Privacy Policy

Scope of this policy

This policy applies to information we collect through:

• Our website at gjaon.com
• The contact form on this site and email sent to contact@gjaon.com
• Direct conversations with our team during a project engagement

It does not apply to data processed inside our products (SellSquare, Chatalog) — those have their own privacy notices.

Information we collect

Information you provide

When you fill out our contact form, we collect:

• Your name and email address (required)
• Company, phone number, project budget, services of interest (optional)
• Your message — whatever you choose to tell us about your project

Information collected automatically

When you submit the contact form, we also record:

• Your IP address (for rate-limiting and abuse prevention)
• Your browser user agent (truncated to 500 characters)
• The page path the form was submitted from
• The date and time of submission

We do not use third-party analytics or advertising trackers by default. If we add an analytics tool in the future, we will update this policy and disclose what it collects.EDIT: replace this paragraph if you add Google Analytics, Plausible, etc.

How we use information

We use the information you provide to:

• Respond to your inquiry and follow up about a potential project
• Send you a proposal, scope document, or contract if we agree to work together
• Keep a record of leads so we can track conversations across multiple touchpoints
• Detect and block abuse of the contact form (spam, automated submissions)

We do not sell your data, share it with advertisers, or use it for any purpose other than running our business with you.

Legal basis for processing

For visitors in jurisdictions where this matters (e.g., the EU/UK under GDPR, or Nigeria under the NDPA), our legal basis for processing your information is:

• Consent — by submitting the contact form, you consent to us using your information to respond.
• Legitimate interest — keeping a record of leads, preventing abuse, and improving our services.
• Contractual necessity — if we enter a project agreement with you, we need to process your information to deliver it.

How we share information

We share information only with:

• Our hosting and database provider — leads are stored in a MongoDB database.EDIT: specify your DB host, e.g., "MongoDB Atlas (US-East region)"
• Our email provider — when you submit the contact form, a notification email is sent to our team via our SMTP provider.EDIT: specify provider, e.g., "Google Workspace" or "Resend"
• Our deployment platform — the platform that hosts this website may receive logs containing your IP address and request path.EDIT: specify host, e.g., "Vercel" or "Heroku"

We do not share your information with any other third parties. We will only disclose your information to law enforcement if required by a valid legal request.

Where information is stored

Information is stored on servers operated by our infrastructure providers.EDIT: name the country/region your DB and email provider use, and confirm whether data is transferred outside Nigeria/EU.

How long we keep information

• Active leads — kept while we are in conversation and for up to 24 months afterwards in case you re-engage.
• Client records — kept for the duration of our engagement plus 7 years for accounting and tax purposes.
• Form-abuse records (IP, user agent) — kept for 90 days for security purposes.

You can ask us to delete your information sooner — see Your rights below.

Security

We use industry-standard security measures to protect your information, including encryption in transit (HTTPS), encrypted storage, access controls, and rate-limiting on submission endpoints. No system is perfectly secure — if we ever experience a breach affecting your data, we will notify you promptly.

Your rights

You have the right to:

• Access — request a copy of the information we hold about you
• Correct — ask us to fix anything inaccurate
• Delete — ask us to remove your information (we'll comply unless we're legally required to retain it)
• Object — ask us to stop processing your information for a specific purpose
• Portability — receive your information in a structured, machine-readable format
• Withdraw consent — change your mind at any time about us holding your data

To exercise any of these rights, email contact@gjaon.com. We respond within 30 days.

Cookies and analytics

We currently set only essential cookies required for the site to function (e.g., security and basic preferences). We do not use marketing or advertising cookies, and we do not track you across other websites.

EDIT: if you add Google Analytics, Plausible, Fathom, or any other tracker, list it here and link to its privacy notice.

Children's privacy

Our website and services are not directed at children under 16. We do not knowingly collect information from children. If you believe a child has submitted information to us, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on the homepage or via email if we have your email address.

Contact us

Questions about this policy? Email contact@gjaon.com, or write to:

GJAON Technologies Ltd.
Akure, Nigeria
Ondo, Nigeria