Privacy policy

Who we are

Jovita ("we", "us") provides business software for creatives at getjovita.com and app.getjovita.com. This policy explains what personal information we collect, why, and the choices you have. If you have a question, email hello@getjovita.com.

There are two kinds of people whose information Jovita handles:

Creatives who sign up and use Jovita to run their business ("you").
Their clients, whose details a creative adds to Jovita, and who use client pages and galleries.

For creatives' own account information, we decide how it's used. For client information, the creative decides why it's collected and how it's used, and we process it on their behalf.

What we collect

From creatives

Account details: your name, email address, password (stored securely by our authentication provider, never readable by us), studio name, logo, language and currency.
Business content you add: clients, projects, bookings, quotes, invoices, payments you record, expenses, templates, contracts, messages and gallery photos.
Payment settings: your public payment keys and bank details shown to your clients. Secret payment keys are stored encrypted and can't be read back by anyone, including us.
Usage information: the pages you use, the features you try, and basic device information, so we can keep Jovita working and improve it.
If you connect Google Calendar: your Google email address and calendar events needed for two-way sync.

About clients

Details the creative adds: name, email, phone, city and project details.
What clients do on their page: when it was opened, contracts and releases signed (the typed name and time), payments reported, messages sent, and gallery favourites and downloads.

How we use it

To provide Jovita: storing your work, showing client pages and galleries, sending the emails you ask us to send, and syncing your calendar.
To send you account emails: sign-in links, password resets, trial and plan updates, and important service notices.
To power Ask Jovita: when you ask a question, the relevant details from your studio are sent to our AI provider to create an answer. They are not used to train AI models.
To keep Jovita safe, prevent abuse, and fix problems.
To understand how Jovita is used, in summary, so we can improve it.

We never sell personal information, and we never use your clients' details to market to them.

We use a small number of trusted providers to run Jovita. They only process information to provide their service to us:

Supabase for our database, sign-in and file storage (hosted in London, United Kingdom).
Cloudflare to host and protect our website and app.
Brevo to send emails.
Anthropic to power Ask Jovita.
Google, only if you connect Google Calendar.
Payment providers you choose (Paystack, Flutterwave, PayPal, Stripe). Clients pay the creative directly through these providers; we don't receive or store card details.

We may also share information if the law requires it, or to protect the rights and safety of our users.

How long we keep it

We keep your information while your account is open. Galleries can be set to expire. If you delete your account, we delete your studio and its content within 30 days, apart from what we must keep by law (for example, records of payments to us) and backups, which are overwritten in the normal course.

Your choices and rights

Depending on where you live (including under the UK GDPR, the EU GDPR and the Nigeria Data Protection Act), you can ask to see, correct, download or delete your personal information, or object to how it's used. Email hello@getjovita.com and we'll reply within 30 days.

If you're a client of a creative who uses Jovita, please contact that creative first, as they control your information. We'll help them respond.

You can also complain to your local data protection authority, for example the ICO in the UK or the NDPC in Nigeria.

Security

Information is encrypted in transit and at rest. Each studio can only see its own data, enforced in the database itself. Secret keys are stored encrypted and are never shown in the app. No system is perfectly secure, but we work hard to protect your information and will tell you promptly if a breach affects you.

Cookies and local storage

We use only what's needed to run Jovita: keeping you signed in and remembering your language and display settings. We don't use advertising cookies.

Children

Jovita is for adults running a business. Creatives may add information about children they photograph (for example, at a family session), with a parent or guardian's permission. We don't knowingly let children create accounts.

International transfers

Our main servers are in the United Kingdom. Some providers may process information in other countries. When they do, we use safeguards such as standard contractual clauses.

Changes to this policy

If we make important changes, we'll tell you by email or in the app before they take effect. The date at the top shows when this policy last changed.

Contact us

Email hello@getjovita.com with any privacy question or request.