Privacy Policy

1. Who this covers

Jot.Space is a customer experience platform for business owners. This policy covers two different groups, and the difference matters:

• Account holders — business owners who sign up, build Spaces, register QR codes and NFC devices, take bookings, and send invoices.
• Visitors — the people who scan a code, open a Space, book a slot, submit a form, or pay an invoice. Visitors never need an account and never download anything.

2. What we collect

From account holders: the email address and password used to sign in, and whatever you add to your profile — name, business name, phone number, links, and images. If you sell, invoice, or take payments, we store the products, orders, invoices and quotes you create.

From visitors: only what you type in. Booking a slot asks for a name, email and optionally a phone number. Buying something or paying an invoice adds order and delivery details. A contact form collects whatever fields that business chose to ask for. Scanning a QR code by itself does not require you to identify yourself.

We do not buy personal information about you from anyone else.

3. How we use it

• Running your account and the Spaces you publish.
• Delivering what a visitor asked for — sending a booking confirmation, an invoice, or a form submission to the business it was meant for.
• Taking payments and passing them to the seller.
• Sending service email you would expect: confirmations, receipts, password resets, and security notices.
• Keeping the service working, and diagnosing problems.

4. When a business is the one collecting your data

If you book with, buy from, or submit a form to a business using Jot.Space, that business receives your details and decides what to do with them. We host the page and pass the information along. For questions about how a particular business handles what you gave them — including deleting it — contact that business directly.

5. Who we share it with

We do not sell your personal information. We share it only with the services needed to run Jot.Space:

• Supabase — database, file storage, and sign-in.
• Stripe — payment processing. Card details go directly to Stripe; we never see or store a full card number.
• Resend — sending transactional email such as booking confirmations and invoices.

We may also disclose information where the law requires it.

6. Public by design

Some things are meant to be seen. A published Space, a digital business card, and anything a QR code points to are public to anyone with the link or the code — that is the point of them. Do not put anything on a public Space that you would not want a stranger to read.

7. Your rights and choices

You can view and update your account information at any time from your account settings. You can ask us to delete your account and the data attached to it. You can unsubscribe from marketing email without losing service email you need, like a receipt or a password reset.

8. Children

Jot.Space is built for business owners and is not intended for children under 13. We do not knowingly collect their information.

9. Changes to this policy

If this policy changes in a way that matters, we will update the date below and, where appropriate, tell account holders by email.

10. Contact us

Questions about this policy, or about data we hold on you:

Get in touch through our contact form.