Data Protection & Privacy

Privacy Policy.

Last Updated: July 2, 2026. Please read this carefully to understand our policies.

Jmpy.me ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening and link management service (the "Service"). We process your personal data in compliance with applicable data protection laws, including the GDPR, CCPA, and other applicable privacy laws.

01.

Privacy at a Glance

What we collect

Account information (email, name)
URLs you shorten
Link click analytics
Device and browser info

Your rights

Access your data
Delete your account
Export your data
Opt-out of marketing

02.

Your Rights Under GDPR & CCPA

We respect your privacy rights. You have the right to access, correct, delete, and port your data. You can also object to processing and withdraw consent at any time. EU residents can contact our Data Protection Officer at dpo@jmpy.me.

03.

Information We Collect

3.1 Information You Provide

Account Information
URLs and Links
Payment Information
Communications

3.2 Information Collected Automatically

Device Information
Log Data
Click Analytics
Usage Data

04.

How We Use Your Information

Service Delivery

Account management
URL redirects
Analytics
Payments

Improvement

Analyze patterns
Feature development
User experience
Research

Communication

Notifications
Inquiries
Marketing
Policy changes

Security

Fraud prevention
Terms enforcement
Compliance
Rights protection

05.

Cookies and Tracking

We use cookies to enhance your experience. You can manage these via your browser settings.

Essential Cookies

Performance Cookies

Functional Cookies

Analytics Cookies

06.

Data Security

Technical Measures

SSL/TLS encryption
Encryption at rest
Bcrypt hashing
Security audits

Organizational Measures

Access controls
Employee training
Incident response
Vendor assessments

Vulnerability Disclosure Policy

We take security seriously. If you discover any security vulnerabilities or issues with JMPY.me, please report them directly to support@jmpy.me. We commit to acknowledging receipt of your report within 24 to 48 hours and will prioritize working on a swift resolution.

07.

Data Retention & Inactivity

Data Type	Retention Period
Active Account Data	Duration of active use
Inactive Accounts	Purged after 5 years of inactivity*
Detailed Analytics (IP/UA)	30 days (Free) / 1 year (Business)
Aggregated Analytics	2 years (minified/anonymized)
Payment Records	7 years (statutory requirement)

* The Active Link Protection

An account is only purged if it records **no login activity** AND **no traffic** for any associated shortened URLs or QR codes for 5 consecutive years. As long as your links are being clicked or scanned, your account and data remain protected.

08.

International Transfers

Jmpy.me operates globally. For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) and other approved safeguards.

09.

Google Workspace & API Services Compliance

Our integration with Google Workspace API Services (such as Google Sheets, Google Slides, Google Docs, Gmail, and Google Calendar via our Google Workspace Add-on) accesses user data strictly to perform link shortening, QR code generation, and related link management/tracking features requested by the user.

Limited Use Disclosure & Data Sharing

Adherence to Policies: Jmpy.me's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
No Third-Party Sharing: We do not share, transfer, or disclose Google user data to third parties, except as strictly necessary to execute the link and QR features you request (such as communicating with our secure backend servers to fetch link statistics or generate short URLs/images). We do not sell user data.
No Workspace Data Storage: We do not store or persist any of your actual Google Workspace content (such as email draft bodies, calendar event descriptions, or file contents). The only data stored in our database is the specific destination URLs and QR code configurations that you explicitly choose to create. You maintain full control over this data and can delete any generated links or QR codes at any time from your Jmpy.me dashboard, which immediately removes them from our servers.
No AI/LLM Processing of Google User Data: Jmpy.me does not use, integrate with, or transmit Google user data to any artificial intelligence (AI) or large language model (LLM) services — including but not limited to OpenAI, Anthropic, Google Gemini, or any other AI provider — for any purpose whatsoever. No AI model processes, stores, or trains on Google user data obtained via our integration. This commitment is absolute and not subject to exceptions.
Model Context Protocol (MCP) Server — Client-Side Only: Jmpy.me offers an MCP server integration that allows users to connect their own local, client-side AI assistants (e.g., Claude Desktop, ChatGPT desktop) to their Jmpy.me account. This integration works as a pure API pass-through: the user's local AI client makes authenticated API requests to our servers, and we return only that user's own data (links, QR codes, analytics). Jmpy.me does not initiate, control, or have any access to the user's AI assistant or its model. We do not send, share, or expose Google user data to any AI provider. The MCP server is a read/write API layer only — identical in function to our REST API — and involves no AI processing on our side whatsoever.

10.

Contact Information

General Inquiries

privacy@jmpy.me

DPO (EU)

dpo@jmpy.me