Privacy Policy
1. Controller and operator
JAIMIE is operated by Cerebrum Lumen s.r.o., Company ID 23685972, with its registered office at Rakolusky 21, 331 41 Bohy, Czech Republic (the “Operator”).
Website: cm-l.cz
Contact for privacy matters and user requests:
info@cm-l.cz
The Operator is the controller of data relating to user accounts, security and connections to Google services. For business data entered by a customer or partner, the Operator may also act as a processor under the applicable agreement.
2. Purpose and users of the application
JAIMIE is an enterprise information system for the Operator, its customers, contractual partners and their authorized users. It is not intended as a public consumer service or for the sale of personal data.
The application supports CRM and contact management, quotations, work orders, technical reports, electrical inspections, document creation, invoicing, planning and related business collaboration. Access is limited to accounts created or invited in advance.
3. Data we process
- Account and sign-in data: user name or designation, email address, Google Account identifier, profile photo, account verification status and sign-in timestamps.
- Business data: company, contact and address data, quotations, work orders, billing data, technical reports, electrical inspections, documents, attachments, tasks and other content entered by authorized users.
- Operational and security data: user preferences, records of important operations, IP addresses for audited events and technical logs required for security and troubleshooting.
- Google Calendar data after voluntary connection: identifiers of the selected calendar and events, and event data required for display and synchronization, such as title, description, location, start and end time, status, attendees and reminders. We may also securely store an authorization token and technical data required to maintain the connection.
4. Google Sign-In
JAIMIE uses Google OAuth for authentication. During sign-in it requests only the
basic openid, email and profile permissions,
which are used to verify identity and match the user to a pre-authorized JAIMIE account.
Signing in does not by itself grant JAIMIE access to Google Calendar.
5. Optional Google Calendar integration
Google Calendar integration is optional. Access to calendar data will be requested separately only when a user knowingly enables the calendar feature. Refusing or later revoking this permission does not prevent normal use of the other parts of JAIMIE.
Calendar data is used only for user-visible scheduling and synchronization of events between JAIMIE and Google Calendar. The application will request only the narrowest permissions necessary for the features actually enabled. It will not modify other calendars, calendar settings or sharing permissions without the user's action.
We do not use Google Calendar data for advertising, profiling unrelated to JAIMIE features, creditworthiness assessment or training general-purpose artificial intelligence models. We do not sell Google user data.
JAIMIE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Legal bases and purposes of processing
We process data only to the extent necessary to:
- provide the application and perform contractual obligations to customers and partners,
- verify identity, manage access and protect accounts and business data,
- maintain accounting, tax and other legally required records,
- pursue the legitimate interest of operating the system securely and reliably, and
- provide optional Google features only after the user's explicit authorization through Google OAuth.
7. Sharing and access
Data is accessible only to authorized users of the relevant organization and to authorized Operator personnel where necessary for operation, support and security. We may disclose data to essential hosting, backup, email and authentication providers that process it under contractual and security obligations.
We do not transfer Google user data to third parties except where necessary to provide a user-requested feature, protect system security, comply with law, or with the user's prior explicit consent.
8. Retention and security
We retain data for the duration of the active account and contractual relationship, and afterwards only for periods required by law or necessary to protect legal claims. Google Calendar authorization tokens and supporting data are retained only while the connection is active. Calendar data is not retained longer than necessary for display, synchronization and troubleshooting.
We use appropriate technical and organizational safeguards, including encrypted transmission, access controls, role separation, auditing of important operations and regular backups.
9. Revoking access, deleting data and user rights
A user can revoke JAIMIE's access to their Google Account at any time on the Google Account permissions page. Once the calendar integration is introduced, it will also be possible to disconnect it in JAIMIE settings. Disconnecting stops further access to Google Calendar. Data already lawfully transferred into business records may remain subject to contractual and statutory retention duties.
Users may request access to, correction, restriction, portability or deletion of their personal data and may object to processing. Requests can be sent to info@cm-l.cz. We will respond without undue delay and within statutory time limits. Users also have the right to lodge a complaint with the Czech Office for Personal Data Protection.
10. Changes to this policy
We update this policy as JAIMIE's functionality and legal or contractual requirements evolve. The current version is always published on this page together with its last-update date.