Legal

Privacy policy

Last updated: Tuesday, November 3, 2026

This document is a translation of the original Spanish version. In case of any discrepancy, the Spanish version prevails.

This privacy notice explains what personal data Jazui (“Jazui”, “we”, “us”) processes, why, who we share it with and how you can exercise your rights, in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its regulations.

1. Data controller

Jazui is the controller of your personal data. For any matter related to it you can write to us at support@jazui.com.

We process the bot request data and the visits from AI of your sites on your behalf, as a processor and only to provide the Service: you, as the site owner, are the controller of that data.

2. Data we process

If you have an account:

Identification and contact: name, email address, phone number (optional), profile picture (optional), language and preferences.
Access: hashed password, verification codes, sessions and sign-in history.
Sign-in with Google: if you sign in with Google we receive your verified email, your name and your profile picture. We never receive your Google password.
Your sites and content: domains, settings, rules, articles, images and the rendered pages we cache.
Bot requests: technical data of the requests your server sends us (URL, user agent, date, response code, approximate country and, if your integration sends it, the bot’s IP address). People visiting your site do not go through Jazui.
Visits from AI: if you add the visits script to your site, when someone arrives from an AI assistant (ChatGPT, Perplexity, Gemini…) it sends us only the source assistant and the visited page. It uses no cookies and does not store the IP address or any other data about that person.
Connections: the keys of your AI providers and the credentials of your social network channels, stored encrypted.
Billing: the details you give at payment (name, address and optional tax ID), customer and subscription identifiers, the plan and payment status. We do not store your card details: Stripe handles them.
Usage and security: logs of dashboard actions, errors and notifications.

If you use the website scanner without an account: the URL you scan, your IP address, approximate country, user agent and device data (type, operating system, browser, model if the browser provides it, screen and window size, and whether it is a touch device), language, time zone and the page you came from.

If you visit the website, the documentation or the dashboard: Google Analytics collects browsing data (pages viewed, visit duration, device type, browser, approximate country or city and where you came from) through cookies and identifiers in your browser.

We do not process sensitive personal data.

3. Purposes

Purposes necessary to provide the Service:

Create and manage your account and team, and verify your identity when you sign in.
Provide the Service: rendering, cache, rules, metrics, blog, AI, social networks, Search Console, notifications and reports.
Charge paid plans, issue receipts and meet tax and legal obligations.
Handle your support requests.
Protect the Service: prevent abuse, fraud and unauthorized access, and apply the scanner’s per-IP limits.

Secondary purposes:

Produce statistics on the use of the website, the scanner and the dashboard to improve the Service.
Measure visits to the website, the documentation and the dashboard with Google Analytics.

If you do not want us to process your data for the secondary purposes, write to support@jazui.com or block Google Analytics cookies (section 9); it does not affect the Service.

We do not sell your data, use it for advertising or use it to train AI models.

4. Google data (Search Console)

If you connect Google Search Console we only request read-only permission (webmasters.readonly). We read your account’s properties, search metrics (clicks, impressions and position) and the indexing status of your URLs, and show them in your dashboard alongside Jazui’s data. We store the access token encrypted and the data read while the connection is active; when you disconnect it, we delete them.

Jazui’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use that data for advertising, sell it or use it to train AI models.

5. Transfers and processors

We only share data with:

Stripe, to process payments.
Google, if you sign in with Google or connect Search Console, and as the provider of Google Analytics to measure visits to the website, the documentation and the dashboard.
The AI provider you choose, with your key and only with the content you send to generate or improve texts.
The social networks you connect, with what you post on them.
Hosting, network and email providers that provide the infrastructure on our behalf.
Your team members you invite, with the permissions you give them.
Authorities, when a law or an order from a competent authority requires it.

These transfers are necessary to provide the Service you contract or are required by law, so they do not require your consent. Some of these providers process data outside Mexico, with the safeguards required by law.

6. Retention

We keep your account data while the account exists. When you delete it we erase your sites, cache, articles, connections and Search Console data, and only keep what the law requires (for example, billing data) for the legal period. Website scanner data (the URL, IP, device and result) is kept for 90 days for statistics and abuse prevention, and is then deleted automatically.

7. ARCO rights and withdrawal of consent

You can access your data, rectify it, cancel it or object to its processing (ARCO rights), withdraw your consent and limit its use or disclosure. Many of these you can exercise yourself from the dashboard: edit your profile, disconnect Google or delete your account. For anything else, write to support@jazui.com from your account email stating your name, the right you want to exercise, the data it refers to and, if you act on behalf of someone else, the document that proves it. We will reply within 20 business days at most and, where appropriate, make it effective within the following 15 business days.

If you believe we have not handled your request properly, you can contact Mexico’s personal data protection authority.

8. Users in the European Economic Area and the United Kingdom

If you are in the European Economic Area or the United Kingdom, we process your data on the basis of performing the contract (providing the Service), meeting legal obligations (billing), our legitimate interest (security, abuse prevention and statistics) and your consent where we ask for it. In addition to the rights above, you have the right to data portability and to lodge a complaint with your supervisory authority. Transfers outside your region are made with the safeguards required by the GDPR, such as standard contractual clauses.

9. Cookies and local storage

The website, the documentation and the dashboard store in your browser what they need to work (your session, language, theme, interface preferences and your cookie choice) and Google Analytics cookies (_ga and _ga_*), used to count visits and see which pages are read. We do not use advertising cookies. Pages whose address carries a code (resetting your password, confirming your account or accepting an invitation) do not load Google Analytics.

If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics does not store cookies until you accept them in the cookie notice. You can change your choice at any time from “Cookie preferences” at the bottom of the website.

You can delete or block cookies from your browser, or turn off Google Analytics on every site with the Google Analytics opt-out browser add-on. How Google uses this data is explained on its page about data use on partner sites.

10. Security

Connections are encrypted (HTTPS), passwords are stored hashed, AI keys, Google tokens and social network credentials are stored encrypted, and access to the administration panel requires two-step verification. No system is infallible: if a breach significantly affects your rights, we will notify you.

11. Minors

Jazui is not intended for minors and we do not knowingly process their data.

12. Changes to this notice

If we change it significantly, we will notify you by email or in the dashboard before it takes effect, and publish the new version here with its date.

Questions about this document? Write to us at support@jazui.com