Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how JigsawLabs ("we") handles personal data when you use jigsawlabs.tools and our web tools. JigsawLabs is operated as a sole proprietorship based in Jordan and is the data controller for the processing described here. We designed the Services to collect as little personal data as possible.

1. Your documents are not stored

This is our most important commitment: content you submit to a tool (text, documents, files) is processed in memory, only for the duration of your request, to produce your result. It is not saved to disk, not stored after the request completes, not used for analytics, and never used to train any model. If a tool ever needs to retain something (e.g., a template you choose to save), it will say so explicitly and ask you first.

2. Information we collect

• Account data — when you sign in with an identity provider (e.g., Google): your name, email address, and a provider account identifier. We do not receive your password.
• Subscription status — whether your account has an active subscription, so we can grant access to pro tools.
• Purchase information — processed by Paddle (Merchant of Record), such as order details and country. We never receive or store your card details.
• Contact details you submit via our contact form (name, email, message).
• Technical log data — short-lived request logs (e.g., IP address, timestamp, endpoint) used only to operate, secure, and rate-limit the Services. Logs do not include the content of your documents.

3. Purposes and legal bases

• Providing the Services (account, tool processing, subscription access) — performance of a contract.
• Payments, invoicing, tax (via Paddle) — performance of a contract and legal obligation.
• Security, abuse prevention, rate-limiting — legitimate interests.
• Responding to your enquiries — legitimate interests or steps prior to a contract.

We do not sell personal data, do not use advertising trackers, and do not run third-party analytics.

4. Payment data

Payments are handled by Paddle.com as Merchant of Record. Paddle processes your payment information under its own privacy policy; we receive only the transaction details needed to activate your subscription.

5. Processors we use

We use a small number of providers to run the Services: Paddle (payments and tax), Cloudflare (hosting, compute, and security), and Google (sign-in only, if you choose it). They process data on our behalf under their data-processing terms. We add no others without updating this page.

6. Cookies

We use only strictly necessary cookies: a session cookie to keep you signed in and (where applicable) a security/anti-abuse cookie set by our hosting provider. We use no advertising, tracking, or analytics cookies, which is why you don't see a cookie banner. If that ever changes, we will ask for your consent first.

7. Data retention

• Submitted content: not retained (see section 1).
• Account & subscription data: kept while your account exists; deleted within 30 days of a deletion request.
• Contact-form messages: kept up to 24 months, then deleted.
• Technical logs: kept briefly (days, not months) for security, then deleted automatically.
• Transaction records: held by Paddle as required by tax law.

8. Your rights (GDPR and similar laws)

Depending on your location, you have the right to access your personal data, correct it, delete it ("right to be forgotten"), receive a portable copy, restrict or object to certain processing, and complain to your local data-protection authority. None of these cost anything.

To exercise any right — including deleting your account and all associated data — email admin@jigsawlabs.tools from the address linked to your account. We respond within 30 days.

9. International transfers

We are based in Jordan and our providers (Cloudflare, Paddle, Google) operate globally, so your data may be processed outside your country. Where GDPR applies, transfers rely on appropriate safeguards such as the providers' Standard Contractual Clauses and equivalent mechanisms.

10. Security

All traffic is encrypted in transit (TLS). Access to account data is restricted and protected by scoped credentials. Submitted content is processed transiently and never written to permanent storage.

11. Children

The Services are not directed at children under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy; changes are posted here with a new "Last updated" date.

13. Contact

Privacy questions or requests? Email admin@jigsawlabs.tools.