Legal

Privacy Policy

Last Updated: August 20, 2026

This Privacy Policy explains how Jako (“Jako,” “we,” “us,” or “our”) collects, uses, stores, protects, and discloses information when you access or use the Jako website, platform, applications, and related services (collectively, the “Service”).

Jako is a customer relationship management and email outreach platform designed to help users organize contacts, manage outreach, create and send email campaigns, track engagement, manage follow-ups, and organize related business activities.

By using the Service, you acknowledge the practices described in this Privacy Policy.

We may collect information that you provide directly to Jako, information generated through your use of the Service, and information obtained from third-party services that you choose to connect.

A. Account Information

When you create or maintain a Jako account, we may collect information such as:

• Name
• Email address
• Account identifiers
• Authentication information
• Workspace information
• Account settings and preferences

Passwords and authentication credentials may be processed through our authentication infrastructure and service providers.

B. CRM and Contact Data

When you use Jako, you may upload, enter, import, organize, or otherwise process information relating to your contacts and companies, including:

• Names
• Email addresses
• Company names
• Job or business information
• Industry information
• Phone numbers
• Company websites
• Notes
• Contact status
• Outreach history
• Campaign activity
• Other information that you choose to enter into the Service

You are responsible for ensuring that you have the lawful right to collect, upload, process, and contact individuals whose information you place into Jako.

Jako does not independently determine whom you contact or what communications you send.

Jako allows users to create, personalize, organize, schedule, and send email communications.

We may process information relating to those communications, including:

• Recipient information
• Sender information
• Email subject lines
• Email content
• Templates
• Campaign membership
• Sending status
• Sending timestamps
• Follow-up activity
• Open activity
• Reply status and reply activity that you manually record in Jako
• Message and thread identifiers associated with emails Jako sends

Emails sent through a connected Gmail account are sent using Google’s Gmail services on behalf of the user. Jako provides the tools used to organize, personalize, schedule, track, and manage those communications.

You may choose to connect a Google or Gmail account to Jako. Connecting Gmail is voluntary.

Jako currently requests access to Google account information through permissions that allow Jako to:

• Identify the email address associated with your connected Google account; and
• Send email through your Gmail account on your behalf.

Gmail Data Jako Accesses

Jako does not request permission to read your Gmail inbox or retrieve incoming Gmail messages. Jako does not automatically scan your inbox to detect replies.

When you direct Jako to send an email through your connected Gmail account, Jako processes the information necessary to create and send that communication, such as the recipient address, sender information, subject line, message content, and related sending information.

Gmail Data Jako Stores

Jako may store information associated with emails that you create or send through the Service, including:

• Recipient and sender addresses
• Subject lines and email content
• Sending timestamps and delivery status
• Gmail message and thread identifiers returned in connection with emails Jako sends
• Associated contact, campaign, recipient, follow-up, and workspace information

Jako may also store reply status or reply activity that you manually record in the Service. Manually recorded reply information is CRM data provided by you and is not obtained by Jako by reading your Gmail inbox.

Gmail Authorization Credentials

When you connect Gmail, Jako receives authorization credentials, including OAuth access and refresh tokens, that allow the Service to perform the Gmail functions you authorize.

These credentials are stored server-side and are not intentionally exposed to browser-side JavaScript or other Jako users. Jako uses application-layer encryption for stored Gmail OAuth tokens.

Jako may automatically refresh authorization credentials when necessary to maintain the Gmail connection.

Disconnecting Gmail

You may disconnect your Gmail account from Jako.

When you disconnect Gmail, Jako deletes the associated OAuth credentials from Jako’s active token storage and attempts to revoke the relevant Google authorization.

Disconnecting Gmail does not necessarily delete CRM records, campaign history, sending records, or reply status that you manually recorded in your Jako account. You may separately request deletion of applicable account data as described in this Privacy Policy.

Jako’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Jako uses Google user data only to provide or improve user-facing features associated with the Service, including connecting your Gmail account, sending user-directed emails, maintaining sending-related records, managing outreach, and related functionality.

Jako does not use Google user data for advertising.

Jako does not sell Google user data.

Jako does not transfer Google user data to advertising platforms, data brokers, or information resellers.

Jako does not use Google user data to determine creditworthiness or for lending purposes.

Human access to Google user data is restricted except where permitted by applicable Google policies, such as where the user provides affirmative consent for specific access, access is necessary for security or abuse investigation, access is required by law, or information is appropriately aggregated for permitted internal operations.

These commitments reflect Google’s current Limited Use requirements.

Jako may provide email engagement features, including open tracking and reply analytics based on reply activity that users manually record in Jako.

For example, Jako may use tracking technologies associated with sent emails to determine whether an email appears to have been opened.

Open tracking is not guaranteed to be accurate. Email clients, privacy protections, image blocking, automated systems, caching, security software, and other technologies may cause open information to be inaccurate, incomplete, delayed, or unavailable.

When a user manually marks a contact as having replied, Jako may associate that status with the relevant campaign and contact to update outreach status, stop or modify follow-up workflows, and provide reply analytics within the Service.

We may use information collected through the Service to:

• Provide and operate Jako;
• Authenticate users;
• Maintain accounts and workspaces;
• Store and organize CRM information;
• Send communications at a user's direction;
• Personalize campaign communications;
• Record and organize reply activity that users manually provide;
• Provide email engagement information;
• Manage follow-ups and sequences;
• Provide analytics and reporting;
• Process subscriptions and payments;
• Provide customer support;
• Diagnose technical problems;
• Protect the security and integrity of the Service;
• Prevent fraud, abuse, or unauthorized activity;
• Improve the functionality, reliability, security, and user experience of Jako;
• Comply with legal obligations; and
• Enforce our Terms of Service and other policies.

