Privacy Policy

1. Scope and responsibilities

This policy covers information JIJ processes for its websites, client relationships, support, billing, and JIJ-operated tools. A client who operates a hosted website or LinkStudio page may separately control the information their visitors provide. Their own notices apply to their activities; JIJ processes service data to provide the relevant platform.

Some integrations and providers have their own notices and processing roles. This policy does not turn every provider into a processor or make JIJ the owner of client content. Client-specific data-processing instructions belong in the applicable agreement.

2. Information you provide

We receive contact and business details, account identifiers, service selections, domain details, project briefs, quotes, support messages, documents, approvals, and communications you choose to submit. Hosting support may involve files, databases, logs, mail configuration, DNS, and information needed to diagnose a problem.

Authentication systems protect account passwords using their supported mechanisms. Technical integrations may require separately protected credentials or tokens. Do not email or fax passwords, recovery codes, API keys, full card numbers, or unnecessary sensitive records. We do not need your complete card number in a project form; Stripe handles the payment-entry workflow.

3. Technical information and use

Requests may generate security and operational logs, such as IP addresses, timestamps, user-agent information, requested pages, errors, and authentication events. Essential cookies or similar storage support sessions, anti-forgery protections, preferences, and optional remembered features.

We use information to deliver services, maintain accounts, prepare and administer projects, handle payments, investigate support and abuse, protect systems, respond to requests, and meet applicable obligations. We do not sell or rent personal information or share it with others for their own marketing.

4. Providers and disclosures

Depending on the service, information may be processed by Stripe for payments; KnownHost and hosting/portal software providers for infrastructure; configured registrars for domain services; WHMCS MarketConnect, WebPros, and the selected product vendors for add-ons; OpenAI for live AI replies; Telnyx for calling, messages, and fax; and email providers, including Google where a designated mailbox receives a communication. The relevant order and workflow identify the service being used.

We share information needed to operate the selected service, support it, investigate abuse, comply with law, or protect rights and safety. A verified ownership handoff may disclose relevant service records to the parties involved. Business records may transfer as part of an actual business transfer, subject to applicable law. We do not treat this as permission to publish private documents.

5. Ask Jim and authenticated assistance

When live chat is enabled, submitted messages and relevant conversation context are sent to OpenAI to generate a reply. We do not enable OpenAI response storage for this integration; the provider's security and processing practices may still apply. AI can make mistakes. Public chat does not automatically read private WHMCS records. Separate authenticated support features use only the account context and permissions approved for that workflow.

The active public-chat session is cleared on the next interaction after one hour of inactivity. Clearing a conversation removes that active history; downloaded or emailed transcripts are separate copies. Transcript email requires address verification. A remembered name is stored on the device only when you choose that option.

Saved project memory is optional. With consent, a confirmed brief is stored on JIJ hosting and located with a secure browser cookie. It expires 30 days after the last save or Jim reply that uses it; simply opening or downloading it does not extend the period. Expired records cannot be loaded and scheduled cleanup removes them. Review, correct, download, or forget it through Project brief. When used in an AI reply, the brief is sent to OpenAI with that request. Forget it before leaving a shared device.

6. LinkStudio visitors, account owners, and teams

Standalone email/password accounts remain separate from WHMCS client accounts. Where the client-portal connection is used, the approved bridge passes limited account/user identifiers and first-name context. Workspace access follows the selected role; owners should invite only people who need access and revoke access when it is no longer appropriate.

Public link and page measurement uses event dates, device categories, and referring hostnames rather than retaining raw visitor IP addresses for those analytics. General infrastructure/security logs are separate. Published analytics-retention periods are 30, 90, 365, or 730 days depending on the plan. Contact-form messages are retained for 90 days; abuse reports, including optional contact details, for 180 days. Page history retains up to 30 versions per page.

Information entered into a page contact form is provided to that page owner. Avoid sending sensitive records in a public-page form. Owners are responsible for their own lawful content, notices, collection purposes, and use of received messages. Refer to the LinkStudio privacy page for the product-specific notice.

7. Fax and document workflows

A fax can contain the document itself, sender and recipient numbers, timestamps, page counts, delivery status, and related service identifiers. Telnyx processes transmissions. Incoming PDFs are routed to the designated operator mailbox and the private owner fax inbox. Confirm the recipient and use an appropriate channel for the sensitivity of the document. A fax line is not a guarantee of end-to-end encryption or suitability for regulated records.

Incoming PDFs in JIJ Fax are kept for 30 days. Fax metadata is retained for 30 days. An uploaded outbound original is cleaned up after 24 hours and its temporary provider-fetch link expires after one hour. A mailbox copy, a provider-held copy, or a copy downloaded by a person has a separate lifecycle and is not removed merely because the private inbox copy expires.

The owner document library is intended for blank master forms and approved working documents. Uploaded versions and recoverable trash are retained while the library is maintained; moving an item to trash is not permanent deletion. Completed client records should be handled through the appropriate private project or support workflow.

8. Retention, security, and requests

Account, billing, support, project, domain, and communication records are retained as needed for the service, legal and business obligations, dispute handling, and security. An account cancellation does not erase every invoice, backup, mailbox copy, or record immediately. Product-specific periods above apply to their stated records, not every copy in every system.

Access controls, account separation, encrypted website connections, and limited technical permissions are used as appropriate to the service. No system can guarantee complete security. Provider locations, transfers, and special requirements must be reviewed for the requested service; do not assume a particular data residency or regulatory certification without a written agreement.

Contact support@jijweb.com to request access, correction, export, deletion, or assistance with applicable privacy rights. We may verify your identity and authority, explain limitations, and direct requests about a client-controlled website to its owner. Applicable law determines available rights, deadlines, and appeals; statutory thresholds and exemptions must be assessed rather than assumed.

9. Communications, children, and changes

Optional SMS consent is separate from purchase. Frequency varies; message/data rates may apply. Reply STOP to opt out or HELP for help. Transactional emails, security notices, and required service communications may continue where appropriate. Contact preferences for a third-party page owner are managed with that owner.

JIJ services are intended for adults and authorized business or organizational users. We do not knowingly seek personal information from children under 18. Contact us if a child's information was submitted so the circumstances and appropriate action can be reviewed.

Material privacy changes will be communicated through an appropriate notice and, where applicable, account-holder email. Contact JIJ at support@jijweb.com, (319) 526-2002, or the contact page for questions. Fax documents only when the recipient and purpose are established.