Skip to content

Active development environment: you may notice changes or incomplete features.

JAOT

Privacy Policy

Last updated: June 27, 2026

1. Data We Collect

This Privacy Policy describes how the JAOT instance hosted at jaot.io handles your data. We collect the following when you use it:

  • Account information: the email address, name, and organization name you provide when you register.
  • Usage data: the optimization models you create, your solver executions, and feature usage patterns.
  • Cookies: essential cookies for session management and authentication. Our analytics are privacy-friendly and cookieless (see the Cookie Policy below).
  • Technical data: browser type, device information, and IP address, used for security and to operate the Service.

2. How We Store Your Data

Your data is encrypted in transit using TLS and is logically isolated per organization in our multi-tenant architecture, so only members of your organization can access it. Particularly sensitive fields — such as a stored AI provider key — are additionally encrypted at rest. If you self-host JAOT instead of using jaot.io, you run your own instance and act as the data controller for the data it holds; this policy then describes only the hosted instance.

3. Third-Party Services

We rely on a small number of third-party services to operate the hosted instance:

  • Anthropic (Claude API): powers the optional AI assistant. Your prompts and model descriptions are sent to Anthropic only when you use the assistant, and are processed under Anthropic’s terms. You can use your own Anthropic key instead.
  • Plausible Analytics: a privacy-friendly, self-hosted analytics tool used to understand aggregate usage. It is cookieless, does not track you across sites, and does not collect personal data.
  • Stripe (payments): used only if an operator enables monetization on their instance. On jaot.io monetization is off, so no payment data is processed. Where enabled, Stripe handles payment details directly and we never store card data.

Retrieval, embeddings, and all solver computations run locally on the Service and are not sent to any third party.

4. Data Retention

We keep your data for as long as your account is active. When you delete your account, your personal data, models, and execution history are permanently removed; any request that cannot be self-served through the platform is actioned within 30 days. AI assistant conversations are short-lived and are automatically discarded after a configured retention window. Anonymized, aggregated statistics that cannot identify you may be retained to improve the Service.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access: request a copy of the personal data we hold about you. Use the data export feature in your account settings, or contact us.
  • Erasure: delete your account and its associated data using the account deletion option in settings, or contact us.
  • Portability: export your data in a machine-readable JSON format from your settings page.
  • Rectification: update your personal information from your account settings at any time.
  • Objection: object to processing of your data. Our analytics are already cookieless and anonymous, and you can manage your cookie choice from the consent banner at any time.

6. How to Exercise Your Rights

You can exercise most of these rights directly in the platform: your account settings provide data export and account deletion. For anything that cannot be handled there, or if you need help, contact us at [email protected]. We respond to all requests within 30 days.

7. Cookie Policy

The hosted instance uses cookies sparingly:

  • Essential cookies: required for session management and authentication. These cannot be disabled while you are signed in.
  • Analytics: we use self-hosted, cookieless Plausible Analytics, which sets no tracking cookies and collects only aggregate, anonymous usage. A consent banner records your preference, stored locally in your browser.

You can review or change your choice at any time from the cookie consent banner, reachable via the Cookie Settings link in the footer.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

9. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at [email protected].