XOSystem, Via E. Cialdini 28, 61121 Pesaro (PU), Italy — VAT IT02345150417. To exercise your rights or ask anything: info@janvas.com.
We have not appointed a Data Protection Officer: we are not required to.
| Account data | your name, email address, profile picture and Google account identifier, all provided by Google when you sign in. We do not process passwords: authentication is Google's. |
|---|---|
| Session data | a fingerprint ( hash ) of your access token, your IP address, your browser and operating system (user agent) and the session expiry date. |
| Saves | how many times you have saved a document: a number, nothing about the document itself. |
| Subscription | whether you subscribe, and until when your subscription is paid. Your card details and billing address are handled by Stripe and never reach our systems. |
| In your browser | your session token and a few editor preferences are kept in your browser's localStorage. |
| Usage statistics | only if you accept them, separately on the website ( www.janvas.com ) and in the application ( app.janvas.com ): the pages you open and how you interact with them, your approximate location, your device and browser, collected by Google Analytics with its own cookies. They never include the contents of your documents. |
⭐ We never receive the documents you draw. Opening and saving read and write files on your own computer and do not pass through our servers: we hold no copy and do not know their contents.
| Providing the service | creating your account, keeping you signed in, and counting your saves. Basis: performance of the contract (Art. 6(1)(b) GDPR). |
|---|---|
| Selling the subscription | charging and renewing it, and ending it when you cancel. Basis: performance of the contract. |
| Security and abuse prevention | IP address and user agent let us recognise sessions and limit abnormal use. Basis: legitimate interest (Art. 6(1)(f)) in protecting the service. |
| Usage statistics | understanding, in aggregate, how the website is visited and how the application is used. Basis: consent (Art. 6(1)(a)), which you can withdraw at any time from « Cookie preferences » — at the bottom of every page of the website, and in the account menu of the application. |
We do not use your data for profiling or advertising, and we do not make automated decisions producing legal effects concerning you.
| Google Ireland / Google LLC | authentication ( Google sign-in ), the Google Sheets you choose to link to a table, and — on the website and in the application, only if you accept — Google Analytics 4. ⚠️ See sections 5 and 9. |
|---|---|
| Stripe / Link | subscription payments: Stripe runs the checkout page, collects the payment and the billing address and handles VAT; the subscription is sold through Link, where you manage and cancel it. |
| IONOS | server and database hosting. |
We do not sell your data and do not share it with third parties for marketing.
When you are not signed in, the application loads the Google sign-in script, which is what makes the sign-in button work: at that moment your IP address reaches Google, even before you sign in. Once you are signed in, opening the application does not contact Google again, unless you have accepted usage statistics ( section 9 ).
Google Sheets. If you fill a table, a chart or a data table from a Google Sheet, your browser reads that sheet directly from Google: your IP address reaches Google each time it is read. A sheet set to linked is read again every time you open the document and whenever you reload it; one set to embedded is read once, and its data then stays in your file. The sheet's contents never pass through our servers. Nothing is read from Google unless you link a sheet yourself.
⭐ The fonts and icons of the application are served from our own servers: for those, no request leaves for Google.
Google and Stripe may process data outside the European Economic Area, in particular in the United States. Where it does, transfers rely on the safeguards provided for by the GDPR — adequacy decisions or the European Commission's standard contractual clauses. Write to us if you would like more detail.
| Account | for the duration of the relationship. Ask us to close your account and we delete it, with its sessions, within 30 days. |
|---|---|
| Saves and subscription | for the duration of the account, and deleted with it. Payment records are kept by Stripe, under its own obligations. |
| Sessions | until they expire, and in any case no more than 30 days after last use. Signing out deletes the session at once. |
| Usage statistics | Google Analytics keeps user-level data for 14 months and event-level data for 2 months, then deletes it. |
At any time you may ask us for access to your data, its rectification, erasure, restriction of processing, portability in a machine-readable format, and you may object to processing based on legitimate interest.
Write to info@janvas.com: we reply within 30 days.
If you believe the processing infringes the GDPR you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the country where you live.
The Janvas application sets a single cookie of its own, cookie_consent, which only remembers your
answer to the statistics banner for six months; it uses no profiling tools.
We use your browser's localStorage for your session token, which is strictly
necessary to keep you signed in, and for editor preferences such as the fonts you installed. It does not
track you across other sites and does not require consent. You can remove it at any time by signing out or
clearing site data in your browser.
Google sign-in may set its own technical cookies, governed by Google's notice.
On the website ( www.janvas.com ) and in the application ( app.janvas.com ) a banner
asks whether you accept statistics cookies; the two choices are separate. Only if you click « Accept » does the page
load Google Analytics 4, which sets its cookies ( _ga, _ga_* on the website,
app_ga, app_ga_* in the application ); if you click
« Refuse », nothing is loaded from Google. Google Signals and advertising features are turned off. You can change your
choice at any time from « Cookie preferences » — at the bottom of every page of the website, and in the account menu of
the application: refusing after accepting deletes the Google Analytics cookies of that side only.
If we change how we process data we will update this page and, where the change is significant, tell you by email. The effective date is always shown at the top.