JEV AI Privacy Policy
How jevai.me collects, uses, stores, and shares your personal information.
JEV AI (jevai.me, "the Site", "we", "us") respects and protects your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use our service ("the Service"), and the rights you have under applicable law.
Please read this Policy before using the Service. By using the Service you confirm that you have read and agree to this Policy. We may update this Policy from time to time; we will notify you in advance of material changes by email or in-site notice.
Contents: 1. Data controller · 2. Information we collect · 3. How we use it · 4. Cookies and local storage · 5. Sharing and disclosure · 6. Data security · 7. Retention · 8. Your rights · 9. Marketing and opt-out · 10. International transfers · 11. Children's privacy · 12. Third-party links · 13. Changes to this Policy · 14. Contact us
1. Data controller
The data controller for the Service is:
- Operator: [full legal name of individual / sole trader]
- Place of business: [Country/Region]
- Postal address: [postal address]
- Privacy contact: support@jevai.me
- Data Protection Officer (DPO): Not appointed. The Site is a small independently operated resource and does not meet the thresholds that require a DPO.
Scope. This Policy applies only to information collected directly by jevai.me. TypeSafe AI operates a separate service under its own privacy terms. The Site is not affiliated with TypeSafe AI and does not collect or process your data on its behalf.
2. Information we collect
2.1 Information you provide
- Account information: name, email, password (stored hashed — we never keep the plaintext), avatar, and any other profile fields you complete at registration.
- Third-party login information: if you choose to sign in with Google, we receive the basic profile information you authorize, typically your name, email address, and avatar URL. We do not receive your Google password or access to other Google services.
- Payment information: transaction amount, payment status, and transaction identifier. We do not store full card numbers — card data is handled by our payment processor (see Section 5).
- Communications: the name, email, and message you submit through the contact form or by email, plus any follow-up support records.
- Files you store: the name, type, size, and contents of files you choose to upload to the user file storage feature.
- Newsletter: if you subscribe through account settings, we keep your email address to manage that subscription. Signing up does not subscribe you automatically.
- Notification and payment preferences: the notification toggles and payment method preferences you select in account settings.
2.2 Information collected automatically
- Device and network: IP address, device model, operating system, browser type, time zone.
- Usage behaviour: pages visited, features used, action logs, session duration.
- Log data: request times, error logs, performance data.
- Browser storage preferences: theme, language, and sidebar state (kept in your browser's local storage — see Section 4).
2.3 Information we do not collect
To avoid ambiguity, the Site currently does not collect: precise location data, contacts or photos, biometric data, or advertising identifiers, and it does not run third-party advertising or marketing tracking pixels.
3. How we use your personal information
| Purpose | Legal basis |
|---|---|
| Providing and maintaining the Service (accounts, login, file storage, API keys) | Performance of a contract |
| Billing, payment processing, and credit/order management | Performance of a contract |
| Customer support and replying to enquiries | Contract / legitimate interests |
| Service notices (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention, blocking anomalous access | Legitimate interests |
| Product improvement and anonymized statistics | Legitimate interests |
| Legal compliance, tax, and accounting obligations | Legal obligation |
| Marketing — sent only if you subscribed in account settings | Your consent |
We may aggregate or de-identify data for statistical analysis. Such data cannot be traced to an identifiable individual.
4. Cookies and local storage
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Maintaining your signed-in session, protecting account operations, CSRF protection | No |
| Functional | Remembering language, theme, and sidebar state | Yes |
The Site uses authentication cookies to keep you signed in; theme and interface preferences are kept in browser local storage, and a language cookie may remember your locale.
Analytics tools: the Site currently runs no third-party analytics (such as Google Analytics). If we enable any in future, we will name the tool, link to its privacy policy, and describe how to disable it here. You can inspect or clear cookies and local storage through your browser settings; clearing session cookies signs you out.
5. Sharing and disclosure of personal information
We do not sell your personal information, including "sale" as defined under applicable law such as the CCPA. We share your information only in the following circumstances:
- Service providers. We use the following categories of providers, all bound by confidentiality and data processing agreements and permitted to process data only on our instructions:
- Infrastructure and storage: Cloudflare (Workers compute, D1 database, R2 file storage, KV cache, and email sending infrastructure).
- Email delivery: Resend (delivery of account and notification email).
- Payments: Waffo Pancake. Payment card data is handled exclusively by this PCI-DSS compliant processor and is not stored on our servers.
