Privacy Policy
Contents
1. Information We Collect
1.1 Information you provide
- Account information: the username and password you choose when you register. Passwords are stored hashed, never in plain text.
- Uploaded files: GC log files (
.log,.txt,.gc) and thread dumps (.txt,.log,.tdump,.jstack) that you upload for analysis, together with the parsed reports and AI diagnoses generated from them. - Conversations & memory: chat messages within sessions and long-term "Facts" you create or that the agent saves.
- Team information: organization names, member email addresses used for invitations, and member roles.
- Optional model configuration: if you configure your own LLM, the API Base URL, model name, and API key you enter. API keys are stored masked and encrypted at rest; the full key is never returned by our API.
- Billing information: when you purchase a subscription, payment is processed by Paddle. We store your plan, subscription status and invoice metadata, but we do not collect or store your full card number.
1.2 Information collected automatically
- Usage data: counts of uploaded files, AI calls, and API calls used to enforce your plan's quotas.
- Audit logs: security-relevant actions (such as logins and administrative changes) recorded with the acting user, IP address, and timestamp.
- Technical data: IP address (used for registration rate-limiting and security), browser type, and approximate request times.
2. How We Use Information
- To provide, operate and maintain the JVMind service — including parsing your logs and generating analysis.
- To create and manage your account, sessions and teams.
- To process subscriptions and enforce plan limits and quotas.
- To send AI analysis requests to the language model you have selected (the system model for Free users, or your own configured model).
- To detect, prevent and address fraud, abuse and security issues.
- To comply with legal obligations.
We do not sell your personal information to third parties.
3. Service Providers & Third Parties
We rely on the following categories of third parties to operate JVMind:
| Provider | Purpose | Data involved |
|---|---|---|
| LLM providers (e.g. the model vendor behind the system model, or the provider of the API key you configure) |
Generate AI analysis and chat responses | Parsed log summaries and the conversation text required to answer your question |
| Paddle | Payment processing (Merchant of Record) and subscription management | Payment details, billing email, subscription records — governed by Paddle's own privacy policy |
| Google (optional) | Google OAuth sign-in for Team SSO and email invitations | Email address and basic profile provided by Google upon consent |
| Email delivery (when configured) | Send team-invitation emails | Invitee email address |
When AI analysis is requested, the content needed to produce it (such as parsed GC/jstack summaries and your question) may be transmitted to the applicable LLM provider. Do not upload files containing secrets you do not want sent to your configured model.
4. When We Share Information
We share information only as described in this policy, with the processors above, or when required to:
- Comply with legal obligations or respond to lawful requests from public authorities.
- Protect the rights, property or safety of JVMind, our users or the public.
- In connection with a merger, acquisition or sale of all or part of our assets (subject to confidentiality).
5. Cookies & Local Storage
JVMind uses a minimal set of storage mechanisms:
- Session/authentication cookies and a CSRF token cookie, required to keep you signed in and to protect against cross-site request forgery.
- Browser local storage for interface preferences (e.g. theme and language) and cached single-thread analysis results.
We do not use advertising or cross-site tracking cookies. You can clear cookies and local storage through your browser settings, though doing so will sign you out.
6. Data Retention
- Account data & sessions: retained for the life of your account. When you delete a session or report, it is removed from our storage.
- Uploaded files: retained with your session history so reports remain re-openable. Delete a session or report to remove the associated data.
- Usage counters & audit logs: retained as needed to operate quotas, billing and security, and then aggregated or deleted.
- Account deletion: see Your Rights — deleting your account removes your associated personal data.
7. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct or update inaccurate information.
- Export your session and report data.
- Delete your data and account.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on it.
To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
8. International Transfers
JVMind and its processors may process and store information in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers. By using JVMind, you acknowledge that your information may be transferred to and processed in such countries.
9. Security
We use reasonable administrative, technical and physical safeguards designed to protect your information — for example hashed passwords, masked/encrypted API keys, CSRF protection, and registration rate-limiting. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.
10. Children's Privacy
JVMind is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the “Effective date” above and, for material changes, provide notice (such as in-app or by email). Continued use of JVMind after a change takes effect means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or your personal data, contact: