Privacy Policy

For privacy, we wouldn't ask anything of you we wouldn't want for ourselves

Updated: January 19, 2018

The Jotto Privacy Policy for users of the Jotto application is meant to be viewed alongside the Terms of Use .

The most important thing to state up front is that Jotto is a private communications tool. Our customers use Jotto to privately share confidential information within their instance. We take this confidentiality very seriously. Instances are silo-ed, available only to authorized users (as set by the instance administrator), and cannot be shared with the public or across instances.

The content and files that a group posts to their instance of Jotto belongs to that group, and can only be accessed by that group. We need certain rights granted to Jotto so that our software code can work, but the content is yours.

Information we collect and receive

  • Profile and Instance Information: When a new Jotto team (an instance) is created, we collect information such as the instance name, the domains or emails allowed to access the instance (as set by the Primary Owner), the names and emails of participants in the instance.
  • Log Data: Our servers or third-party analytics tools automatically collect log data, which may include your Internet Protocol address, the address of the web page you visited before coming to Jotto, your browser type and settings, the date and time of your request, information about your browser configuration and plug-ins, language preferences, and cookie data. Log data does not contain post content and is not routinely deleted.
  • Device Data: In addition to log data, we may also collect information about the device you’re using Jotto on, including what type of device it is, what operating system you’re using, device settings, unique device identifiers, and crash data.
  • Usage information: Our analytics tools track metrics on usage levels, such as the activity of a team (active users, posts, comments, reactions). We collect this information in order to improve the application. We do not collect data on the contents of user activity.

Information we do NOT access or track

  • We do not access client instances
  • We do not read user content on their instance
  • We do not run any sort of analysis, semantic or otherwise, on the content posted by users on their instances

How information is stored and accessed

Every Jotto instance is private and can only be accessed by authorized users, as determined by the instance administrator. Administrators can choose to authorize users in two ways: 1. through Google authorization for a domain, or 2. by inviting user emails on an individual basis. All passwords are stored in an encrypted format.

All Jotto content is stored in a secure database hosted on Heroku and on Amazon Web Services. All information is transmitted securely over https.

Our Cookie Policy

Jotto uses cookies to record log data and to allow users to preserve a "logged in" state. We use both session-based and persistent cookies. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire. Jotto sets and accesses our own cookies on our company-owned domains. In addition, we use 3rd parties like Google Analytics for website analytics.

Your Data backup

Jotto automatically backs up each instance of the Application. Should the Primary Owner of an instance decide to cease usage of Jotto, or if Jotto terminates the Application or your instance of the Application, we will work with the Primary Owner to export and deliver the content uploaded to their instance, if so desired.