Last updated: 2026-10-22
This document is available in English only.
This Privacy Policy explains what personal data Jarvel collects, why, how long we keep it, who else receives it, and what rights you have. We have tried to describe what the Services actually do, app by app, rather than what services like ours usually do. The controller of your personal data is Jarvel, which you can reach at info@jarvel.com. Jarvel has not appointed a Data Protection Officer. Questions about privacy can be sent to info@jarvel.com. This policy covers every Jarvel website, web app, mobile app, and browser extension (together, the "Services"): • Jarvel Home (jarvel.com), including the personal home page, suite search, and Jarvel web search • Jarvel ID (id.jarvel.com), the shared account and sign-in service • Jarvel Mail, Calendar, and Contacts • Jarvel Chat and Jarvel Meet • Jarvel Notes, Docs, and Cloud • Jarvel Photos, Video, and Social • Jarvel Maps, Travel, and Translate • Jarvel Wallet, Keys (including its browser extension), Projects, Creative, and Sports • The supporting services the apps share: Jarvel Storage (where files are kept) and Jarvel Notifications (the notification feed, push notifications, and email digests) When an organization uses Jarvel for its staff, the organization is responsible for the company accounts it manages, as explained in section 9.
• No ads and no selling: we do not show ads, we do not sell personal data, and we do not use the content of your mail, files, notes, messages, or documents to profile you. • No third-party trackers: the Services contain no third-party analytics, advertising, or tracking scripts, and fonts and map tiles are served from our own servers (the few outside requests are listed in section 12). • One account, separate apps: each app keeps its own database. Apps exchange only what a feature needs, as described in section 8. • Encryption: Jarvel Keys, most Jarvel Chat conversations, live location sharing in Jarvel Maps, and calls started from Chat are end-to-end encrypted, so we cannot read them. Files in Jarvel Storage and the bodies of emails are encrypted on our servers with keys we hold. Other content is protected in transit and by access controls, but is not encrypted in a way that stops us from reading it (see section 16). • Few outside parties: the main outside providers are our hosting provider, an email delivery provider for our service emails, and the push services that deliver notifications to phones. Section 12 lists all of them. • Your control: you can download your data and delete your account from your Jarvel ID settings. Section 14 explains exactly what happens when you delete your account.
Jarvel ID is the one account that signs you in to every app. It stores: When you sign up and use your account: • Email address, username, and display name • Password, stored only in a form that cannot be turned back into your password • Profile picture, if you add one • Date of birth, if you choose to add it (you can skip this step) • Preferences: theme, accent colour, language, country, time zone, date format, currency, which security and contact-request emails you want, and whether you allow live activities on your phone • Your Jarvel Mail address, if you have one • Your storage plan and how much storage you use • The version of the Terms and Privacy Policy you accepted, and when For security: • Two-factor authentication settings and backup codes, stored in protected form • Your sessions and trusted devices: IP address, browser or device (user agent), approximate location (city and country), and the network the IP address belongs to • A sign-in log, which also records whether a sign-in came from a new device or country, the distance from your previous sign-in, and the resulting risk level (see section 6) • A history of username and email address changes (old value, new value, who made the change, and from which IP address) • Account recovery requests and their outcome, if you report your account as hacked • Data about the check that tells people and bots apart when you sign up or recover an account (see section 6) About your use of the apps: • Which apps you have connected, and the permissions you gave them • When you were last active in each app, and on which days you used which app Jarvel staff may add internal notes to an account, for example about a support or abuse case. If you join an organization, Jarvel ID also stores your membership, role, and, if your organization fills them in, your job title, department, manager, and work phone number.