We do not use customer CRM or Gmail data to create advertising profiles or sell advertising.

Paid subscriptions may be processed by Stripe or another payment processor disclosed at the time of payment.

Jako does not need to store complete payment card numbers in its own application database when payment information is processed directly by the applicable payment provider.

Payment providers may independently collect and process payment information according to their own privacy policies and legal obligations.

We use third-party infrastructure and service providers to operate Jako.

These may include:

• Supabase for database, authentication, and backend infrastructure;
• Google and Gmail APIs for Gmail connectivity and email functionality;
• Vercel for hosting, infrastructure, and analytics;
• Stripe for subscription and payment processing; and
• Resend or related email infrastructure for transactional communications.

These providers may process information as necessary to perform services for Jako and are subject to their respective contractual terms and privacy obligations.

Use of a third-party service does not authorize that provider to use Jako customer information for purposes unrelated to providing its services, except as permitted by applicable law or the provider’s applicable terms.

Jako may use Vercel Analytics or similar privacy-conscious analytics technologies to understand general Service usage, performance, traffic, and reliability.

Information collected through analytics may include technical and usage information such as browser type, device information, pages viewed, approximate geographic information derived from IP addresses, and interaction or performance information, depending on the analytics technology being used.

See our Cookie Policy for additional information regarding cookies and similar technologies.

Jako may send service-related or transactional communications, including:

• Account verification messages
• Password reset messages
• Security notices
• Subscription confirmations
• Billing-related notices
• Account notices
• Important Service updates
• Other communications necessary to operate your account

These communications are not intended to constitute unrelated promotional marketing.

Jako does not sell customer personal information.

Jako does not sell customer contact databases.

Jako does not sell Gmail-derived information.

Jako does not provide customer information to third parties for their independent advertising or marketing purposes.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, misuse, or destruction.

These measures may include authentication controls, restricted server-side access, encrypted communications, access controls, infrastructure protections, and encryption of sensitive credentials such as Gmail OAuth tokens.

However, no internet service, database, transmission method, or storage system can be guaranteed to be completely secure. Accordingly, Jako cannot guarantee absolute security.

Users are responsible for protecting their account credentials and promptly notifying Jako if they believe their account or data has been compromised.

We retain information for as long as reasonably necessary to:

• Provide the Service;
• Maintain your account;
• Fulfill the purposes described in this Privacy Policy;
• Maintain legitimate business and security records;
• Resolve disputes;
• Enforce agreements; and
• Satisfy applicable legal, tax, accounting, or regulatory obligations.

Different categories of information may be retained for different periods.

Disconnecting an integration does not necessarily delete information previously created through or associated with that integration, such as campaign and sending records.

When information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it, subject to applicable legal requirements and legitimate business needs.

You may request access to, correction of, export of, or deletion of applicable personal information associated with your account, subject to applicable law and legitimate retention requirements.

Where technically available, these functions may also be provided directly through the Service.

Deleting an account or requesting deletion may not result in immediate deletion of every copy of information. Certain information may remain temporarily in backups or may be retained where reasonably necessary for security, fraud prevention, dispute resolution, legal compliance, financial recordkeeping, or enforcement of agreements.

To submit a privacy or deletion request, contact:

support@jakocrm.com

We may need to verify your identity before completing certain requests.

Jako and its service providers may process or store information in the United States and other countries.

By using Jako, you understand that information may be transferred to and processed in jurisdictions other than the jurisdiction in which you reside, subject to applicable law and appropriate safeguards where required.

Users are responsible for their own use of Jako and the information they place into the Service.

You are responsible for ensuring that:

• You have appropriate rights or lawful bases to collect and process contact information;
• Your outreach complies with applicable privacy, marketing, anti-spam, and communications laws;
• You honor applicable opt-out and unsubscribe requirements;
• Information you upload or enter was obtained lawfully; and
• Your use of connected third-party services complies with their terms and policies.

Jako provides software tools and does not determine the legality of a user’s particular outreach campaign or communication.

Jako is intended only for individuals who are 18 years of age or older.

The Service is not directed to children, and we do not knowingly collect personal information from individuals under 18 through the creation of Jako accounts.

If we learn that an individual under 18 has provided personal information in violation of this requirement, we may take appropriate steps to delete the information and terminate the applicable account.

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, subpoena, court order, or governmental request;
• Protect the rights, property, security, or safety of Jako, our users, or others;
• Investigate fraud, abuse, security incidents, or violations of our policies; or
• Establish, exercise, or defend legal claims.

Where legally permitted and reasonably appropriate, we may seek to limit overly broad requests.

If Jako is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law.

Google user data will be handled in accordance with applicable Google API policies, including any consent requirements applicable to such a transfer.

We may update this Privacy Policy from time to time to reflect changes to Jako, our practices, technology, legal requirements, or third-party services.

When appropriate, we may provide notice of material changes through the Service, by email, or through another reasonable method.

If changes materially alter how Google user data is accessed or used, we will provide disclosures and obtain consent where required by Google’s applicable policies.

The “Last Updated” date at the top indicates when this Privacy Policy was most recently revised.

Questions, concerns, complaints, or requests relating to privacy or this Privacy Policy may be sent to:

Jako
Email: support@jakocrm.com

Additional business information may be added to this Privacy Policy following formal organization of the business.