Privacy policy

Summary

• JodJam is a tool for organisations that backs up messages and files from LINE groups, with tasks, docs, a group cashbook, and an AI assistant.
• Two roles: for group content, the organisation that installed JodJam is the data controller and we process on their instructions. For accounts, billing, and usage statistics, we are the controller ourselves.
• What we collect from groups: messages, files, member display names, profile pictures, and LINE user IDs, plus tasks and notes created in the group, and the text read from images along with their album category (used for search).
• Capture starts only from the moment JodJam is installed in a group. LINE provides no way to fetch earlier history.
• The lawful basis for keeping group members’ data belongs to the controller — the organisation that installed JodJam — and they choose it (employment or supplier contract, legitimate interest, or consent they collect themselves). We process on their instructions and do not collect per-member consent on their behalf. JodJam posts an announcement card in the group naming the controller, and posts it again for new members.
• Access is restricted to members of that specific group, via LINE Login, with owner/admin/guest roles. Members who leave a group lose access. The account owner can also ask about the groups they are a member of in a 1:1 chat with the LINE Official Account. Full-group export is admin-only. Some content is also passed to subprocessors so the service can work, such as images and messages sent to Google’s AI (see the AI section).
• Unsent (recalled) messages are permanently deleted, including files in storage. Not even the group owner can see recalled content.
• Images sent to a group, or uploaded to it on the web, may be sent automatically to Google (Gemini API) to sort them into albums and read the text in them; that text is stored with the backup so it can be searched. This is part of the service. Asking the bot, creating tasks, or asking on the web also sends relevant content to Google, and creating or editing an image uses OpenAI (an edit sends the photo itself). Once a message is unsent it is not sent to AI again, and any text read from it is deleted. When the account owner asks the assistant in the 1:1 chat, the question, the owner’s earlier messages in that chat (kept until 30 minutes after the owner’s latest message, deleted at once if unsent), and only the data needed to answer from groups the owner is a member of go to Google; the assistant’s answers are not kept, and answers already delivered to LINE cannot be deleted by us. We do not train our own models on your content, whoever’s key is used. On JodJam’s keys, the data sent through the API is not used to train Google’s or OpenAI’s models, under those providers’ paid API terms. On a key the customer supplies, Google’s or OpenAI’s terms for that key apply. Note: a Gemini key from a project without billing falls under Google’s unpaid terms, which may let Google use the data sent to improve its services.
• Retention follows the controller’s settings (default: keep until deleted). Group or account deletion wipes storage for real.
• Subprocessors: Cloudflare (hosting, database, storage), Google (AI), OpenAI (image generation), SlipOK / EasySlip (payment-slip verification for group bills and for payments to us), Discord (internal alerts for messages you send our support channel, never group content). LINE is the messaging platform and an independent controller, not our subprocessor.
• Data is stored on Cloudflare infrastructure outside Thailand, and AI processing by Google and OpenAI also happens abroad.
• Your rights (access, copy, correction, deletion, objection, withdrawal of any consent you gave): you can download a copy of your own messages yourself at jodjam.com/settings under “Data protection”, where the same page names that group’s admins. Deletion is their decision, since the lawful basis is theirs, so ask them directly. If JodJam has been removed from the group, that group is no longer available at jodjam.com/settings; ask the controller (the organisation that installed JodJam) for a copy or for deletion. You can also reach us at pdpa@jodjam.com or via LINE OA @jodjam, or complain to Thailand’s PDPC (www.pdpc.or.th).