Privacy policy

This explains what JoinerKit keeps about you when you use joinerkit.com, why, who helps us run it, and what you can ask us to do. We keep as little as we can, we never sell it, and we never use it for advertising.

Who we are

JoinerKit is run by JoinerKit in the United Kingdom, and we are responsible for your information (the “controller” under UK data protection law). For anything about your information, email contact@joinerkit.com.

What we keep

• Your account: your email address and, if you sign up with a password, a scrambled copy of it (a hash) that nobody can read back, us included. If you sign in with Google, Google tells us your email address, name and profile picture.
• Your work: the jobs you design, your materials and prices, your settings, and any business details you add (such as your business name and your name), so they are there whenever you sign in.
• Copies you send: when you send a copy of a job to another account, they receive that copy with your email address so they know who it is from. Your prices are left out of the copy.
• Technical details: like every website, our hosting keeps short-lived records of visits (such as your IP address and browser) to keep the site secure and working.
• Receipts: only for accounts we have set up to keep receipts. Their receipt images and details are stored, and the images are read by an AI service to fill in the details.

Why we use it

• To give you the service you signed up for: your account, saving your jobs, sending copies, and the emails that go with your account (confirming your address, resetting your password). The law calls this performing our contract with you.
• To keep JoinerKit secure, stop misuse and fix problems. This is in our legitimate interests, and yours.
• When paid plans start, to take payment and keep the records the law requires.

We don't send marketing emails. If we ever want to, we will ask first.

Who helps us run it

These companies process information for us, only on our instructions:

• Supabase: our database, sign-in and file storage. Your account and jobs are stored on its servers in London.
• Vercel: hosts the website, from data centres around the world, including the United States.
• Brevo: sends our emails (confirmations and password resets).
• Google: only if you choose “Continue with Google” to sign in.
• Anthropic: reads receipt images, for accounts with receipts only.
• Stripe: will take payments when paid plans start. We never see or keep your full card details.

Where any of them handle information outside the UK, they do so under the safeguards UK law requires, such as the UK's international data transfer agreements or the UK–US data bridge. We may also share information if the law requires it.

How long we keep it

We keep your account and jobs for as long as your account is open. You can delete your account at any time from the Account page, which removes your account and everything in it straight away; copies in our providers' backups are removed within 30 days. When paid plans start, billing records are kept for six years because UK tax law requires it.

Your rights

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that's wrong
• delete your information
• stop or limit how we use it, or object to it
• give you your information in a form you can take elsewhere

Email contact@joinerkit.com and we will reply within a month. These rights apply wherever you live. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.

Keeping it safe

Everything travels over an encrypted connection, passwords are stored only as hashes, and our database lets each account reach only its own information.

Cookies

We only use the cookies and on-device storage the site needs to work, such as keeping you signed in. Our cookies page lists them.

Children

JoinerKit is for people aged 18 and over. We don't knowingly keep information about children.

Changes

If we change this policy, we will update the date at the top. If a change matters, we will tell you by email or in JoinerKit before it takes effect.