Jask Reporter Privacy Policy

Effective Date: March 12, 2026

Last Updated: March 12, 2026

1. Company Information

Company: HeyJustAsk S.L.U.

Address: C/ Josep Rover Motta, 22 - 4, Palma 07006 Illes Balears (Spain)

Email: contact@heyjask.com

Tax ID (NIF): B22839997

2. What is Jask Reporter and How Does Registration Work

IMPORTANT: AI Service and Automatic Registration Notice

Jask Reporter is an artificial intelligence (AI) system. This is a B2B service where your company has already provided consent and information. For subscribed companies, we process conversations using the information already provided by your organization. If you contact us without an active subscription, we will collect your phone number, inform you that you are interacting with AI, and encourage you to sign up for our services. By using our services, you agree to our Privacy Policy and Terms of Service.

Jask Reporter is an AI-powered reporting service that processes your WhatsApp conversations and generates automated reports. Our service uses artificial intelligence to analyze your conversations and create comprehensive reports based on your interactions. Our services are available globally and focus on providing detailed reporting and analysis of your WhatsApp conversations.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

  • Consent (Article 6(1)(a)): When your company provides consent and information for our services
  • Contract Performance (Article 6(1)(b)): To provide our reporting services
  • Legitimate Interest (Article 6(1)(f)): For service improvement and fraud prevention
  • Legal Obligation (Article 6(1)(c)): For tax and accounting purposes

4. Personal Data We Collect

4.1 Information You Provide Directly

  • Company information (provided by your organization)
  • Email address (for report delivery)
  • Business information (for reporting purposes)
  • Payment information (processed by third-party providers)

4.2 Information Collected Automatically

  • Phone numbers (automatically collected from WhatsApp messages)
  • WhatsApp conversation data and content
  • Conversation transcriptions converted to text
  • Report generation data and analytics
  • Usage patterns and interaction data
  • Technical information (IP address, device type, browser)

5. Third-Party Services and Data Processing

We use the following third-party services that may process your data:

OpenAI

AI language model processing

Location: US - Privacy Policy: openai.com/privacy

N8N

WhatsApp integration and automation

Location: EU - Privacy Policy: n8n.io/privacy

Supabase

Database hosting, storage management, and file storage for images and reports

Location: EU - Privacy Policy: supabase.com/privacy - Terms: supabase.com/terms

Google Cloud

Cloud infrastructure and processing services

Location: US - Privacy Policy: cloud.google.com/terms/privacy

Third-Party Data Processing Disclaimer

Important: We are not responsible for how these third-party services handle, process, store, or protect your data once it is transmitted to them. Each service operates under its own privacy policy, terms of service, and data protection practices. By using our service, you acknowledge and agree that your data will be processed by these third parties according to their respective policies and terms. We strongly recommend reviewing their individual privacy policies and terms of service before using our service. Any data breaches, misuse, or violations by these third-party services are outside our control and responsibility.

6. How We Use Your Data

  • Provide and improve our AI reporting services
  • Disclose AI interaction to new users during their first conversation
  • Process WhatsApp conversations for report generation
  • Transcribe conversations to text for processing and analysis
  • Generate automated PDF reports based on conversation data
  • Communicate with you via WhatsApp and email
  • Analyze conversations and transcripts to improve AI responses
  • Prevent fraud and ensure service security
  • Comply with legal obligations
  • Deliver reports via email with attachment limitations
  • Process entries only until email delivery time

7. Data Sharing and Transfers

7.1 Within the EU

We primarily process data within the European Union through our EU-based infrastructure.

