimeo load only when you click them; until then nothing is requested from those services.
5.5 Our own processing
We also process technical data about requests to published presentations as controller, for security and to prevent abuse (legitimate interest), as described in section 3.1.
If the page fails in your browser, it sends us an error report: the error message and where in our code it happened, the page address without parameters, and the browser and operating system versions. The report is not linked to you and contains no IP address; to limit the number of reports, we keep a counter based on a hashed IP address for up to 24 hours. Reports are kept for 30 days (legitimate interest: finding and fixing faults).
6. Visitors to jampres.com and people who write to us
The website uses no advertising or analytics cookies and no third-party trackers. Our servers log technical data about requests (IP address, browser, time) for security, kept for up to 30 days. If a page fails in your browser, it sends us an error report as described in section 5.5; if you are signed in, the report is linked to your account (section 3.1).
Visit statistics without cookies. When opened, the website's pages (home, gallery, legal documents, sign-in and the no-account trial) tell our server the page address, the language, the site you came from (its domain only) and any campaign tags in the link (utm); sometimes also what you did: started creating a presentation, started signing in, reached the pricing section, saw the invitation to the support chat or opened the chat. As with publications (section 5.1), your IP address and browser details are combined with a random value that changes every day and is deleted after 24 hours, producing a code that cannot identify you on another day. We store this code, the time, the page, the domain, the tags, an approximate country and the device type — not your IP address or browser details — and we store nothing on your device. These records are kept for up to 25 months (legitimate interest: understanding how the site is found and used). If you create an account the same day, we record in it the page, site and campaign you first came from, to understand which channels bring users (legitimate interest); this is kept for as long as the account exists.
Support chat. On the website's pages, questions are answered by the JamAI assistant — an AI, as the “AI” label and the line under the input field say. To answer, we send your messages, the language and the address of the page to our server and to the AI providers (section 8); if you ask for the team, their reply appears in the chat window while it is open, and otherwise comes by email to the address you left; the notification about a new request that the team receives contains only its number, language and topic. The conversation is kept in your browser's session storage until you close the tab (section 7). We only need your email if you decide to pass the question to the team yourself, and we do not send newsletters to it.
| Data | Why | Legal basis | How long |
|---|---|---|---|
| The chat conversation — without your email or IP address; if you type an email address or phone number in a message, we remove it from the stored copy | Answering your question; understanding what people ask and what the website is missing | Legitimate interest | 7 days after the last message |
| Details of answers without their text: time, language, topic, whether an answer was found | Chat statistics | Legitimate interest | 25 months |
| Counters based on a hashed IP address | Preventing abuse: a daily limit on questions and requests to the team | Legitimate interest | 24 hours |
| A request to the team: the email you left, the conversation with the assistant and with the team, the language, the page, the version of the text under the email field, whether the chat window picked up the reply | Replying to you in the chat window or by email | Your request (steps before entering into a contract) or our legitimate interest in answering enquiries | 12 months after the last message |
If you write to us or report content, we process your message and contact details to answer you and, for reports of illegal content, to handle them as the Digital Services Act requires (legal obligation; 3 years).
7. Cookies and storage on your device
| Name | What it is for | How long |
|---|---|---|
| Sign-in cookies (sb-…-auth-token) | Keeping you signed in to your account | Until you sign out or the session expires |
| Google sign-in cookie (jp-google) | Linking Google’s reply to the sign-in you started, so that nobody can slip in a forged one | 10 minutes, deleted once you are signed in |
| Local storage: text typed on the home page, a reference to a presentation made without an account, the time of the last free attempt | Not losing your work when you sign in; limiting free attempts | Until the presentation is saved to your account or you clear your browser data |
| Local storage in the editor: recent colours, workspace layout, grid | Remembering the settings you chose | Until you clear your browser data |
| Session storage: that you chose not to move a presentation made without an account to the account you signed in with | Not asking you again in the same tab | Until you close the tab |
| Session storage: the support chat conversation, time on the website before the chat invitation, whether you closed the invitation | Keeping the conversation when you move between pages and not showing the invitation again | Until you close the tab |
These are strictly necessary for the Service you asked for, or remember choices you made, so they do not require consent (Article 22.2 LSSI). We use no advertising, analytics or third-party cookies. Published presentations store nothing on viewers’ devices.
8. Who receives personal data
We share personal data only with:
| Provider | What for | Where data is processed |
|---|---|---|
| Supabase Inc. | Database, sign-in and sign-in emails, file storage, real-time collaboration | European Union |
| Vercel Inc. | Hosting the website, the app and published presentations | European Union (Ireland) |
| Scaleway SAS (France) | AI model that drafts presentations; backup model of the support chat on the website | European Union (France) |
| Google LLC | AI models (Gemini) that check presentations against your text, draw images from your descriptions and answer in the support chat on the website; Google sign-in, as independent controller | United States and other countries |
| Resend Inc. | Sending service emails: invitations, notifications, summaries | European Union |
| Pexels GmbH (Germany) | Stock images and video. We send it only search words; viewers load images from it directly (section 5.4) | European Union |
| Stripe: Sold through Link, LLC and Stripe Technology Europe, Limited (Ireland) | Payments — as independent controllers | European Union and United States |
Providers that work for us process data only on our instructions under contracts that meet Article 28 of the GDPR. We tell account holders by email at least 30 days before adding or replacing a provider that processes their data or data they collect.
We also disclose data to authorities and courts when the law requires it, including reporting suspected criminal offences that threaten someone’s life or safety, as Article 18 of the Digital Services Act requires; and to whoever takes over the Service, under this policy. We do not sell personal data.
9. Transfers outside the European Union
Our database, files and hosting are in the European Union. Some providers are US companies or process data outside the EU. For those transfers we rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission’s standard contractual clauses. You can ask for a copy of the safeguards at info@jampres.com.
10. Security
Data is encrypted in transit and at rest, access to it is limited in the database itself to the people entitled to it, and backups are made regularly. Secret keys are kept only on our servers. Images and fonts used in presentations are stored at public addresses that cannot be guessed, so that published presentations can show them; anyone who has such an address can open the file. If a personal data breach occurs, we notify the supervisory authority and, where required, the people affected.
11. Your rights
You have the right to:
- access your personal data;
- rectify it if it is inaccurate;
- erase it;
- restrict its processing;
- portability — receive the data you gave us in a structured, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting processing carried out before.
Write to info@jampres.com from the email address of your account, or from another address with enough information for us to identify you. It is free. We reply within one month; for complex requests we may extend this by two further months and will tell you if we do. You can also do much of this yourself in your account: change your details, download all your data (Account → Profile → Download my data) and delete your account.
If you are not satisfied with our answer, you can complain to the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, aepd.es, or to the supervisory authority of the country where you live.
12. Age
JamPres is for people aged 18 and over. We do not knowingly create accounts for anyone under 18. If you believe a minor has created an account, write to info@jampres.com and we will delete it.
13. Changes
We may update this policy. We tell account holders about significant changes by email before they take effect. The date at the top shows the current version.