Each app stores the content you create in it, plus a copy of your basic profile (name, username, email address, avatar, and preferences such as language and time zone) so it can show your name and format dates correctly. Jarvel Mail: • The messages you send and receive, including sender, recipients, subject, body, and attachments; folders, labels, filters, templates, signatures, vacation replies, and delegations • Message bodies are encrypted on our servers • Attachments are stored in Jarvel Storage and count toward your storage • If you connect an outside mailbox, its server address, username, and password (the password is encrypted) • How many messages you send, kept for 2 days to enforce sending limits • Images in emails are loaded through our image proxy, so the sender does not learn your IP address or when you opened the email Jarvel Calendar: • Events (title, description, place, time, repetition, attendees with their email address and reply), calendars, sharing, delegates, reminders, working hours, and out-of-office periods • Calendars you subscribe to by link, and outside calendar accounts (CalDAV) you connect, with the password encrypted Jarvel Contacts: • The contacts you create or sync: names, company, job title, email addresses, phone numbers, postal addresses, websites, social profiles, birthday, notes, and photo • Contact requests you send or receive, with their message • For organization members, a copy of the organization's directory Jarvel Chat: • Messages, reactions, attachments, conversations and channels, your status and status message, and when you were last active • Calls: who called whom and when • End-to-end encryption keys for your devices (we only store public keys and keys that are encrypted for your devices). If you turn on key backup, an encrypted backup of your keys protected by a passphrase only you know • Reports you file and people you block Jarvel Meet: • Meetings (title, time, host, settings), invitees, lobby requests, polls, breakout rooms, and attendance (who joined and left, and when). Guests who join by link are recorded with the display name they enter • Meet does not record meetings Jarvel Notes and Jarvel Docs: • Your notes, pages, documents, spreadsheets, presentations, comments, and mentions, their version history, who has access, and share links • Words you add to your spelling dictionary • Docs keeps a copy of each document in Jarvel Cloud Jarvel Cloud and Jarvel Storage: • Your files and folders with their names, types, sizes, and versions, shared drives, sharing settings, share links, and passwords for desktop file access (WebDAV) • Files are kept in Jarvel Storage, encrypted on our servers, and scanned for viruses Jarvel Photos: • Your photos and videos, with their metadata: when and where they were taken (GPS location), the camera, and the other EXIF data in the file • Albums, sharing, and your edits and presets • Labels: Photos labels objects and scenes in your photos so you can search them. • Faces: face grouping is off until you turn it on in Photos under People. When it is on, Photos detects faces in your photos and groups photos of the same person. To do this it stores a numerical description of each face (a face template) and of each group of faces. When it is off, no face templates are kept. Turning it off deletes all face templates and people, including the names you gave them; your photos stay. This runs on our own servers; no outside service is used. Face templates are biometric data; see section 7. Jarvel Video: • Your channel, the videos you upload with their titles, descriptions, captions, and tags, comments, likes, playlists, subscriptions, watch later list, and watch history (which you can clear) • View counts: for signed-in viewers, which account watched; for viewers who are not signed in, a code made from the IP address and browser that changes every day and cannot be turned back into the IP address • The original file you upload is deleted once the video has been converted, unless you choose to keep it Jarvel Social: • Your profile (which can include your city, relationship status, education, work, interests, favourites, mood, and a profile song), posts, guestbook messages, blog posts, photos and videos, stories, groups, events, polls, testimonials, check-ins at places, company pages and job applications, games and scores, and your friends • Profile visits: who visited your profile and when, which is shown to you • Reports you file Jarvel Maps: • Saved places, place lists and who they are shared with, reviews, places you suggest, search history, and route history (until you clear them) • Devices you use for location sharing (name and public key) • Live locations you share and traffic samples are covered in section 5 Jarvel Travel: • Trips, destinations, and steps with their places, times, and notes, the countries you have visited, and who you share trips with • If you add a step from your current location, the app asks your device for its location once. If you add a step from a photo, the app reads the location and time from the photo on your device and only sends those, not the photo Jarvel Translate: • Your translation history: the text you translated and the translation, and your favourites. For speech and images, only the recognized text is kept. You can translate without saving history • Your organization's glossaries • Translation, speech recognition, and text recognition run on our own servers; no outside translation service is used Jarvel Wallet: • Transactions, budgets and who you share them with, shared expense pools and settlements, recurring transactions, and categories • Bank statement files you import (CSV or camt.053) are read to create transactions and are not kept • Wallet does not connect to your bank Jarvel Keys: • Your vaults and the items in them, which are end-to-end encrypted on your device with a key derived from your master password; we only receive encrypted data, plus who has access to each shared vault • Because we never have your master password or recovery key, we cannot recover your vault if you lose both Jarvel Projects: • Sites, projects, work items, comments, reactions, worklogs, attachments, watchers, votes, filters, dashboards, and calendar feed links • If you connect GitHub, the connection settings and the pull requests and commits GitHub sends us (with their author names) Jarvel Creative: • Your designs, photo, layout, film, motion, and sound projects, who has access, share links, and recent files • Speech-to-text in the film editor runs on your own device; to do so your browser downloads a speech model from Hugging Face (see section 12) Jarvel Sports: • The teams and competitions you follow and your calendar feed link Jarvel Home: • Your birthday, if you added one to Jarvel ID, so we can wish you a happy birthday • The personal home page and suite search show your own items by asking each app at the moment you look; Home does not keep a copy of them • Jarvel web search: we do not keep a log of the searches you make Jarvel Notifications: • Your notifications (title, text, link, and who caused them), whether you read or archived them, and the items waiting for an email digest • Push tokens for your phones and browsers Uploads and files in every app are stored in Jarvel Storage. Every app also keeps an activity log of account, security, and administrative actions (see section 13).
