Best-effort in-house draft — not counsel-reviewed. See CEO before publication.
Privacy Policy
Last updated: August 4, 2026
JamRouter is published by The Missing Piece Software LLC, a Georgia limited liability company ("we", "us", "Company"). This policy explains what personal data we collect through the JamRouter website at jamrouter.com and its associated account, checkout, and download flows — and how we use, share, and protect that data.
This policy covers the website only. The JamRouter desktop application has its own privacy notice shipped with the software.
TL;DR
- We collect your email address to create your account and your payment information to process your purchase. That's it for required data.
- We use Supabase for authentication, Stripe for payments, and Vercel for hosting. Each is named below with links to their own privacy policies.
- We do not sell your data, run behavioral advertising, or share your information with data brokers.
- Cookies are limited to session authentication — no tracking pixels, no third-party analytics cookies.
- You can delete your account and data at any time by emailing us.
1. Data we collect
| Data | When | Why |
|---|---|---|
| Email address | Account creation | Authentication, license delivery, support correspondence |
| Password (hashed) | Account creation | Authentication — we never store or see plaintext passwords |
| Payment details (card number, billing address) | Checkout | Process your purchase — handled entirely by Stripe; we never receive or store full card numbers |
| IP address | Every page visit | Server logs, rate limiting, fraud prevention |
| Cookies (session token) | After sign-in | Keep you authenticated — see "Cookies" below |
| Feedback screenshots and descriptions | When you submit a bug report from the desktop app | Diagnose and fix issues you reported |
We do not collect audio content, plugin usage data, microphone input, biometrics, precise geolocation, or social media profiles.
2. Legal basis for processing (GDPR)
If you are in the European Economic Area, United Kingdom, or Switzerland, we process your data under the following bases:
- Performance of a contract — processing your payment, delivering your license, and maintaining your account are necessary to fulfill our agreement with you.
- Legitimate interest — server logging, fraud prevention, and improving our service. We balance our interests against your privacy rights and do not use these bases for marketing or profiling.
- Consent — where required by law (e.g., optional marketing emails, if we ever offer them). You may withdraw consent at any time.
3. CCPA disclosure (California residents)
Under the California Consumer Privacy Act and the California Privacy Rights Act:
- We collect the categories of personal information described in Section 1 for the business purposes listed there.
- We do not sell personal information.
- We do not share personal information for cross-context behavioral advertising.
- You have the right to know, delete, and correct your personal information, and to opt out of any future sale (though none occurs today). See "Your rights" below.
4. Who we share data with (sub-processors)
We share personal data only with the service providers that operate our infrastructure. We do not sell data or share it for advertising.
| Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Supabase Inc. | Authentication, database | Email, hashed password, account metadata | supabase.com/privacy |
| Stripe Inc. | Payment processing | Payment details, email, billing address | stripe.com/privacy |
| Vercel Inc. | Website hosting, edge functions | IP address, request metadata (server logs) | vercel.com/legal/privacy-policy |
We may also disclose data if required by law, subpoena, or court order, or to protect the rights, safety, or property of our users or the public.
5. Data retention
- Account data (email, hashed password) — retained while your account is active. Deleted within 30 days of an account deletion request.
- Payment records — retained by Stripe per their policies and as required by tax and financial reporting laws (typically 7 years).
- Server logs (IP addresses, request metadata) — retained for up to 30 days, then automatically purged.
- Feedback reports (screenshots, descriptions) — retained until the reported issue is resolved, then deleted within 90 days.
6. Your rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — ask us to delete your account and personal data.
- Portability — receive your data in a structured, commonly used format.
- Restriction / objection — ask us to limit or stop processing in certain circumstances.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, email privacy@jamrouter.com. We will respond within 30 days (or sooner where required by law).
7. Cookies
JamRouter uses a minimal set of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Supabase auth session token | Keep you signed in after login | Session / up to 7 days |
We do not use advertising cookies, third-party analytics cookies, tracking pixels, or fingerprinting. Because we use only strictly necessary cookies, no cookie consent banner is required under the ePrivacy Directive — but we disclose their use here for transparency.
8. Children's privacy
JamRouter is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at privacy@jamrouter.com and we will delete it promptly.
9. International data transfers
Our sub-processors (Supabase, Stripe, Vercel) operate servers in the United States and other countries. If you are located outside the United States, your data may be transferred to, stored, and processed in the United States or other jurisdictions where our sub-processors maintain facilities. These providers maintain appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) for international transfers as described in their own privacy policies.
10. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. No method of transmission or storage is 100% secure. If you discover a vulnerability, please report it to security@jamrouter.com.
11. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. If a change materially affects how we handle your data, we will notify you by email or through a notice on the website before the change takes effect.
12. Contact
Questions about this policy or your personal data:
- privacy@jamrouter.com — privacy and data requests
- support@jamrouter.com — general support
- security@jamrouter.com — security disclosures
The Missing Piece Software LLC
A Georgia limited liability company