Privacy policy

Last reviewed on 30 May 2026. JOTMILL ("we", "our") cares about the privacy of every reader, creator, and advertiser on the platform. This page explains what we collect, why, and how to control it.

1. Information we collect

• Account information. Email, display name, handle, role (reader / creator / advertiser), country, and (where you supply them) profile image and bio.
• Content and engagement. Posts, comments, segments, newsletters you author or interact with, and the time you spend reading / listening / watching.
• Payment information. Stripe handles card details directly; JOTMILL only stores the customer ID, plan, and payment status returned by Stripe webhooks. We never see the card number.
• Email events. When we send newsletters or transactional email through our provider (Mailgun or SMTP), delivery / bounce / spam-complaint events come back to us for deliverability hygiene.
• Technical data. IP address, browser, device type, and pages visited. Used for security, abuse prevention, and aggregate analytics.

2. How we use it

• Run the platform — let you sign in, publish, subscribe, and pay.
• Enforce subscription quotas (reading / audio / video minutes; creator upload caps).
• Send transactional and (with your consent) marketing email.
• Detect spam, fraud, and policy violations.
• Improve features based on aggregate, de-identified usage.

3. Sharing with third parties

We only share data with the processors required to deliver the service:

• Stripe — payments and subscription billing.
• Mailgun / SMTP relay — email delivery.
• Supabase — managed Postgres and auth.
• Cloud storage — media files attached to your content.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

4. Your rights

• Access, correct, or delete your account from your account settings.
• Unsubscribe from any newsletter via the link in the footer of every email.
• Request a data export by emailing privacy@jotmill.com.

5. Retention

We keep account data while your account is active. After deletion we retain anonymised analytics indefinitely and financial records for the period required by tax law (typically 7 years).

6. Children

JOTMILL is not directed at users under 13. If you become aware that a child has provided personal data, contact us and we will delete it.

7. Updates

We will tell you about material changes via in-app banner and email at least 30 days before they take effect.