Several apps use location. None of them track you in the background, except Jarvel Maps while you navigate with traffic sharing turned on, and whenever you drive if you turned on "Also when not navigating". Your device's location (Maps, Travel): • The apps only ask your device for its location when you use a feature that needs it, such as showing where you are on the map, navigating, or adding a travel step. Your operating system asks for permission first. Traffic samples (Jarvel Maps app): • While you navigate by car, the app sends the positions and times from your phone's GPS once a minute, so we can tell how fast traffic moves. • The samples are not stored with your account. They carry a random code that only links the samples of one trip, and a new code is made for each trip. • The first and last 500 meters of every trip are never sent. During navigation, positions within 500 meters of the destination are not sent either. • Each batch of positions is matched to roads and deleted within 15 minutes. The resulting speed per road section, with the trip code, is kept for one hour. After that it only survives in the average speed of each road section for each hour of the week, which contains no trip code. • You are told about traffic sharing before it starts, and you can turn it off at any time with "Help improve traffic" in the app's settings. • Only if you turn on "Also when not navigating" in the app's settings, the app also uses your location in the background, including when it is closed. It checks your rough position from time to time, and only once you drive faster than 25 km/h does it switch on GPS and send the same samples, with the same protections. It is off until you turn it on, it needs your phone's permission to use your location all the time, and you can turn it off in the same place at any time. Signing out turns it off. On Android a notification shows while it is on. Live location sharing (Jarvel Maps): • You can share your live location with up to 20 people, for 5 minutes to 7 days or until you stop. Your location is end-to-end encrypted for the devices of the people you share with; we cannot see it. • The encrypted location is wiped when you stop sharing, when the share ends, or when it is more than an hour old, and the ended share is deleted after 24 hours. • In an organization that limits sharing to its members, you can only share your location with members. Location in your content: • Photos keeps the location stored in your photos (see section 4). When you share an album, people see the photos without their location on the map, but anyone who downloads the original file from a shared album or public link also receives the location data inside the file. • Social check-ins, saved places in Maps, and trip steps in Travel contain the places you add. Approximate location from your IP address: • When you sign in, Jarvel ID looks up the city, country, and network of your IP address in a database on our own servers. No outside service is asked.
We use personal data for these purposes: • To provide the Services: storing, syncing, and showing your content on your devices, delivering the messages you send, and running the features you use • To sign you in and keep your account secure: checking your password and second factor, managing sessions and trusted devices, and sending sign-in codes and security emails • To detect suspicious sign-ins: each sign-in is compared with your earlier ones, for example by device and approximate location, and given a risk level, which is stored with the session and used when we review account recovery requests. A sign-in from a new device triggers an email alert, unless you turned those alerts off. The risk level does not on its own block your account • To tell people and bots apart: when you sign up or recover an account, you complete a short puzzle that we built ourselves. We record how it was solved, together with your IP address, browser, and language settings, to recognize automated attacks • To fight spam, viruses, and abuse: incoming and outgoing email is checked for spam and viruses, and uploaded files are scanned for viruses • To run organizations and sharing, as described in sections 9 and 10 • To send notifications you have not turned off, including push notifications and email digests • To estimate traffic and the usual speed of each road in Jarvel Maps from traffic samples • To answer support requests and handle reports of illegal or abusive content • To keep the Services running and improve them, using logs and aggregated statistics such as how many people used an app on a given day • To comply with the law and to establish, exercise, or defend legal claims We do not use your personal data for advertising, we do not sell it, and we do not use your content to train machine learning or AI models. If we ever offer a feature that would, we will ask for your permission first.