7.2 International Transfers

Some data may be transferred to third countries (particularly the US for OpenAI services) under the following safeguards:

  • EU-US Data Privacy Framework adequacy decision
  • Standard Contractual Clauses (SCCs)
  • Appropriate technical and organizational measures

7.3 Data Sharing

We only share your data with:

  • Your company's authorized personnel
  • Third-party service providers under strict contracts
  • Legal authorities when required by law
  • Emergency services if vital interests are at stake

7.4 Email Delivery Limitations

Important limitations regarding email delivery:

  • We are not responsible if emails are sent to wrong recipients
  • Email recipients are determined by the information you provide
  • Entries received after email delivery time may be lost
  • Email attachments are subject to size and format limitations

8. Data Retention and Storage Management

We retain your data according to your subscription plan terms:

  • Account Data: Until you request deletion or 6 months of inactivity, then subject to deletion
  • Generated Reports: Reports are stored according to your subscription plan. If your subscription plan specifies automatic deletion periods (e.g., deletion after 30 days, 90 days, etc.), we will automatically delete reports according to those terms. Reports may also be subject to deletion based on storage limitations of your subscription plan.
  • Images: Images are stored according to your subscription plan. If your subscription plan specifies automatic deletion periods (e.g., deletion after 30 days, 90 days, etc.), we will automatically delete images according to those terms. Images may also be subject to deletion based on storage limitations of your subscription plan.
  • We are not responsible for image content and may cancel subscriptions without refund for inappropriate content

9. Your Rights Under GDPR

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your data

Right to Restriction

Limit processing of your data

Right to Portability

Transfer your data to another service

Right to Object

Object to certain processing activities

Right to Withdraw Consent

Withdraw consent at any time

Right to Complain

File a complaint with data protection authorities

10. How to Exercise Your Rights

To Unregister from Our Database:

Send an email to contact@heyjask.com requesting the deletion of your account and all associated data. We will process your request within 30 days.

To exercise any of your rights, contact us at:

  • Email: contact@heyjask.com
  • Subject Line: "Data Protection Request - [Your Right]"
  • Include: Your full name, phone number, and specific request
  • Response Time: We will respond within 30 days

11. Data Security and Encryption

We implement appropriate technical and organizational measures including:

  • Access controls and authentication
  • Incident response procedures
  • Regular backup and recovery testing

12. Data Protection Authority

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

Agencia Española de Protección de Datos (AEPD)

C/ Jorge Juan, 6

28001 Madrid, Spain

Phone: +34 901 100 099

Website: www.aepd.es

13. Minors and Age Requirements

You must be at least 16 years of age to use our services. Our services are not intended for minors under 16 years of age. If you are under 16, please do not use our services or provide any personal information. If we become aware that we have collected personal data from a minor under 16, we will delete it immediately.

By using our services, you represent and warrant that you are at least 16 years of age and have the legal capacity to enter into agreements.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Sending an email to your registered email address
  • Posting a notice on our website
  • Informing you during your next interaction with Jask Reporter

Updated Privacy Policy applies to all subscriptions, including existing ones, as of the effective date. If you do not agree with material changes, you may cancel your subscription and request deletion of your data. Continued use after changes constitutes acceptance of the updated Policy.

15. User Content Responsibility

15.1 Content Responsibility You are solely responsible for all content, including images and reports, that you upload, generate, or publish through our services. We are NOT responsible for:

  • The accuracy, legality, or appropriateness of any content you publish
  • Any claims, damages, or liabilities arising from your content
  • Copyright infringement or intellectual property violations in your content
  • Any harm caused by your content to third parties
  • Compliance of your content with applicable laws and regulations

By using our services, you acknowledge that you are solely responsible for all content you create, upload, or publish, and you agree to indemnify and hold us harmless from any claims related to your content.

16. Contact Information

For any questions about this Privacy Policy or our data practices, contact us at:

Email: contact@heyjask.com

Subject: Privacy Policy Inquiry

Response Time: Within 48 hours during business days

17. Cookies, Consent and Tracking Technologies

We use a consent banner to manage optional cookies and tracking technologies. Essential cookies required for security and core website functionality remain active. Analytics and advertising cookies are disabled by default and only activated after your consent.

  • Google Tag Manager Used to deploy analytics and marketing tags in a controlled way.
  • Google Analytics Used to measure visits, navigation patterns, and aggregate usage metrics.
  • Marketing Pixels Used for ad performance measurement and audience analysis when enabled.
  • Consent Management You can accept, reject, or change your cookie preferences at any time from the Cookie Settings link in the website footer.

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), and other applicable Spanish and European data protection laws as of January 2025.