Privacy
Short version: we collect the minimum we need to run a curator waitlist, we keep it on Supabase in the EU, we don't sell it, and you can ask us to delete it any time.
Who we are
My Jam is a product of Prime Directive AI Ltd, a UK company (16551401), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the data controller for personal data submitted to myjam.fun.
What we collect from the waitlist form
- Email address. Required, so we can contact you when invites open.
- Curator type (concierge / host / creator / tour guide / operator / other). Required, so we can prioritise the right early waves.
- City you're based in. Optional.
- Social handle, website, or hotel name. Optional, for context on your distribution surface.
- Free-text notes. Whatever you tell us. Optional.
- Signup timestamp + browser user-agent string. For abuse detection (rate-limiting, bot signups).
Cookies
This site uses minimal cookies. None are strictly necessary for the site to function. We ask for your consent before setting any non-essential cookies.
Analytics. We use Google Analytics 4 to understand how visitors use the site. On your first visit we show a consent prompt and we only enable Google Analytics if you accept. If you accept, GA4 sets cookies (typically _ga and _ga_*) and we ask GA4 to anonymise IP addresses. You can change your mind at any time by clearing site data for this domain in your browser, which will trigger the prompt again on your next visit. You can also install the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Functional storage. Your consent choice is stored in your browser's localStorage as myjam_consent. This is not a cookie and is never sent to our servers.
Lawful basis
For visitors and recipients in the UK and EU, our lawful basis for processing personal data via analytics is consent (Article 6(1)(a) of the UK GDPR and the EU GDPR). We only enable analytics when you accept the consent prompt. Our lawful basis for processing waitlist signups is your consent (you actively submit the form), and any direct outreach in response to your signup is on a legitimate-interest basis (Article 6(1)(f)).
What we don't collect
No fingerprinting. No advertising pixels. No third-party trackers beyond Google Analytics (and only with your consent). No data sold or shared with brokers.
Where it's stored, who can see it
Data is stored in Supabase (eu-west-2, London region). Access is restricted to Prime Directive AI staff via a service-role key. Anonymous form submissions can only insert one row at a time and cannot read anything back. We don't share waitlist data with third parties.
How long we keep it
Until you ask us to delete it, or for two years after your last interaction, whichever comes first. If you sign up but never engage with an invite, we'll automatically purge after 24 months.
Your rights under UK GDPR
You have the right to access, correct, port, or delete your data, and to object to or restrict its processing. To exercise any of these, email [email protected] with the subject line "Privacy request" and the email address you signed up with. We'll act within 30 days.
Complaints
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we make material changes, we'll email everyone on the waitlist before the changes take effect. Minor edits (typos, clarifications) get a new "last updated" date.