We rely on these legal bases under Article 6 of the GDPR: Performance of our contract with you (Art. 6(1)(b)): • Creating and running your account, and providing every app and feature you use, including storing and sending your content, sharing, organizations, notifications, and data export Our legitimate interests (Art. 6(1)(f)): • Security: the sign-in log, risk checks, the bot check, rate limits, and activity logs, to protect your account and the Services • Spam, virus, and abuse filtering, and handling reports • Estimating traffic in Jarvel Maps from anonymous traffic samples; you can object at any time by turning off "Help improve traffic" • Keeping the Services reliable and improving them with aggregated usage statistics • Establishing, exercising, or defending legal claims Consent (Art. 6(1)(a)): • Optional profile information, such as your date of birth and profile picture • Connecting apps that are not operated by Jarvel through the consent screen • Push notifications on your devices (which your operating system or browser asks you to allow) • Traffic samples sent while you are not navigating ("Also when not navigating" in Jarvel Maps) You can withdraw consent at any time without affecting what happened before. Legal obligation (Art. 6(1)(c)): • Answering lawful requests from authorities, keeping records the law requires, and acting on reports of illegal content Face templates in Jarvel Photos: Face templates used to group photos of the same person are biometric data. We only create them after you turn on face grouping, based on your explicit consent (Art. 9(2)(a) and Art. 6(1)(a)). You can withdraw it at any time by turning face grouping off, which deletes all face templates and people. Face templates are only used to group your own photos, are never shared with other users or outside services, and are deleted when you delete your account.
Each Jarvel app has its own database, and apps do not read each other's databases. When an app needs something from another app, it asks for that specific thing: • Signing in: when you open a Jarvel app, Jarvel ID gives the app your user ID, email address, username, display name, profile picture, preferences (language, country, time zone, date format, currency, theme), and date of birth if you added one, and tells it which organizations you belong to. Jarvel's own apps do not show a consent screen for this. • Account events: Jarvel ID tells every app you use when you change your profile, ask for a data export, delete or recover your account, are banned, or leave an organization, so each app can update or delete your data. If an app cannot be reached, Jarvel ID keeps trying for about two days. • Home page and suite search: when you open the Jarvel home page or search all of Jarvel, Home asks Calendar, Cloud, Docs, Creative, Mail, Chat, Contacts, and Projects for your upcoming events, recent and shared files, unread counts, and items that match your search. Each app only returns what you are allowed to see, and Home does not store the answers. • Notifications: apps send notifications (title, text, link, and who caused them) to Jarvel Notifications, which shows them in the bell in every app and delivers push notifications and email digests. • Contacts: Mail and Calendar look up and suggest your contacts from Jarvel Contacts, and Jarvel ID sends your profile and birthday to Contacts so they appear on your contact card for the people you are connected with. • Presence: Chat tells Jarvel ID when you are active, so other apps can show whether you are online. • Files: apps store uploads in Jarvel Storage, Docs and Creative keep copies of documents in Jarvel Cloud, and you can pick files from Cloud in other apps or save files to it. • Invitations: calendar invitations you receive by email are added to Jarvel Calendar, and other apps can create calendar events or tasks for you when you ask them to.
