Last updated 6 July 2026
What we store. Your name, email, password (as a salted scrypt hash — never plain text), your practice's public Google listing details, and scan results. Legal basis: performing the service you signed up for (GDPR Art. 6(1)(b)).
What we don't do. No selling of data, no advertising trackers, no third-party analytics cookies. The only cookie is the session cookie that keeps you signed in (strictly necessary).
Emails. We may email you about the product you use; every email has an unsubscribe. We never email your clients.
Where. Data is hosted in the EU. Scan data comes from public Google results via our data provider.
Your rights. Access, correction, export or deletion — email hello@jalapeno.ai and it's done within 30 days.