This policy explains what happens to personal data when you use the Jin VA website, buy a subscription, and run the software. It is written to be read, not to be survived.
MX Software Solutions (trading as Jin VA)
Sint Barbarastraat 4, 6301 EP Valkenburg, The Netherlands
Chamber of Commerce (KvK): 42114100
contact.mxmanagement@gmail.com
01Where your data actually lives
Jin VA is not a cloud product with a local skin. When you install it, a core runs as a background service on your own machine. It holds your specialists, your notes, your uploaded documents, your connected accounts' tokens, and the results it reads from your systems. All of that sits in a folder on your computer.
We operate no server that stores it, no database that mirrors it, and no backup of it. This has a consequence worth stating plainly: if you lose your machine and have no backup, that data is gone. Backing up your own computer is your responsibility.
02What we collect
| Data | When | Held by |
|---|---|---|
| Name, email | When you subscribe | Us and Stripe |
| Billing address, country, VAT number | At checkout, for invoicing and VAT | Stripe |
| Payment records (amounts, dates, card brand and last 4 digits) | Each charge | Stripe |
| Licence key and the machines it is activated on | On activation | Us |
| Support emails you send us | When you write to us | Us (Gmail) |
| Web server logs — IP address, page, timestamp, browser | Visiting jin-va.com | Us, via Railway |
We do not receive your card number. We do not build profiles, we do not run behavioural advertising, and we do not sell or share personal data with anyone for their own purposes.
03Why, and on what legal basis
- Providing the subscription — name, email, licence key, payment records. Basis: performance of our contract with you (GDPR Art. 6(1)(b)).
- Invoicing, VAT and accounting — billing details and payment records. Basis: legal obligation (Art. 6(1)(c)).
- Support — the emails you send. Basis: contract, and our legitimate interest in answering you (Art. 6(1)(b) and (f)).
- Keeping the service secure and working — server logs, licence activation counts. Basis: legitimate interest in preventing abuse and licence sharing (Art. 6(1)(f)).
- Service email — messages about your subscription, price changes, or a security issue. Basis: contract. These are not marketing and you cannot unsubscribe from them while you have an active subscription.
04How long we keep it
| Data | Retention |
|---|---|
| Invoices and payment records | 7 years — required by Dutch tax law |
| Account and licence records | While your subscription is active, then 12 months |
| Support correspondence | 24 months after the conversation ends |
| Web server logs | 30 days |
After those periods the data is deleted. Invoices are the exception we cannot make: we are legally obliged to keep them for seven years, so we cannot erase them on request.
05Who else processes data
We use a small number of providers. Each acts on our instructions under a data processing agreement.
| Provider | What for | Where |
|---|---|---|
| Stripe Payments Europe | Payments, invoices, VAT calculation | Ireland / USA |
| Railway | Hosting for this website and the licence service | USA |
| Cloudflare | DNS, and the fonts/scripts this site loads | USA |
| Our support mailbox, and the web fonts this site loads | USA / EU | |
| Anthropic | The AI model, on plans where AI usage is included | USA |
| ElevenLabs | Turning Jin's replies into speech, if you use the voice | USA |
On own-key plans you contract with the AI provider directly and we are not involved in that processing at all.
06Transfers outside the EEA
Several providers above are in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, and where applicable on the provider's certification under the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards for any specific provider.
07Sources you connect yourself
Jin can connect to your Google account, your Telegram, your own databases, and files you choose to upload into it. Those connections are made on your machine, by you. The access tokens are stored locally in Jin's vault; they are never transmitted to us.
You can disconnect any source in the app at any time, and revoke access at the provider itself. Removing a source deletes its stored token from your machine.
When you connect a source containing other people's personal data — your customers' emails, for instance — you are the controller of that data and we are not. Make sure you are entitled to connect it.
08Voice
- Listening and transcription happen entirely on your machine. Jin uses a speech recognition model that runs locally. Your microphone audio is not uploaded anywhere for transcription.
- Speaking does leave your machine. To give Jin a voice, the text of its reply is sent to ElevenLabs, which returns the audio. The text of the reply is what travels — not your microphone.
- You can turn the voice off in Settings, and Jin becomes text-only.
09Cookies and tracking
This website sets no cookies and contains no analytics, no tracking pixels, and no advertising scripts. That is why you are not being shown a consent banner: there is nothing to consent to.
Two things are still loaded from other companies, and your browser's request to them reveals your IP address: the web fonts (Google Fonts) and one graphics library (Cloudflare's cdnjs). When you click through to pay, Stripe's own checkout page sets its own cookies under Stripe's privacy policy.
10Security
- The website and all payment pages are served over HTTPS.
- Card details never touch our systems — Stripe handles them and is PCI DSS Level 1 certified.
- Credentials for your connected sources are stored in Jin's local vault on your machine, not by us.
- Access to our own systems is limited to the people who need it and protected by two-factor authentication.
If a breach affects your personal data and is likely to present a risk to you, we will notify you and the Dutch Data Protection Authority within 72 hours of becoming aware of it.
11Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or provide it in a portable format. You may also withdraw consent where we relied on it.
Email contact.mxmanagement@gmail.com and we will respond within one month. Exercising these rights is free and we will not treat you differently for it.
Note the practical limit: for the data on your own machine there is nothing for us to hand over or erase — it is already yours, and deleting it is a matter of deleting the folder.
12Children
Jin VA is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, tell us and we will delete it.
13Changes
If we change this policy we update the version and date at the top. Material changes — a new category of data, a new purpose, a new processor handling your content — are announced by email before they take effect.
14Contact and complaints
Write to contact.mxmanagement@gmail.com, or to MX Software Solutions, Sint Barbarastraat 4, 6301 EP Valkenburg, The Netherlands.
If you are not satisfied with our answer you can complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl. If you live in another EU country you may complain to your own national authority instead.