A company or team can use Jarvel as an organization. Organizations are created through business sign-up, which creates the organization together with a company account for the person signing up. Other people join either with a company account the organization creates on its own verified email domain, or with their own personal Jarvel account after accepting an invitation sent to their email address. A business sign-up that is never verified is deleted after 14 days. Who is responsible: For company accounts, the organization is the controller, and Jarvel processes the account's data on the organization's behalf as its processor. Questions and requests about a company account should go to the organization. For personal accounts that belong to an organization, Jarvel remains the controller. As processor for company accounts, we follow Article 28 GDPR: we process the data only to provide the Services and on the organization's instructions as set through its settings, keep it confidential, protect it as described in section 16, help the organization answer requests from its members, tell it without undue delay about a data breach that affects it, and delete the data when the organization or the account is deleted (section 14). The providers in section 12 are our sub-processors. An organization that needs a signed data processing agreement can ask for one at info@jarvel.com. What owners and administrators can do: • Create company accounts on the organization's verified domains, reset their password or two-factor authentication, suspend them (which signs them out everywhere while their content stays in place), and delete them • When deleting a company account, choose the coworker who receives the work it shared, and whether its mailbox is moved, shared, or deleted • Invite people, change roles, remove members, and manage groups, domains, and branding • Turn individual apps off for the organization, require two-factor authentication, and set policies: how long chat messages are kept (from 1 day to 10 years, or forever), who may create chat channels, whether meeting guests and lobbies are allowed and whether meetings are end-to-end encrypted, and with whom members may share files, documents, budgets, place lists, and live locations (anyone, only the organization, or nobody) • Read the organization's activity log, which shows actions in the organization but not IP addresses • Owners only: delete the organization, choosing whether its company accounts are deleted or turned into personal accounts A company account belongs to its organization: you cannot delete it yourself, change its email address, or join another organization with it. Administrators cannot reset, suspend, or delete a personal account; they can only remove it from the organization, and you can leave an organization at any time. What coworkers see: • Members see each other's names, profile pictures, roles, and the email addresses of company accounts, plus the directory details the organization fills in • The email address of a personal account is shown only to the organization's owners and administrators • Company accounts share their calendar with coworkers at the level the organization chooses: nothing, only when they are busy (the default), or also event titles and places. Personal accounts share no calendar unless they turn it on for that organization • Events you mark as private never show their title or place to coworkers Notices: When an administrator suspends, reinstates, deletes, or resets the two-factor authentication of your company account, we email you. When Jarvel suspends an organization or an organization is deleted, its members are emailed. When you leave or are deleted: The work you made in an organization stays with the organization. Depending on the app, it is handed to the coworker the organization names or to an owner, and some items keep your name, for example events in shared team calendars and work items and comments in Jarvel Projects (see section 14). New organizations start with settings chosen by Jarvel, such as personal apps (Photos, Social, Travel, Video, and Wallet) turned off, which the organization can change.
Content is private to your account unless you share it, publish it, or put it in a shared space. What others can see depends on what you choose: • Messages and invitations you send (email, chat, meeting and calendar invitations) are seen by their recipients, including people outside Jarvel • Jarvel Cloud share links work without signing in; anyone with the link (and the password, if you set one) can see and download the file or the files in the folder until the link expires or you remove it • Jarvel Notes published pages can be read by anyone with the link, without signing in; we ask search engines not to index them • Jarvel Photos album links work without signing in and let viewers download original files, including the location data inside them; you can protect a link with a password • Jarvel Docs and Creative share links require the viewer to sign in with a Jarvel account • Jarvel Video: public videos, your channel, and comments on public videos can be seen by anyone, including people who are not signed in; unlisted videos by anyone with the link; organization videos by members • Jarvel Social: profiles and posts can only be seen by signed-in Jarvel users, within the limits of your privacy settings (everyone, friends, or only you). Others can see that you visited their profile • Jarvel Meet: anyone with a meeting link can see the meeting title, the host's name, and the organization's branding; guests choose the name others see • Calendar feed links you create in Projects, Sports, and Social show those events to anyone who has the link • Your name, username, and profile picture are shown to people you interact with across the Services, and on profile cards together with whether you are online (unless you set your status to invisible)
A small number of Jarvel staff can access personal data to run the Services, help you when you ask, investigate security incidents and abuse, and comply with the law. • Access is limited to staff who need it, is granted per person and per app, can be time-limited, and changes staff make are logged. • Staff with this access can technically view data that is not end-to-end encrypted. They may only do so when that is needed for one of the purposes above. End-to-end encrypted content cannot be read by staff. • Staff can, for example, edit or correct account details, lock or ban an account, sign an account out, send password reset links, handle account recovery requests, manage organizations, and delete accounts. Reports and moderation: • In Chat, Social, and Video you can report content and people. A report includes a copy of the reported content; for an end-to-end encrypted chat message, your device includes the message so our moderators can read it. • Moderators review reports and may remove content, limit an account's visibility in Social, or suspend or ban an account. Places you suggest in Maps are reviewed before they appear. • Report records are kept after the content is removed, so we can handle repeat abuse and objections.
