Privacy Policy

1.Introduction

This policy applies to personal information we process when you use the Joysts website, applications, and services (the “Service”). It should be read together with our Terms of Service. By using the Service, you acknowledge the practices described here.

2.Who we are & our role

Joysts is the controller responsible for your personal information under this policy. You can reach our privacy team at privacy@joysts.com.

For purchases, Paddle.com Market Ltd acts as our Merchant of Record and is an independent controller of the payment and billing information it collects at checkout. Please review Paddle's Privacy Policy for how they handle that data.

3.Information we collect

Information you give us

• Account information — your name, email address, password (stored hashed), and sign-in provider if you use SSO.
• Property information — the addresses you add and details about your home.
• Your Content — documents, photos, notes, and files you upload or forward by email (for example, inspection reports, deeds, permits, warranties, receipts, and appliance manuals), which may contain personal information you choose to include.
• Communications — messages you send us, including support requests and the questions you ask the AI assistant.

Information we generate or collect automatically

• Derived record data — facts, findings, and summaries our systems extract from Your Content.
• Usage & device data — log data, device and browser type, approximate location (from IP), and interactions with the Service.
• Cookies & similar technologies — see Cookies & analytics.

Information from third parties

• Public property records — parcel, ownership, tax, and permit data retrieved for the addresses you add.
• Environmental & climate data — risk indicators based on the property's approximate location.
• Payment status — subscription and payment status from Paddle.com Market Ltd. We do not receive or store your full payment card number.

4.How we use information

• To provide, maintain, and secure the Service and your home record;
• To read and organize Your Content into a structured record and to answer your questions;
• To retrieve and merge relevant public records and environmental data for your address;
• To send you service messages, maintenance reminders, and (if enabled) the Weekly Pulse;
• To process your subscription and prevent fraud and abuse (with our Merchant of Record);
• To provide support and respond to your requests;
• To understand and improve the Service through analytics; and
• To comply with law and enforce our Terms.

5.How we process documents with AI

To build your record and answer questions, we send the relevant parts of Your Content and your questions to AI providers acting as our processors. We've designed this pipeline to protect your data:

• Your documents and photos are processed by Anthropic under commercial terms that prohibit using your data to train their models, and are retained by them only transiently to return a result.
• We do not send your documents or photos to Google's Gemini. Google's AI is used only for non-personal reference data and classification tasks, and never for your uploaded files.
• We do not train our own models on your content, and we do not sell or share Your Content for advertising.
• Answers are grounded in your own documents, with citations, and the assistant is designed to indicate when it is uncertain. AI output can still be wrong — see the AI disclaimer in our Terms of Service.

6.Legal bases (EU/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, analyze, and improve the Service, where not overridden by your rights); consent (for optional cookies and certain communications, which you may withdraw); and legal obligation (to meet legal and accounting requirements).

7.How we share & sub-processors

We do not sell your personal information. We share it only as needed to run the Service: with the service providers (“sub-processors”) listed below, each under contract and limited to the purpose shown; with our Merchant of Record to process payments; in connection with a merger, acquisition, or asset sale (with notice); and when required by law or to protect rights and safety.

We keep this list current as our infrastructure evolves. For questions about our sub-processors, contact privacy@joysts.com.

8.Cookies & analytics

We use strictly necessary cookies to keep you signed in and secure, and analytics (via PostHog) to understand how the Service is used so we can improve it. You can control non-essential cookies through your browser settings and, where required, a consent prompt. Disabling essential cookies may break parts of the Service.

9.Data retention & deletion

We keep your personal information for as long as your account is active and as needed to provide the Service. You can:

• Export your data at any time from Settings → Your data as a JSON archive; and
• Delete your account from Settings → Delete account, which permanently removes your account, properties, and records.

When you delete your account, uploaded files are purged from storage within 30 days. We may retain limited information where necessary to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements, and residual copies may persist in backups for a limited period before being overwritten.

10.Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. Many of these you can exercise directly in the app (export and delete). For anything else, email privacy@joysts.com and we will respond as required by law. We will not discriminate against you for exercising your rights. If you are in the EEA/UK, you also have the right to complain to your local data protection authority.

11.How we protect your data

We use technical and organizational measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

12.International transfers

We and our sub-processors are located primarily in the United States, so your information may be transferred to and processed in the US and other countries whose data-protection laws may differ from yours. Where required, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.

13.Children's privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact privacy@joysts.com and we will delete it.

14.US state privacy rights

Residents of California and other US states with privacy laws may have rights to know, access, correct, delete, and port their personal information, and to opt out of “sale” or “sharing” of personal information and certain targeted advertising. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise your rights, use the in-app tools or email privacy@joysts.com. You may use an authorized agent, and you may appeal a decision by replying to our response.

15.Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice. Please review it periodically.

16.Contact us

To exercise your rights or ask a privacy question, contact: