Privacy
Draft for the owner to review. This page describes what the site and JJ Bot actually do today, but the owner hasn't signed it off yet, so it isn't final legal text. Items highlighted are for the owner to fill in.
This page explains what personal information JM Tech Power (jmtechpower.com, its subdomains, and the JJ Bot app) collects, why, how long it's kept, and what you can do about it.
Who is responsible for your information
JM Tech Power, run by [Owner: legal name], [Owner: address]. Contact: [Owner: contact email], or the site's feedback page.
Accounts and sign-in
- When you register: a username, an email address and a password. The password is stored only as a secure hash; nobody can read it. We email you a verification code that works for 10 minutes.
- What you can add: a nickname, bio, profile picture, and what you write on your homepage (
yourname.jmtechpower.com). - Signing in with Google or GitHub: we receive your verified email address and display name from them, to find or create your account.
- Two-factor sign-in: when you turn it on, we store your authenticator secret and hashes of your backup codes. Signing in with Google or GitHub asks for your code too.
What you publish or store on the site
- Public content: articles, comments, likes, projects and their release files, issues, stars and your homepage. These are public: anyone can see them.
- Chat: direct and group messages, reactions and attachments, visible only to the conversation's members. You can unsend your own messages; unsending deletes the text and the attachment and leaves only an "unsent" marker.
- JM Drive: files you upload. Only you can see them, unless you make a share link.
- Feedback: a note you send through the site is kept with its message, the contact you chose to give (optional), its topic, the page you were on, the time and up to 3 screenshots, plus your account number, username and email if you were signed in. We don't store your IP address; we store a scrambled value made from it, to stop abuse.
What is recorded automatically
- Server request logs: each request records the IP address, time, page, referring page and browser. We use them for security, fixing problems, stopping abuse, and counting daily page views (only the totals are used; the log itself is not sent to anyone).
- Article views: one running count per article.
- We use no analytics or advertising trackers.
New-member emails to the site's developers
The site's developers may get an email containing only a new member's username and sign-up time, the total number of members, new members today and this week, and daily page views. It never contains your email address, IP address or anything to do with your password.
JJ Bot
- It runs on your own computer. Your chats, API keys, files and workspaces stay there; we can't see them.
- AI models: what you send your bots goes from your computer straight to the model provider you chose (for example Zhipu, OpenAI or Anthropic), under that provider's terms. It doesn't pass through us.
- Account sync: when you sign in with your JM Tech Power account, your bots' settings, teams, templates, prompts, skills and language, and your lead bot's memory of you and its team reports, sync to the JJ Bot relay (jjbot.jmtechpower.com) under your account. Lines that look like a key or password are left out. Keys, chats, other bots' memory, workspaces, MCP servers and folder paths never leave your computer. You can turn sync off in the account menu.
- Using it from your phone or another device: messages pass through the relay, which keeps only hashes of your computer's key and each device's token.
- Phone alerts: your computer encrypts them and sends them straight to your phone browser's push service (Google, Apple or Mozilla). The relay isn't involved.
- Update checks: JJ Bot asks www.jmtechpower.com for the latest version. That request appears in the request log like any page visit.
- Feedback from the app: notes go to the relay. With your OK they include the app version, your operating system and the latest errors from your chats; the app shows exactly what's included before sending, and you can turn it off.
Who else sees your information
- Other people: what you publish publicly, and the members of a chat you're in.
- Google or GitHub, if you choose to sign in with them.
- Companies that provide services to us: server hosting by [Owner: hosting provider] and email delivery by [Owner: email provider].
- Anyone the law requires us to give it to.
We don't sell your personal information or share it with advertisers. See Do not share my personal information.
Cookies
We use only the cookies needed to sign you in, plus one optional cookie that is set only if you agree. See Manage cookies.
How long things are kept
| Information | Kept |
|---|---|
| Account details, public content, JM Drive files | Until you delete them or your account |
| Chat messages and attachments | Until you unsend them or the account is deleted |
| Email verification codes | Valid for 10 minutes |
| Feedback sent through the site | [Owner: period; there is no fixed limit today] |
| Web server (nginx) request logs | 7 days |
| App request log (used for page-view counts) | [Owner: period; there is no fixed limit today] |
| JJ Bot relay: synced settings | Until the account is deleted [Owner to confirm: whether turning sync off deletes the online copy] |
| JJ Bot relay: paired devices | Until you unpair them |
| JJ Bot relay backups (including app feedback and its pictures) | 30 days |
What you can do
- Change your details in Edit profile, turn two-factor sign-in on or off in two-factor settings, and subscribe to or leave the weekly digest.
- Unsend chat messages, and delete JM Drive files and things you published.
- Turn off sync in JJ Bot's account menu.
- Export or delete your account: there's no self-service button yet. Email [Owner: contact email] or use the feedback page, with your username. We'll act within [Owner: number] days and may first check that the account is yours.
Security
The site uses HTTPS throughout, passwords are stored only as hashes, two-factor sign-in is available, and JJ Bot never syncs your keys. No system is perfectly secure; if you find a problem, please tell us.
Children
[Owner: minimum age, and how children's information is handled]
Changes to this page
When this page changes, the "Last updated" date at the top changes with it.