We use a small number of outside providers. Those that process personal data on our behalf may only use it to provide their service to us. Hosting: • Our hosting provider runs the servers on which the Services and your data are stored. Email sending: • An email delivery provider sends the service emails of the Services, such as sign-in codes, security alerts, invitations, notices, data export links, and email digests. It receives the recipient's address and the content of those emails. Your Jarvel Mail mailbox does not go through this provider: Jarvel Mail runs its own mail servers. Push notifications: • Expo (650 Industries, Inc., United States) delivers push notifications to our mobile apps and passes them to Apple or Google. It receives your device's push token and the notification: its title and text (for example the sender and subject of a new email with a short preview, or the first part of a chat message; for end-to-end encrypted chat messages only "Message"), the sender's name and picture, and a link. • Apple (Apple Push Notification service) delivers calls and live activities to iPhones directly, and Google (Firebase Cloud Messaging) delivers notifications to Android phones. • Web push notifications in browsers are delivered by your browser maker's push service (for example Google, Mozilla, or Apple). The content is encrypted so they cannot read it. • On Android, Jarvel Mail can use a UnifiedPush distributor that you choose and install yourself (for example ntfy); the content is encrypted. Recipients you choose: • Email you send leaves Jarvel and goes to the recipients' email providers. Calendar invitations work the same way. • If you connect an outside mailbox or calendar, Jarvel connects to that provider with the login you gave us. • If you subscribe to a calendar by link, add an external data link to a spreadsheet, or translate a web page, our servers fetch that address. • If you connect GitHub to Jarvel Projects, GitHub sends us information about your repositories. • Apps you connect that are not operated by Jarvel receive the account information you approve on the consent screen; their own privacy policy applies. Requests our servers or your device make to outside sites: • Links you post in Chat: our server visits the page to build a preview. The preview image is then loaded directly by the devices of the people in the conversation, so that website can see their IP address. • Jarvel Travel shows landmark photos loaded directly from Wikimedia Commons and map symbols from GitHub, which see your IP address. • Jarvel Creative's film editor downloads its speech recognition model from Hugging Face the first time you use it, which sees your IP address. Your audio stays on your device. • Jarvel Social's weather gadget sends the city you enter (not your identity) to Open-Meteo. • Jarvel Travel shows flights by sending the area you are viewing, rounded to whole degrees and without your identity, to the OpenSky Network. • Jarvel Mail's one-click unsubscribe sends the unsubscribe request to the sender's address. • Spam filtering of incoming email checks the sending server, domains, and links in the email against public blocklists, and compares short fingerprints of parts of the email with a public spam fingerprint database. The fingerprints cannot be turned back into the email. • Maps data, aerial imagery, street view images, charging points, sports results, exchange rates (European Central Bank), and travel data come from public sources. Our servers fetch them without any personal data; tiles and images are passed on through our own servers. App stores: • If you download our apps from the Apple App Store, Google Play, or the Chrome Web Store, those stores process data under their own terms and privacy policies. Authorities and legal claims: • We disclose data when the law requires it, for example in response to a valid court order, and when needed to establish or defend legal claims. Where allowed, we tell you about such requests. Business transfers: • If Jarvel is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the new owner under this policy. We will tell you before a different policy applies. We do not share personal data with advertisers or data brokers.
Some providers in section 12 are based in, or may process data in, the United States, such as the push services of Expo, Apple, and Google and your browser maker's push service. Where personal data goes outside the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, for providers certified under it) or the European Commission's Standard Contractual Clauses. Email you send to people outside the EEA goes to their providers as part of the Service you asked for.
