Privacy Policy

Two different relationships

This distinction determines who is responsible for what, and it is the most important thing on this page.

• Operators are our customers. When you sign up to run a dating site, we are the data controller for your account: your name, email, billing details and how you use the console.
• Members belong to the operator's site. When someone joins a dating site built on Jodibana, that operator is the controller of their data and we are the processor. We store and protect it, and we act on the operator's instructions — we do not decide what it is used for, and we do not use it to market anything.

What we collect from operators

• Account: name, email address, password (hashed, never stored in readable form), organisation name.
• Billing: subscription tier, invoices and payment status. Card numbers never reach our servers — payments are handled by Stripe, and we store only a token and the last four digits.
• Usage: which console pages you open and which actions you take, recorded in your site's activity log so your own team can audit changes.
• Technical: IP address, browser and timestamps, retained for security and abuse investigation.

What we process for members

On behalf of each operator: profile details, photos, messages, matches, and any custom fields that operator has configured. Messages and sensitive credentials are encrypted at rest with keys that can be rotated. We do not read member messages except where required to investigate a specific abuse report or where compelled by law.

Who we share with

Only the processors needed to run the service:

• Google Cloud — hosting and compute.
• Neon — managed database.
• Upstash — realtime messaging infrastructure.
• Stripe — payments.
• Postmark — transactional email.

We do not sell personal data, and we do not share it with advertisers or data brokers. Never.

How long we keep it

• Operator accounts: for as long as the account is open, then 90 days.
• Member data: controlled by the operator, deleted when they delete it or within 90 days of their site closing.
• Billing records: 7 years, because tax law requires it.
• Security logs: 12 months.

Your rights

You can access, correct, export or delete your data. Operators can export their site's data from the console at any time. If you are a member of a site hosted here, contact that site's operator first — they control your data. If they do not respond, contact us and we will help.

Depending on where you live you may have rights under GDPR or the CCPA, including objecting to processing and lodging a complaint with a supervisory authority.

Children

Jodibana is not for anyone under 18, and sites built on it must not accept members under 18. If we learn that a minor has an account we remove it.

Contact

Privacy questions: privacy@jodibana.com. Postal address and other contact routes are on our contact page.