Privacy Policy

Privacy Policy for Jump IT UG (haftungsbeschränkt)

Last updated: 05 September 2026

This Privacy Policy explains how Jump IT UG (haftungsbeschränkt) ("Jump IT", "we", "us" or "our") collects, uses, discloses and protects personal data when you interact with our cloud desktop services (“Services”). It also describes your rights and how you can exercise them. Jump IT is a limited liability company incorporated in Germany with registered office at Magnusstraße 2, 29221 Celle, Germany.

1. Who is responsible for your data?

Jump IT is the data controller for the personal data described in this Policy. For some business clients we may also act as a data processor on their behalf (for example when administering end user accounts). If you have any questions about this Policy or wish to exercise your rights, please email privacy@jumpit.ai.

2. What data do we collect?

We collect data when you create an account, use our Services, or contact us. The types of data we collect include:

Identity and account data: your name, email address and other details provided by your chosen sign in provider (e.g. Google, Microsoft, Apple). For business accounts we may also collect company name, VAT ID and contact person.
Usage data: information about your interaction with the Services, such as session start/end times, virtual machine specifications (CPU, memory, region), features used, IP address, operating system, browser type and device identifiers. We log system events to detect abuse and ensure stability.
Cookie and analytics data: essential session cookies are used for login and authentication. With your consent, we use analytics cookies to collect information about your device type, approximate location, pages visited, clicks and time spent on our sites. You can adjust your cookie preferences at any time via the “Cookie Settings” link.
Payment and billing data: we record transaction history (plan selected, amount, date, currency and payment status). We use third party payment processors (e.g. Stripe) and do not store full card details. Billing information may include your billing address and tax information.
Support data: information you provide when contacting our support team (e.g. troubleshooting details, logs, emails, chat transcripts).
Additional information for business accounts: for some business customers we may collect end user administrative data (e.g. names and email addresses of administrators) and signing persons’ contact details to manage the contract. If you request a Data Processing Addendum (DPA), we will process any data needed to prepare and execute that agreement.

We do not collect sensitive categories of data (e.g. health, race, political opinions) unless expressly requested by you for support purposes, and we ask you not to upload such data to our Services. Persons under 18 must not create an account unless a parent or guardian has consented; we do not knowingly collect personal data from children.

3. How do we use your data and what is the legal basis?

Jump IT processes your personal data for the following purposes and legal bases:

Purpose	Legal basis (EU GDPR/UK GDPR)	Examples
Provision and maintenance of the Services	Performance of a contract (Article 6(1)(b))	Creating your account; provisioning and managing your virtual machines; remembering your preferences; providing customer support.
Billing and payments	Performance of a contract and legal obligation (Articles 6(1)(b) & 6(1)(c))	Processing subscription fees; calculating taxes; complying with German commercial and tax laws requiring record keeping.
Account management and communication	Legitimate interests (Article 6(1)(f))	Sending service emails about updates, changes to your subscription or security notices; responding to inquiries. Our legitimate interest is to operate and grow our business while keeping you informed.
Security and fraud prevention	Legitimate interests and legal obligation	Monitoring usage and logs to detect abuse, malware and suspicious activity; protecting our infrastructure and other customers.
Analytics and improvements	Consent (Article 6(1)(a))	When you consent to analytics cookies, we analyse aggregated usage patterns to improve performance and usability of our Services. You can withdraw consent at any time via cookie settings.
Marketing communications	Consent or legitimate interests (where permitted)	With your opt in, we may send occasional product updates or promotional offers. You can opt out at any time by following the unsubscribe link.
Compliance with law and enforcement of rights	Legal obligation and legitimate interests	Retaining tax records; responding to lawful requests from authorities; enforcing our Terms of Service and defending legal claims.

For users outside the EU/EEA (e.g. US, UK, Australia, India), local laws may provide additional rights or impose different legal bases. Where required by your local law, we will obtain your consent or rely on legitimate interests as permitted.

4. How do we share personal data?

We do not sell or rent your personal data. We share information only with:

Service providers that process data on our behalf, such as Microsoft Azure (cloud hosting), Stripe (payment processing), email/SMS providers, analytics vendors. These providers are contractually obligated to handle your data securely and only for specified purposes.
Affiliates or subcontractors who assist us in delivering the Services (e.g. IT administrators), bound by confidentiality agreements.
Authorities or third parties when required by law or to protect our rights or the safety of others (e.g. responding to legal requests, investigating suspected fraud or abuse).
Potential business transfers: in the event of a merger, acquisition, financing or sale, your data may be transferred as part of that transaction. We will notify you and ensure the new owner honours this Policy.

We may transfer personal data to countries outside your jurisdiction. For transfers from the EU/EEA/UK to third countries, we use standard contractual clauses or rely on adequacy decisions to ensure an equivalent level of protection. Similar safeguards apply for Swiss, Australian and Indian users.

5. How do we protect your data?

We implement industry standard security measures to safeguard your personal data:

Encryption: data at rest is encrypted; data in transit between your device and our servers is protected by TLS. Jump IT uses ISO 27001 certified Azure regions.
Access controls: strict role based access limits our personnel’s access to systems storing personal data.
Redundancy and backups: we maintain redundant infrastructure and backups to ensure service continuity and data integrity. Physical servers are located in secure data centres with 24/7 monitoring.
Vendor due diligence: third party processors are assessed for security and privacy practices. Our contracts require them to implement appropriate safeguards and comply with relevant laws.

