Privacy Policy

1. Introduction

JustSoftLab ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website justsoftlab.com (the "Site") or engage our services.

2. Information We Collect

Information you provide directly:

• Name, email address, phone number, and company name when you fill out a contact form or request a consultation.
• Any additional information you choose to include in messages or project briefs.
• Employment-related data if you apply for a position through our career page.

AI Assistant conversations:

• The full text of messages you exchange with our on-site AI Assistant (the "Ask AI" chat widget and the /ai page) is logged on our servers for service-quality and security purposes.
• If, during the conversation, you choose to share contact details (name, role, email, optionally phone, company), they are stored together with the conversation.
• We do not record audio or video. We do not log credit card or other payment data — please do not share such information with the assistant.
• Conversation logs are retained for 90 days, after which they are automatically deleted.

Information collected automatically:

• A non-reversible hash of your IP address (used for rate limiting and abuse detection — we do not store the raw IP).
• Approximate city and country derived from your IP at the time of the request.
• Browser user agent string and referring URL.
• Pages visited, time spent on pages, and other browsing behavior.
• Cookies and similar tracking technologies (see Section 6).
• Cloudflare Turnstile (a privacy-respecting bot-check) verifies that you are a human visitor before chat messages are processed. Turnstile does not use tracking cookies or user-identifying data.

3. How We Use Your Information

• To respond to your inquiries and provide requested services.
• To communicate about projects, proposals, and service updates.
• To improve our website, services, and user experience.
• To send occasional marketing communications (only with your consent).
• To comply with legal obligations and enforce our agreements.
• To detect, prevent, and address technical issues or security threats.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data based on:

• Consent — when you submit a form or opt in to communications.
• Legitimate interest — to improve our services and respond to business inquiries.
• Contractual necessity — to fulfill our obligations under a service agreement.
• Legal obligation — to comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service providers — hosting, analytics, and email delivery platforms that process data on our behalf.
• Legal authorities — when required by law, court order, or governmental regulation.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Cookies and Tracking

We use cookies and similar technologies to analyze website traffic, remember preferences, and improve your experience. You can control cookie settings through your browser. Disabling cookies may limit certain features of the Site.

We may use the following types of cookies:

• Essential cookies — required for the Site to function properly.
• Analytics cookies — help us understand how visitors interact with the Site.
• Marketing cookies — used to deliver relevant content and measure campaign effectiveness.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 24 months unless a business relationship is established, in which case data is retained for the duration of the engagement plus any legally required retention period.

AI Assistant conversations are retained for 90 days from the last message, then automatically deleted. If you provided contact details during the conversation and we follow up about a real engagement, the contact details may be moved into our regular CRM and retained per the contact-form rule above.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent at any time.

Quick deletion of your AI Assistant conversations:

If you have shared an email with our AI Assistant and wish to remove all conversations tied to that address, send us a one-line request to privacy@justsoftlab.com from that email. We will delete every conversation linked to it within 7 business days and confirm by reply.

For any other rights above, contact us at the same address.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), access controls, and regular security assessments.

10. International Transfers

Your data may be transferred to and processed in the United States and Ukraine, where JustSoftLab operates. We ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission, where applicable.

11. Children's Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: