Privacy policy

Summary

• JodJam is a tool for organisations that backs up messages and files from LINE groups, with tasks, docs, and a group cashbook.
• Two roles: for group content, the organisation that installed JodJam is the data controller and we process on their instructions. For accounts, billing, and usage statistics, we are the controller ourselves.
• What we collect from groups: messages, files, member display names, profile pictures, and LINE user IDs, plus tasks and notes created in the group.
• Capture starts only from the moment JodJam is installed in a group. LINE provides no way to fetch earlier history.
• The lawful basis for keeping group members’ data belongs to the controller — the organisation that installed JodJam — and they choose it (employment or supplier contract, legitimate interest, or consent they collect themselves). We process on their instructions and do not collect per-member consent on their behalf. JodJam posts an announcement card in the group naming the controller, and posts it again for new members.
• Access is restricted to members of that specific group, via LINE Login, with owner/admin/guest roles. Members who leave a group lose access. Full-group export is admin-only.
• Unsent (recalled) messages are permanently deleted, including files in storage. Not even the group owner can see recalled content.
• AI features send relevant group content to Google (Gemini API), and image generation uses OpenAI. Unsent content is never sent to AI. We do not train our own models on your content.
• Retention follows the controller’s settings (default: keep until deleted). Group or account deletion wipes storage for real.
• Subprocessors: Cloudflare (hosting, database, storage), Google (AI), OpenAI (image generation), SlipOK / EasySlip (payment-slip verification, when enabled), Discord (internal alerts for messages you send our support channel, never group content). LINE is the messaging platform and an independent controller, not our subprocessor.
• Data is stored on Cloudflare infrastructure outside Thailand, and AI processing by Google and OpenAI also happens abroad.
• Your rights (access, copy, correction, deletion, objection, withdrawal of any consent you gave): you can download a copy of your own messages yourself at jodjam.com/settings under “Data protection”, where the same page names that group’s admins. Deletion is their decision, since the lawful basis is theirs, so ask them directly. You can also reach us at pdpa@jodjam.com or via LINE OA @jodjam, or complain to Thailand’s PDPC (www.pdpc.or.th).