Privacy notice

This notice describes how Jaeckert & O’Daniel GbR (“we”) processes personal data when you use J.O.E.: the website, the free GEO check, the account and the tools AI Visibility, Brand Sentiment and SEO. The privacy policy on jaeckert-odaniel.com applies to the rest of jaeckert-odaniel.com, the Academy, the podcast and the magazine.

The controller is Jaeckert & O’Daniel GbR, represented by Fabian Jaeckert and Benjamin O’Daniel, Freiherr-vom-Stein-Straße 2a, 54550 Daun. Contact for privacy questions: info@jaeckert-odaniel.com. The legal notice is on jaeckert-odaniel.com. The contractual rules are in the terms of use.

J.O.E. is for the analysis of brands, products and domains. Personal data of third parties must not be entered. The service is not intended for that. We are responsible for the account data of the people who sign in to J.O.E.

Account data

For sign-in, the account and billing we process:

• email address, name and the language you choose
• organisation, team role and workspace
• the time the account was created and of the last login
• for Academy accounts, the WordPress user ID and membership status
• billing details you enter at Stripe: name, address, VAT ID where relevant, payment method and subscription status
• the analyses, prompts, brands, sources and reports you create

Sign-in uses a magic link sent to your email address. The link is valid for 15 minutes. The session lasts 90 days without use, is extended on each visit, and is stored in a necessary cookie (geo_user_session). Another necessary cookie stores the language. For a free GEO check without an account we remember the browser with a session cookie so that you can reopen your own check. We also store the IP address there to limit abuse.

Where account data is stored

We store account data, analyses and operational logs in a PostgreSQL database. The application and the database are set up for operation in Europe: the application in Frankfurt, the database in Frankfurt, and the background service for longer analyses in Amsterdam. The background service uses the same database and can therefore technically reach the account data stored there. An individual analysis job contains only the identifier of the run.

Mailchimp receives only the email address and name, and only when the connection is active. You can object by using the unsubscribe link in the email or by writing to us. The legal basis is Art. 6(1)(f) GDPR, our interest in telling existing customers about J.O.E.

Plausible records page views, approximate origin and device type. At the provider, the IP address is turned into an identifier that changes daily and, according to the provider, is not stored. No profile is built across days and there is no link to your account. The legal basis is Art. 6(1)(f) GDPR. Details are in Plausible’s data policy.

Analysis requests

For GEO, sentiment and SEO analyses we call specialist services. Those calls contain the subject of the analysis: search term, prompt, market, language, a public URL or the answer text produced from it. The email address, name and account ID are not sent with those calls. We then store the results in our own database.

Support and logs

Authorised administrators at Jaeckert & O’Daniel can view accounts and analyses in order to operate the service, provide support and fix errors. There is currently no separate approval window in the product for this. We limit such access to the specific occasion.

Technical logs contain the service called, cost, duration, success and the link to the account and workspace. Full prompt texts and answer texts are in the analysis, not in this cost log. Error logs can contain short technical messages. You can view reports in the interface, copy tables and share them through a share link. Invoices are in the Stripe customer portal.

Retention

We store account data and analyses for the term of the contract and for a further 90 days after it ends. When that period expires we delete the organisation, the accounts that exist only there, and the GEO, SEO and sentiment analyses created in the organisation. Archiving only hides an entry from the sidebar during the contract. There is no shorter deletion period that you can set yourself. You can ask for earlier deletion. Magic-link tokens expire after 15 minutes. The session ends after 90 days without use or when you sign out.

Cost logs linked to the account or the organisation are deleted with the organisation after those 90 days. Error logs without a link to a person may be kept longer. Database backups follow the retention periods of the database provider. A single person cannot be removed separately from a backup that has already been written. They drop out when the backup expires.

Billing data stays with Stripe and with us for as long as retention duties apply. After that we delete or restrict it.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on Art. 6(1)(f) GDPR, and the right to withdraw consent for the future where we have exceptionally relied on consent. Contact info@jaeckert-odaniel.com.

In the account you can change the language yourself. You change the name and billing details through the Stripe customer portal, where Stripe holds them. You request deletion of the account and a full export by email. You can complain to a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz).

Whether you must provide data

Without an email address we cannot create an account or send a magic link. Without the payment details at Stripe no paid plan is created. You provide all other information, in particular analysis terms, voluntarily. Without it we cannot run the corresponding analysis.

Changes

If the processing changes, we update this notice and the date at the top of the page. The published version applies from that date.