Privacy Notice

1. Scope and roles

This Privacy Notice applies when you visit public pages, search the library, create or use an account, communicate with another user, or use a Djoomba workspace tool. It does not govern a third-party website or service merely because Djoomba links to or integrates with it. Depending on applicable law, the Operator acts as the controller or business responsible for personal information processed through this deployment.

2. Information we collect

Information you provide

• Account information: identifiers and profile, authentication, role, and account-setting data.
• Workspace content: prompts, drafts, generated results, notes, publishing jobs, settings, and other material you choose to store.
• Communications: messages, attachments, filenames, file sizes and types, recipients, timestamps, and related delivery information.
• Requests: information included in correction reports, support messages, privacy requests, or other correspondence.

Information collected automatically

Public visits record IP address, date and time, requested page, referrer, browser user agent, and approximate city, region, country, latitude, and longitude when Cloudflare supplies that information. Submitted library searches are associated with the visit log. The private trigger code 9999 is never stored as a library search.

We also process session and authentication events, feature activity, quotas, file and attachment usage, errors, security events, and technical data needed to operate and protect the Service. Approximate location is network-derived and may be inaccurate; Djoomba does not need your device's precise GPS location for public visitor analytics.

3. Sources of information

We obtain information directly from you, automatically from your browser and use of the Service, from other users who communicate with you, and from infrastructure or integration providers that process requests for the Service. Research metadata and publication content may come from public scholarly sources; it is governed by the source's own notices and terms.

4. How we use information

We use personal information to:

• provide, personalize, maintain, and troubleshoot the Service;
• authenticate users, enforce roles, deliver messages and attachments, and save workspace data;
• measure readership, searches, geographic reach, quotas, and feature performance;
• protect users and the Service, prevent abuse, investigate incidents, and maintain logs;
• respond to requests, administer accounts, and communicate service or legal notices;
• improve features and evaluate the reliability of automated systems; and
• comply with law, lawful process, and enforceable agreements.

Automated tools generate, transform, classify, or validate content at your request. Djoomba does not use those outputs to make legal or similarly significant decisions about a person.

5. Legal bases for processing

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you; for legitimate interests such as operating, securing, measuring, and improving the Service; to comply with legal obligations; to protect vital interests where relevant; and with consent when consent is required. You may withdraw consent at any time, without affecting earlier lawful processing. Legitimate interests are balanced against your rights and reasonable expectations.

6. How we disclose information

Information may be disclosed:

• To people you choose: messages, attachments, publications, or other content are available to the recipients or audience you select.
• To service providers: hosting, database, network, security, storage, analytics, research-data, and AI providers process information to perform services for Djoomba.
• For legal and safety reasons: when reasonably necessary to comply with lawful process, protect rights or safety, investigate abuse, or enforce agreements.
• In a business transfer: in connection with due diligence, financing, reorganization, merger, sale, or transfer of all or part of the Service, subject to appropriate safeguards.
• With your direction or consent: when you request an integration or otherwise authorize disclosure.

Exact public-visitor IP addresses and search logs are restricted to authenticated Djoomba administrators and are not displayed on public pages. Djoomba does not sell personal information for money or share it for cross-context behavioral advertising as those terms are defined by California law.

7. Cookies and similar technologies

Djoomba uses cookies and comparable storage that are necessary for authentication, security, preferences, and operation of the Service. Authentication uses secure, HTTP-only session cookies where configured by the deployment. Blocking necessary cookies may prevent account features from working. Djoomba does not use third-party behavioral advertising cookies.

8. Retention

We retain information for as long as reasonably necessary for the purposes described above, including providing the Service, maintaining security and audit records, resolving disputes, and meeting legal obligations. Retention depends on the kind of record, account status, sensitivity, operational need, and applicable law. Public visit records, including exact IP and associated search activity, are currently retained until the Operator removes them. Deleted information may remain for a limited period in backups or when preservation is required for security, fraud prevention, legal claims, or law.

9. Security and international processing

Djoomba uses technical and organizational safeguards designed to protect information, including server-side authorization and access controls for private workspace features. Some private content is protected by application encryption where the relevant feature provides it. No storage or transmission method is completely secure, and we cannot guarantee absolute security. You should use a unique password and protect your session.

The Operator and service providers may process information in countries other than where you live. Where required, transfers are made using a legally recognized transfer mechanism or another lawful basis. Local laws in those countries may differ from yours.

10. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information; to restrict or object to processing; to withdraw consent; and to appeal a denied request. You may also have the right to lodge a complaint with a privacy or data-protection authority. California residents may additionally have rights to know the categories, sources, purposes, disclosures, and specific pieces of personal information processed and to receive equal service when exercising applicable rights.

Submit a request through the contact page. Describe the right you wish to exercise and the account or activity involved. We may verify your identity and authority before acting, and an authorized agent may need to provide proof of authority. We will respond within the period required by applicable law. We may deny or limit a request when the law permits or requires it and will explain the basis where required.

11. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child provided information in violation of applicable law, contact the Operator so the matter can be investigated and addressed. A higher minimum age or parental-consent rule may apply in your jurisdiction.

12. Changes and contact

We may update this Notice to reflect changes in the Service, law, or processing practices. The effective date above identifies the latest revision. Material changes will receive additional notice when required by law.

For privacy questions, requests, or complaints, use the contact page. The deployment should identify its Operator, privacy contact, jurisdiction, and mailing address there before public launch so formal notices reach the responsible party.