Privacy Policy

1. Who We Are

Justify is a student project developed by an individual based in Belgium. We operate an AI-powered data analytics platform at this website. For any privacy-related questions, you can reach us at briancuppen@icloud.com.

2. What Data We Collect

• Account information: your name and email address, obtained via Google OAuth when you sign in.
• Uploaded files: CSV, Excel, JSON, or Parquet files you upload for analysis. These are stored securely on Supabase Storage.
• Usage data: basic logs of API requests for debugging and rate-limiting purposes.
• No payment data is stored by us directly — payments are processed by Stripe, who handle card details.

3. Why We Collect It

• To provide the core service: authenticating you and running analyses on your datasets.
• To improve the platform: understanding usage patterns helps us fix bugs and prioritise features.
• To process payments: credit purchases are handled via Stripe.

4. Legal Basis (GDPR)

As we operate from Belgium, we process your personal data under the following legal bases under GDPR Article 6:

• Contract performance: processing your data is necessary to provide the service you signed up for.
• Legitimate interests: basic logging and security monitoring.
• Consent: where you have explicitly agreed (e.g. cookies, if applicable).

5. How Long We Keep Your Data

• Account data: retained as long as your account is active.
• Uploaded datasets: retained until you delete them, or when your account is deleted.
• You can request deletion of your data at any time by emailing us.

6. Who We Share Your Data With

We do not sell your data. We share it only with the following third-party services that power the platform:

• Supabase — file storage and database hosting.
• Google — OAuth authentication.
• Stripe — payment processing.

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ('right to be forgotten').
• Object to or restrict processing.
• Data portability.
• Lodge a complaint with the Belgian Data Protection Authority (GBA/APD) at gegevensbeschermingsautoriteit.be.

8. Cookies

We use only essential cookies required for authentication (JWT tokens stored in memory or localStorage). We do not use tracking or advertising cookies.

9. Security

We take reasonable technical measures to protect your data, including HTTPS encryption in transit and access-controlled cloud storage. As a student project, we recommend not uploading sensitive or confidential business data.

10. Changes to This Policy

We may update this policy as the platform evolves. We will note the last updated date at the top of this page. Continued use of the platform after changes constitutes acceptance.

11. Contact

For any privacy questions or data requests, email us at briancuppen@icloud.com. We aim to respond within 30 days.