- Third-party login: if you sign in with Google, Google processes that authorization under its own policies.
- Operational notifications: internal alerting services (such as Discord or Feishu) that receive only the event information needed to deliver an alert, never for marketing.
- Legal and regulatory requirements: where required by law, court order, or a lawful request from a competent authority, we may disclose necessary information.
- Business transactions: in a merger, acquisition, or asset transfer we will notify you in advance and ensure protective obligations continue.
- With your consent: for other purposes only with your prior, explicit consent.
TypeSafe and its services receive no account data from the Site. Following an official resource link takes you to a site governed by its own data rules.
6. Data security measures
- Encryption in transit: TLS / HTTPS enforced site-wide.
- Storage security: sensitive data such as passwords is hashed or encrypted; payment card data never passes through our servers.
- Access control: least-privilege access, limited to staff who require it for production operations.
- Technical protection: DDoS mitigation, WAF, and access logging provided by Cloudflare.
- Regular review: periodic review and update of dependencies and configuration.
If a security incident affects your rights, we will notify you and the relevant regulators without undue delay and within 72 hours of discovery, as required by law.
Please keep your account credentials and API keys secure and do not share them. Site API keys authenticate Site features only — they are not TypeSafe API keys.
7. Personal information retention periods
| Data type | Retention period | End-of-life handling |
|---|---|---|
| Account information (profile, credentials) | While the account is active; 90 days after deletion | Deleted or anonymized |
| User files | While the account is active; 90 days after deletion | Deleted |
| Transaction and billing records | As required by tax and accounting obligations (typically longer than account data) | Deleted or archived |
| Support and communication records | 24 months after the enquiry is resolved | Securely deleted |
| Security and access logs | 90 days | Securely deleted |
| Newsletter subscription records | While subscribed; 30 days after unsubscribe | Securely deleted |
You may request account deletion at any time in account settings. After deletion, account data and user files are handled as set out above. See Sections 5.6 and 5.7 of the Terms of Service.
8. Your data rights
To exercise any of the rights below, email support@jevai.me. We respond within 30 calendar days; if a request is complex and needs more time, we will tell you why.
| Right | What it means |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal information |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion in defined circumstances |
| Right to restriction | Pause processing in defined circumstances |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests |
| Right to withdraw consent | Withdraw consent-based processing, such as newsletter subscription |
Some rights are self-service in account settings: editing your profile, managing API keys and files, adjusting notification preferences, unsubscribing from email, and deleting your account. If you believe we have handled your request improperly, you have the right to complain to your local data protection authority.
Deleting your Site account does not delete any separate TypeSafe account you hold.
9. Marketing communications and opt-out
With your consent (by subscribing in account settings), we may email you about Jev model material updates, new examples, and new Site features. You can opt out at any time: use the "unsubscribe" link in the email, turn the subscription off in account settings, or contact us.
Opting out does not affect service notices such as billing, security alerts, or material policy changes. Registering for the Service does not subscribe you to email automatically.
10. International data transfers
The Site runs on Cloudflare's global network, and our servers and providers may be located outside your country or region, for example in [list main regions, e.g. Singapore, United States]. For cross-border transfers we safeguard your data by:
- putting data processing agreements incorporating the EU Standard Contractual Clauses (SCCs) in place with processors;
- transferring only to recipients that maintain an equivalent level of protection;
- completing any transfer assessment and notice obligations required by applicable law.
11. Children's privacy
The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 and do not sell credits to them. If you believe a minor has provided information to us, contact us immediately and we will delete it promptly.
12. Third-party links and services
The Site may contain third-party links (such as TypeSafe's official documentation and consoles) or integrate third-party services. This Policy applies only to information we collect directly. We are not responsible for the data practices of third parties, and we recommend reviewing their privacy policies before use. Following an external link does not give the Site access to your TypeSafe account.
13. Changes to this policy
For material changes we will give at least 15 days notice by in-site notice or to your registered email address, and we will update the "last updated" date at the top of this page. Continued use after the effective date constitutes acceptance. Previous versions of this Policy are available on request.
14. Contact us
- Privacy contact: support@jevai.me
- Customer support: support@jevai.me
- Operator: [full legal name of individual / sole trader]
- Postal address: [postal address]
- Support hours: [e.g. Mon–Fri 09:00–18:00 UTC+8]
For account and billing rules see the Terms of Service; for browser storage see the Cookie Notice.
Last updated: 2026-09-20 · JEV AI · https://jevai.me