Despite our efforts, no system is completely secure. We recommend you use strong, unique passwords. If we detect a data breach affecting your information, we will notify you and regulators as required by law.

6. Data retention

We retain personal data only as long as necessary:

Account data: stored while your account is active. If you delete your account, we will delete or anonymise your data within 30 days, unless retention is required for legal or contractual reasons. Self-service closure first resolves desktop and Team obligations, wallet balances, pending payments and refunds, and removes Team and Windows access. If a desktop is offline, access removal remains pending and network access is restricted until it can be confirmed; closure progress remains visible. We erase ordinary profile data, account-linked login history, game progress, feedback and authenticated analytics after closure. A minimal account marker prevents delayed sign-ins or payment notifications from recreating an erased profile. Erasure or restriction requests can also be sent to privacy@jumpit.ai when obligations prevent self-service closure.
Billing and transaction records: retained for the period applicable to each record category under German commercial and tax laws, and longer where a specific legal obligation requires it.
Usage logs and security data: stored for up to 12 months to monitor and investigate abuses; may be anonymised and retained longer for analytics.
Support correspondence: retained for up to 2 years for follow up and quality assurance. Exit feedback expires after 90 days. Consent evidence and pseudonymous email suppression records are retained as needed to demonstrate and respect marketing choices; they are not anonymous. Backup retention is limited to 30 days, and restoration must preserve account-erasure and marketing-suppression records.

We may retain anonymised or aggregated data (which cannot identify you) indefinitely for statistical purposes.

7. Your rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Access: obtain confirmation of whether we process your personal data and a copy of that data.
Rectification: request correction of inaccurate or incomplete data.
Erasure: request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Restriction: ask us to suspend processing of your data.
Objection: object to processing based on legitimate interests or to receiving marketing communications.
Data portability: receive your data in a structured, commonly used format and transfer it to another provider.
Withdrawal of consent: withdraw consent at any time where processing is based on consent (e.g. analytics cookies or marketing emails).
Complaint: lodge a complaint with your local data protection authority.

To exercise your rights, please email privacy@jumpit.ai. We may ask you to verify your identity before responding. We aim to respond within one month (or the statutory period in your jurisdiction).

8. Cookies and similar technologies

Our website uses cookies and similar technologies to enable and improve the Services.

Essential cookies: required for login, authentication, session management and security. These cookies are always on and cannot be disabled via cookie preferences.
Analytics cookies: optional cookies that collect anonymised information about device type, browser, country, page views, time spent and interactions. We use this data to optimise our user experience. These cookies are set only after you provide consent through our cookie banner. You can withdraw consent at any time by visiting the "Cookie Settings" link.
Third party measurement: where configured, Google Analytics requires analytics consent and Google Ads conversion measurement requires marketing-cookie consent. They may receive online identifiers, device and browser information, network information including IP address, and consented page or conversion events. Advertising personalisation and enhanced conversions are disabled in our integration. Optional Google tags load only after the relevant consent. Cookie Settings lets you withdraw consent, which disables the corresponding events and removes the Google cookies our site can access. Previously transmitted data is subject to the provider's retention and your applicable rights. See Google's privacy information. Email marketing requires a separate explicit opt-in in Profile Settings; cookie consent does not grant email permission. You can withdraw email permission in Profile Settings or through an unsubscribe link. Essential account, billing and service messages are separate.

9. Data processing agreements and business customers

For business customers who act as data controllers of their end users’ information (e.g. when providing cloud desktops to employees), Jump IT offers a Data Processing Addendum (DPA) that outlines our obligations as a processor under Articles 28–36 GDPR and similar laws. The DPA includes details on subprocessors, technical and organisational measures, and audit rights. To request a DPA, email privacy@jumpit.ai.

10. International variations

Jump IT serves a global customer base. While this Policy is designed to comply with EU GDPR and German law, local data protection regimes may apply:

United Kingdom – We comply with the UK GDPR and Data Protection Act 2018. UK users have essentially the same rights as EU users. UK complaints can be lodged with the ICO.
United States – Jump IT is not subject to HIPAA or other US sectoral federal privacy laws. Jump IT does not sell personal data as defined by the CCPA and currently does not meet the thresholds that would make it subject to the CCPA. Nevertheless, if you are a California resident and have questions or requests regarding your personal information, you may contact us as described below and we will respond in accordance with applicable law.
Australia – We adhere to the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Australian users can request access and correction of personal information and complain to the OAIC.
India – The Digital Personal Data Protection Act 2023 (DPDP Act) introduces new obligations for entities that determine the purpose and means of processing (data fiduciaries), including providing a mechanism for users to lodge complaints and responding within specified timeframes. When the Act becomes fully operational, Jump IT will comply with these requirements by providing a dedicated grievance email (grievance india@jumpit.ai) for Indian users and responding within the timelines set by the Act. We do not maintain a physical grievance officer in India.

11. Changes to this Policy

We may update this Privacy Policy from time to time (e.g. to reflect changes in law or our services). When we do, we will post the updated version on our website and update the “Last updated” date. If changes materially affect your rights, we will notify you via email or through the Service. Continued use of the Services after the update signifies your acceptance of the revised Policy.

12. Contact information

If you have questions about this Policy or wish to exercise your rights, please contact us at:

Email: privacy@jumpit.ai
Post: Jump IT UG (haftungsbeschränkt), Magnusstraße 2, 29221 Celle, Germany

You may also contact our Data Protection Officer (DPO) at the above email. We take your privacy seriously and will respond promptly to any concerns.