Jawset Privacy Policy

Effective Date: February 23, 2026

This Privacy Policy describes how Jawset Visual Computing ("We", "Us", or "Our") handles your personal data in accordance with the General Data Protection Regulation (GDPR).

Updates to this Policy

We may update this policy to reflect changes. We will post the revised version with an updated "Effective Date" on our website. Where required by law, we will provide notice for these changes.

Controller and Contact Information

Controller: Jawset Visual Computing, Jascha Wetzel, Oberföhringer Str. 194, 81925 Munich, Germany

Contact: privacy@jawset.com

We have not appointed a Data Protection Officer (DPO) as we are not legally required to do so.

For all privacy inquiries contact us using the email address above.

How We Collect Data

We collect personal data directly from you, for example when you create an account with us or contact us. We automatically collect data when you use our Websites or Products. We sometimes collect data from third parties, for example when you purchase our products through a reseller.

What We Collect and Why

The table below details the categories of data we process, the purposes, and the legal basis for such processing.

Data Category	Purpose(s) of Processing	Examples of Data Processed	Legal Basis
Identity and Contact Data	To set up your account, process sales, and manage licenses; to respond to inquiries and provide notifications.	Name, Organization, Country, City, ZIP/Postcode, Email Address.	Contractual Necessity (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f))
Financial and Transaction Data	Processing and fulfilling orders, subscriptions, and purchases; fulfilling statutory accounting and auditing obligations.	Delivery Email Address, Payment Method, Credit Card Type (including the last 4 digits), Billing Address, VAT ID, Stripe Charge ID, Invoice Number, Date of Supply, Bill Date.	Contractual Necessity (Art. 6(1)(b)) and Legal Obligation (Art. 6(1)(c))
Account/Profile Data	Management of your user account and software licenses; important notifications.	Password (hashed), Order and Purchase History, Activation Logs.	Contractual Necessity (Art. 6(1)(b))
Technical and Usage Data	Analyzing usage to improve performance, user experience, and functionality of products; ensuring the security and stability of our website and IT infrastructure.	Website Data: IP address, browser type, operating system, and information collected via strictly necessary cookies. Product Diagnostics Data: Account information for license authentication, Product Version, Error Reports, IP address, and information about your computer (such as device type and ID, operating system, CPU, and GPU drivers).	Contractual Necessity (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f))
User generated content	Material that you may choose to send us for support, bug reports, or showcase purposes. This material is used only for purposes made clear throughout our communication with you.	Images, 3D scenes, video, or other data.	Legitimate Interests (Art. 6(1)(f))
Email/Communication Data	Receiving and responding to requests and inquiries; verifying discount eligibility.	All personal data contained within the email body, metadata, and attachments, including copies of documents for discount eligibility.	Contractual Necessity (Art. 6(1)(b)) or Legitimate Interests (Art. 6(1)(f))
Marketing Data	Sending you newsletters and information about products, where you have opted in.	Email address	Your Consent (Art. 6(1)(a))

Obligation to Provide Personal Data

Providing data marked as required (e.g., for account creation, delivery or billing) is a contractual or legal requirement. Without this information, we cannot provide our products.

Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

How Long We Keep Data

Depending on the legal ground based on which we process your personal data, the storage period of personal data may be different.

In case there is no legal ground to continue storing your personal data, your information will be fully anonymized or deleted.

Contractual data: For the duration of our customer relationship (the existence of your account), plus any subsequent statutory retention periods required by law.

Legal obligation data: As mandated by German commercial and tax law.

Legitimate interest data: As long as necessary for the stated purpose.

Consent-based data: Until you withdraw your consent or request to delete your user account.

As an exception, the data can be stored for a longer period of time for the establishment, exercise or defense of legal claims.

We share data only when necessary. We do not sell your personal data.

Payment Security Note: All card payments are processed directly by certified third-party processors. We do not access or store your full card details.

Recipient Type	Purpose(s) of Sharing	Data Categories Shared	Legal Basis
Payment Processors	To enable secure and efficient processing of payments and subscriptions.	Identity and Contact Data; Financial and Transaction Data.	Performance of a Contract (Art. 6(1)(b))
Infrastructure	Provision of the server infrastructure and secure data storage.	Technical and Usage Data; Identity and Contact Data.	Contract (Art. 6(1)(b)) and Legitimate Interest (Art. 6(1)(f))
Communication Services	For email hosting.	Identity and Contact Data; Email/Communication Data.	Contract (Art. 6(1)(b)) and Legitimate Interest (Art. 6(1)(f))
Resellers	To facilitate the completion of the sale, license management, and ongoing account support when you purchase through them.	Account/Profile Data; Identity and Contact Data; Financial and Transaction Data.	Performance of a Contract (Art. 6(1)(b))
Legal and Fiscal Compliance (Auditors, Tax Authorities)	To comply with statutory accounting, tax, and reporting obligations.	Identity and Contact Data; Financial and Transaction Data.	Fulfillment of a Legal Obligation (Art. 6(1)(c))
Law Enforcement / Public Authorities	In response to a court order, subpoena, or to protect our rights or property.	Relevant data categories on a case-by-case basis.	Fulfillment of a Legal Obligation (Art. 6(1)(c)) or Legitimate Interest (Art. 6(1)(f))
Business Transaction Partners	In the event of a merger, acquisition, or reorganization of the business.	All relevant data categories (e.g., Identity, Financial, Account Data).	Legitimate Interest (Art. 6(1)(f))

Data Transfer to Other Countries

We primarily process data within the European Economic Area (EEA). Payment data is transferred to Stripe, Inc. in the United States. We rely on the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses (SCCs) to ensure an adequate level of protection.

Data Security

We implement appropriate technical and organizational measures (TOMs), including transport encryption and access controls, to protect your data.

Your Rights

Under the GDPR, you have the following rights regarding your data:

Access (Art. 15): Request a copy of your data.

Rectification (Art. 16): Correct inaccurate data.

Erasure (Art. 17): Request deletion of data (subject to legal retention obligations).

Restriction (Art. 18): Pause processing in certain cases.

Portability (Art. 20): Receive your data in a machine-readable format.

Objection (Art. 21): Object to processing based on legitimate interests. You have an absolute right to object to direct marketing at any time.

Withdraw Consent (Art. 7): Withdraw consent-based processing at any time.

Complaint (Art. 77): Lodge a complaint with a supervisory authority. The competent supervisory authority for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

To exercise these rights, please contact us at privacy@jawset.com.