We keep your data for as long as your account exists, unless you delete it earlier or a shorter period applies below. Deleting your account: • You can delete your account in your Jarvel ID settings. A company account is deleted by its organization. If you are the only owner of an organization that has other members, you first need to hand over ownership or delete the organization. Jarvel may temporarily turn off self-service deletion; you can then ask us at info@jarvel.com. • When you delete your account, you are signed out everywhere, connected apps lose access, and your account and content are hidden in every app straight away. • Your account is kept for 30 days in case you change your mind or your account was deleted by someone who took it over. During this time it can be restored through account recovery. • After 30 days, Jarvel ID deletes your account and tells every app to delete your data. Files in Jarvel Storage are erased 30 days after that. Activity log entries that remain are stripped of your identity and IP address. What stays after your account is deleted: • Messages you sent remain with their recipients. In Chat, your messages in conversations with others are kept as "[deleted]" from a deleted user, and their attachments are removed. • Work you made in an organization stays with the organization (see section 9). In shared team calendars, your events keep your name. In Jarvel Projects, work items, comments, and worklogs you wrote in shared sites are kept. In Video, channels of an organization are kept. • Places you suggested in Maps that were approved, and Social places and company pages you created, stay without your name. • Reports you filed are kept without your name. • Your Jarvel Mail addresses on jvlmail.com are never given to anyone else, so nobody can receive mail meant for you. Addresses on an organization's own domain can be reused by that organization. Trash and deleted items: • Items you delete go to the trash and are erased after 30 days in Cloud, Docs, Notes (archived pages), Contacts, Photos, Creative, and Mail, and trashed projects in Jarvel Projects after 60 days. Files are erased from Jarvel Storage 30 days after they leave the trash. • Emails you delete from the Mail trash are no longer visible to you, but are only fully erased from our database when your account is deleted. • Chat messages are kept until you delete them, unless the conversation uses disappearing messages or your organization sets a retention period. Other periods: • Sign-in sessions: 7 days without use (set by Jarvel and may change); trusted devices for two-factor authentication: 30 days • Sign-in codes: 10 minutes; password reset links: 1 hour; account setup and recovery links: up to 7 days • Organization invitations: valid for 7 days, deleted 30 days after they expire or are accepted • Data export downloads: 24 hours • Sign-in log and security events in Jarvel ID: 730 days, so we can recognize unusual sign-ins and verify account recovery requests • Other Jarvel ID activity: account actions 180 days, organization actions 365 days, errors 90 days, other events 365 days • Activity logs in the other apps: 180 days by default (account-related entries 365 days, errors 90 days); email addresses, IP addresses, and browser details are removed from these logs daily • Bot check records: 90 days, with the IP address, browser, and language details removed after 30 days • Daily app usage (which app you used on which day): 400 days • Mail sending counters: 2 days • Traffic samples: see section 5 • Maps search and route history, Translate history, Video watch history, and notifications: until you delete them or your account • Document and page versions: Docs keeps every version for a day, then one per hour for 30 days, then one per day; Notes keeps every version for 7 days and then fewer • Over-quota storage: see the Terms of Service • Deleted organizations: 30 days • Backups: we make backups so we can restore the Services after a failure. Data you delete stays in backups for a limited time, until those backups are replaced.
Under the GDPR you have these rights: • Access (Art. 15): ask what data we hold about you and get a copy • Rectification (Art. 16): correct your data, most of it directly in your account settings and in each app • Erasure (Art. 17): delete content in each app, or your whole account (see section 14) • Restriction (Art. 18): ask us to limit how we use your data, for example while we check a complaint • Data portability (Art. 20): receive your data in a machine-readable format • Objection (Art. 21): object to processing based on our legitimate interests; we will stop unless we have compelling grounds that override your interests, or need it for legal claims • Withdraw consent (Art. 7(3)): at any time, for example by removing your date of birth, disconnecting an app, turning off notifications, or turning off face grouping in Photos Downloading your data: "Download data" in your Jarvel ID settings creates an export of your account (profile, preferences, organizations and invitations, email and username history, sessions and trusted devices, app usage, connected apps, recovery requests, and your activity log including actions others took on your account) together with the data from every Jarvel app you use. The export is prepared in the background and you receive an email with a download link that works for 24 hours. You can request one export per hour. For a very large mailbox, the export contains your most recent messages and points you to the complete download in Jarvel Mail (Settings, "Export your mail"). For a company account, contact your organization first; we will help it answer your request. To use any of these rights, use the tools in your settings or email info@jarvel.com. We answer within one month, which we may extend by two months for complex requests, and we will tell you if we do. We may ask you to confirm your identity. You also have the right to complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You can also complain in the EU country where you live or work.
