Legal

Privacy

Two different relationships fit on this page. Your account data is ours to process. The data you upload about your guests and clients is yours — we only hold it on your behalf.

Last updated 2 October 2026

1. 01

   Two roles, not one

   For your account data — who you are, what you subscribe to, what you pay — AJJA is the controller. We decide why and how.

   For the data you upload to run your business — guests, clients, bookings, documents, staff — AJJA is a processor. The one who decides is the one in charge: you. We process it only to provide the service, on your instructions.

   The distinction is not a formality. It determines who one of your guests should send an erasure request to: you, not us.

2. 02

   What we process

   Account data: name, email address, business name, tax number and the billing details the subscription needs.

   Usage data: access logs, IP address, and the audit trail that records who changed what, and the value before and after.

   Your business data: everything you enter, and everything your guests and clients fill in through the portals and digital check-in. We use it for nothing other than providing your service.

3. 03

   On what basis

   Performance of the contract, for everything the platform needs to work and to bill you.

   Legal obligation, for what Portuguese law requires us to keep, tax records in particular.

   Legitimate interest, for security, abuse prevention and the audit trail.

   Consent, only where it is asked for separately and explicitly. We do not ask for it for anything the service depends on.

4. 04

   Where it lives

   Every client gets a database of their own, named ajja_tenant_<name>, holding their tables and no one else's. There is no column with your identifier separating you from other clients: the boundary is the database itself.

   Hosting: the platform's servers run at Hetzner, in Germany. Backups, encrypted, are kept in Cloudflare R2 under EU jurisdiction. The public site runs on Vercel.

5. 05

   For how long

   For as long as the account exists. When a client leaves, their database is dropped whole — no record sits flagged as deleted waiting for someone to notice.

   The exception is what tax law requires us to keep, which stays for the statutory period and is used for nothing else.

6. 06

   Who we share it with

   We do not sell data and we do not release it for advertising. We use the following processors, each for one concrete job:

   Before we connect a new processor — a certified invoicing issuer or AI-assisted features, for example — it is added to this list.

   Processor	What for	Where
   Hetzner	Servers the platform and its databases run on	Germany
   Cloudflare R2	Encrypted backups	European Union
   Vercel	Hosting the public site	United States
   Stripe	Payments and subscriptions	Ireland and United States
   Resend	Sending platform email	European Union (Ireland); company in the United States
   Cloudflare Turnstile	Protecting forms against automation	United States
   OpenStreetMap Nominatim	Turning addresses into coordinates	European Union

7. 07

   Transfers outside the EU

   Some of the processors above are based in the United States. Those transfers rely on the European Commission's standard contractual clauses and, where applicable, on the vendor's certification under the EU-U.S. Data Privacy Framework.

8. 08

   Your rights

   You have the right to access, correct, erase, restrict and object to processing, and to data portability.

   Portability is not a promise on paper: one request returns everything of yours — clients, bookings, invoices, documents and the people on your team — in a format another tool can read. Passwords are left out, as they should be.

   To exercise any of these, write to hello@ajja.io. If you believe we mishandled your data, you can complain to the Comissão Nacional de Protecção de Dados.

9. 09

   Changes

   When this policy changes in any way that matters, we email you before the change takes effect. The date at the top always tells you which version you are reading.