We collect less than you'd expect. Here's all of it.

Data, in plain English.

When you submit the Receptionist or vote for a product:

• The email address you type
• Which product or interest you picked

That pair is stored in our signups table (Supabase). It is not linked to a name, and there is no login here to attach it to.

Automatically, like any site: standard server request logs from our host, and a jigspec-theme setting saved in your own browser to remember light or dark mode.

What happens to what you share.

Most of what JigSpec does today is done-for-you: you hand us the materials for a job, and we deliver the result. You share those materials with us directly, over email or a channel we agree on.

We use them only to do the work you asked for. We do not sell them, and we do not use them to train models.

Delivering the work can involve sending parts of your materials to AI model providers (such as Anthropic or OpenAI) so they can produce the output. They process it to return a result and, under their API terms, do not train on it.

No ad pixels, no tracker.

We do not run third-party product analytics on this site right now. There is no Facebook pixel, no Google Ads pixel, and no analytics tracker. If we add privacy-respecting analytics later, we will list it here and bump the date above.

The fonts on this site are served from the same place as the rest of the site, not from a third party. The signup form posts directly to our database. Nothing on this page calls out to a content delivery network we do not control.

The one thing we keep in your browser is the jigspec-theme light or dark setting, stored in localStorage and never transmitted.

Everyone we hand data to.

• Vercel: hosts this site
• Supabase: stores the email and interest from the signup form
• AI model providers such as Anthropic and OpenAI: used to deliver done-for-you work, not on this site

If we add or remove a subprocessor, this list is the source of truth and we update the Last updated date on the hero.

See it, delete it, ask.

You can ask what we hold about you, or ask us to delete it. Email privacy@jigspec.com from the address you gave us and we will turn it around within 30 days.

If you used the signup form, deleting removes your email and interest from our signups table. If we have done work for you, you can ask us to return or delete the materials you shared.

If you are in the EU/UK, the GDPR rights of access, rectification, erasure, restriction, portability, and objection apply. If you are in California, the CCPA rights to know, delete, and opt out of "sale" apply (we don't sell, but the right is yours regardless).

What we do, what we don't.

The site is served over HTTPS. The signup data sits in Supabase behind access controls, and the materials you share for a job are kept only as long as we need them to do the work and deliver it.

We have not been through SOC 2. We are a two-person team. If your institution requires a vendor security review before working with us, email us and we'll fill out the questionnaire honestly, including the parts where the answer is "not yet."

How this page evolves.

When we change something material, like a new subprocessor or a new category of data, we update this page and bump the date in the hero. If you have given us your email, we will tell you about changes that expand what we collect.

Questions, corrections, or a request to walk through any of this on a call: privacy@jigspec.com.

For the trustees, lawyers, and IT reviewers reading this with red pens: yes, we'll sign your DPA. Send it over.