We protect your data with technical and organizational measures, including: • Encryption in transit: all connections to the Services use TLS (HTTPS) • End-to-end encryption, where only you and the people you share with hold the keys: Jarvel Keys vaults; Chat conversations once every participant has set up a device, and all channels and meeting chats; live location sharing in Maps; calls started from Chat; and meetings for which end-to-end encryption is turned on • Encryption on our servers with keys we hold: files in Jarvel Storage, the bodies of emails, and the passwords of outside mail and calendar accounts you connect • Passwords and session tokens are stored only in a form that cannot be turned back into the original, and sign-in tokens are short-lived • Two-factor authentication with an authenticator app and backup codes, and alerts when you sign in from a new device • Virus scanning of uploaded files and email, and spam filtering • Limits on repeated sign-in attempts and other abuse, and a bot check of our own • Separate data for each app, and staff access limited as described in section 11 No system is completely secure. Please use a strong, unique password and turn on two-factor authentication. If you find a security problem, please tell us at info@jarvel.com. If a personal data breach is likely to put your rights at risk, we will report it to the Autoriteit Persoonsgegevens within 72 hours of becoming aware of it, and tell you without undue delay if the risk to you is high.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (Article 22 GDPR). Some features work automatically: the sign-in risk check, the bot check, spam and virus filters, rate limits, the grouping of faces and labelling of photos in Jarvel Photos, and the sorting of search results. These protect you and the Services or help you find things; they are not used for advertising or to make decisions about you. If an automatic measure blocks you or gets something wrong, for example a real email marked as spam, contact us and a person will look at it.
We only use cookies and device storage that are needed for the Services to work, so they do not need your consent. There are no advertising, analytics, or third-party cookies. Cookies set by Jarvel ID (id.jarvel.com): • jarvel_refresh: keeps you signed in. Secure, not readable by scripts. Expires after 7 days without use. • jarvel_sessions: lets you be signed in with up to 5 accounts in one browser. Secure, not readable by scripts. Same lifetime. • jarvel_device: remembers that you trusted this device, so you are not asked for your second factor every time. 30 days. • jarvel_consent_app: holds the name and logo of the app on the consent screen while you approve it. 5 minutes. Cookie set by each Jarvel app: • auth_token: a copy of your sign-in token so images and downloads in the app can load. 1 day. Storage in your browser (local storage, session storage, and IndexedDB): • Your sign-in details for each app: which accounts you are signed in with, your name, email address, and picture, and your sign-in tokens • On the Jarvel ID site: the accounts recently used in this browser (up to 5), your theme and language, and the branding of your organization's sign-in page • Preferences and layout choices, such as list or grid view, sidebar width, map style, recently used languages or emoji, and auto-lock time in Keys • Short-lived values used while you sign in • Offline copies: Docs and Notes keep copies of your documents and pages so you can open them without a connection, and Chat keeps your encryption keys, your conversation list, and decrypted messages so it can show and search them on your device • Some drafts and recent items, such as a signature you drew in Docs, editor presets in Creative, and pending uploads in Video • Service workers that let Docs and Notes work offline, that receive web push notifications, and that let you share photos into Creative Mobile apps keep your sign-in tokens in your phone's secure storage, and some settings and caches on the phone. You can remove this storage by signing out or clearing your browser's site data; you will then need to sign in again and offline copies will be gone.
You must be at least 16 years old to use the Services. We do not knowingly collect personal data from children under 16, but we do not verify ages when you sign up. If we learn that an account belongs to a child under 16, we will delete it. If you are a parent or guardian and believe your child has a Jarvel account, please contact us at info@jarvel.com.
Online payment is not available yet: you cannot buy a paid storage plan in the Services today. When we add payments, a payment provider will process your payment details, and we will keep the records the law requires (such as invoices) for the legally required period. We will update this policy, naming the provider, before payments start.
We will update this policy when the Services or the law change, for example when we add an app. The "Last updated" date at the top shows the current version. For important changes we will tell you by email or in the Services before they take effect, and when the change requires it, we will ask you to accept the new version the next time you sign in.
For any question about this policy or your personal data, email info@jarvel.com. You can also complain to the Autoriteit Persoonsgegevens or to the data protection authority in the EU country where you live or work.