Privacy policy

JCIT Systems LLC (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, store, and protect information when you use our website, IT services, and software applications.

We may collect the following types of information:

• Contact information. Name, email address, phone number, and company name submitted through our contact forms.
• File uploads. Documents or files you voluntarily upload when submitting service requests.
• Usage data. Page views, browser type, referring URLs, and general browsing behaviour on our website.
• Financial and transaction data. In applications that integrate with financial services, we may read and process transaction data strictly for in-app functionality — see financial & transaction data.

• To respond to inquiries and service requests.
• To deliver, maintain, and improve our IT services and applications.
• To process and display transaction data within our applications for your personal use.
• To analyse website usage and improve user experience.
• To comply with legal obligations.

We retain personal data only as long as necessary to fulfil the purposes above:

• Contact form submissions are retained for up to 24 months, then permanently deleted.
• Website usage data is retained for up to 12 months. It is pseudonymous rather than anonymous: events are recorded against a randomly generated device identifier, which is not linked to your name or email but is not the same thing as having no identifier at all.
• Job applications and partner enquiries are retained for up to 24 months, so that we can come back to you if something opens up, then deleted.
• Reviews you submit are published on this website with the name and company you give, and are retained until you ask us to remove them. Do not put anything in a review that you would not want to be public.
• Transaction records are retained for seven years, as tax and accounting rules require.
• Uploaded files attached to service requests are retained for the duration of the engagement and deleted within 90 days of resolution.
• Invoices and the emails that deliver them are retained for seven years on the same basis as transaction records.

You may request early deletion of your data at any time by contacting inquiries@jcitsystems.com.

Where one of our applications takes a payment, the payment is processed by Stripe. Card details are entered on Stripe’s systems; we never see them and never store them. What we retain is the record of the transaction itself — what was bought, when, for how much, and the identifier Stripe gives it — because we are required to keep it and because you may ask us about it later.

We do not link bank accounts for the purpose of reading your spending, and we operate no budgeting or account-aggregation feature. Where an application pays money out to you, we hold the payout details you give us for that purpose alone.

Transaction records are retained for seven years, which is the period tax and accounting rules require.

We implement industry-standard security measures including encrypted connections, secure cloud infrastructure, access controls, and regular security review. While no system is completely secure, we take every reasonable precaution to safeguard your data.

We use the following processors. Each is contractually obligated to protect your data and to use it only for the service it provides to us. We do not sell your personal information to any third party.

• Vercel — hosting and content delivery for this website. Processes request metadata, including IP address, in the course of serving pages.
• Supabase — the database and file storage behind our contact, careers, partner and review forms, and behind our applications. Hosted in the United States.
• Amplitude — product analytics. Records page paths and interaction events against a randomly generated device identifier. We do not send names, email addresses, phone numbers, or anything you type into a form or a tool.
• Resend — transactional email delivery, so that a form submission reaches us and an invoice reaches you.
• Stripe — payment processing in those of our applications that take payment. Card details are entered on Stripe’s systems and are never seen by, or stored on, ours.

These providers may process data in the United States. Where a provider acts as a sub-processor on our behalf, it is bound by its own agreement with us.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent for data processing.
• Request a copy of your data in a portable format.
• Opt out of non-essential data collection.

To exercise any of these rights, contact inquiries@jcitsystems.com.

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review it periodically.

If you have questions about this policy or how we handle your data, contact us:

JCIT Systems LLC
Email: inquiries@jcitsystems.com
Phone: (347) 262-9435
Service area: New York Metropolitan Area