Who processes your data
JAQO SAS is the controller for the processing described here across jaqo.io, the Interior and Kitchen Studios, the mobile app, and account features. A kitchen professional may separately process information you choose to send; that professional must explain its own processing.
You can start a local project without an account. Data leaves your device only when an online feature requires it, such as synchronisation, publishing, a quote request, or support.
What we process
- Account: user ID, name, email, and Apple or Google sign-in provider. JAQO does not receive your Apple or Google password.
- Projects: room names, measurements, walls, openings, obstacles, furniture, materials, renders, and synchronisation history.
- Environment scans: geometry derived by RoomPlan or an equivalent service. JAQO does not save the raw camera feed in the standard flow.
- Kitchen and quotes: layouts, cabinets, finishes, and information you choose to send to a professional.
- Publishing: the render, title, and project details you explicitly choose to make public.
- Support: your name, email, optional company, and message.
- Technical: device and app versions, IP address, security events, errors, performance, and interactions needed for diagnostics.
Screenshots, view hierarchy capture, and session replay are off by default in the mobile app. JAQO does not sell your data or use it to track you across other companies' apps and websites.
Why we use it
- Contract and pre-contract steps: create, save, synchronise, and share projects; manage accounts; and send a requested quote.
- Legitimate interests: secure JAQO, prevent abuse, diagnose failures, and improve reliability.
- Consent: publish a creation, send optional communications, or enable optional measurement where consent is required. You may withdraw it.
- Legal obligation: respond to authorities and retain records required by law.
Who can access it
Depending on the feature, authorised JAQO staff and these processors may access relevant data:
- Supabase for authentication, database, and storage;
- Sentry for technical error and performance diagnostics;
- hosting, delivery, and transactional email providers;
- the professional you choose when sending a quote request.
Opening a partner link takes you to Amazon, which applies its own privacy policy. Some providers may process data outside the EEA under applicable adequacy decisions or contractual safeguards.
How long we keep it
- Guest projects remain on the device until you delete them, clear app data, or uninstall the app.
- Accounts and synchronised projects remain for the account lifetime and are deleted through “Delete my account”, subject to normal backup rotation and contrary legal duties.
- A public creation remains visible until it is unpublished or deleted.
- Contact and quote requests remain for handling, follow-up, and applicable legal requirements.
- Technical logs are limited to what is needed for security and diagnosis under each provider's configuration.
You decide what becomes public
Projects are private by default. Before publishing, JAQO shows what will be visible. Do not include names, addresses, or other personal details in a title or render. You can unpublish or delete your creation from JAQO.
Access, correction, and deletion
Depending on the processing, you may request access, correction, deletion, restriction, objection, and portability, and withdraw consent. Account deletion is available in the app. You may also write to privacy@jaqo.io. We may request reasonable proof of identity. You may complain to the CNIL or your local data protection authority.
Protection by default
JAQO uses encrypted connections, access controls, row-level security policies, and separation between public keys and server secrets. No system is infallible; report concerns to security@jaqo.io.
Contact us
Controller: JAQO SAS. For privacy questions or requests, write to privacy@jaqo.io.