Privacy Policy
Last updated: August 2026
1. Who we are
Jacomate is a SaaS automation service for local businesses (restaurants, hotels, clinics, salons, garages): automatic Google review replies, a WhatsApp ordering bot, an online shop with payments, and an AI voice assistant. Publisher: Tommy Jacomet (Jacomate IA), sole trader — SIRET 898 294 608 00028 (see our legal notice). Contact: contact@jacomate.com
2. Data we collect
Depending on the modules used by the business: account data (email, encrypted password, business name, address, phone, opening hours); Google reviews module (Google Place ID, public review content, generated replies); WhatsApp module (manager's and customers' phone numbers, message and order history); online shop (menu, orders, delivery information); voice assistant (voice menu configuration, call duration and status — no customer phone number is retained); browsing (technical cookies for authentication and preferences, IP address kept briefly for anti-abuse protection).
3. Payment
Payments (subscriptions and shop purchases) are processed by our provider Stripe. Jacomate never stores card numbers. For restaurateurs using Stripe Connect, funds and related banking information are managed directly by Stripe.
4. How we use data
This data is used solely to provide and improve the service. It is never resold or shared with third parties for commercial purposes.
5. Google API
Jacomate uses the Google Business Profile API to read and reply to Google reviews on behalf of businesses that have explicitly authorized access via OAuth 2.0. Use complies with Google's terms of service, including the Google API Services User Data Policy.
6. Processors and data transfers
We rely on providers necessary to operate the service: Supabase (database), Stripe (payments), Twilio and ElevenLabs (voice assistant), Sentry (technical error monitoring), Vercel (hosting). Some are based outside the European Union (United States); these transfers are covered by contractual safeguards (standard contractual clauses). None of these providers use your data for their own commercial purposes.
7. Data retention
Account and operational data is retained for as long as the business uses the service. Upon termination, it is deleted within 30 days on simple request to contact@jacomate.com. Technical error logs (Sentry) are retained according to that provider's standard duration (roughly a few weeks). IP addresses used for protection against abusive login attempts are kept for only a few minutes.
8. Your rights (GDPR)
Under GDPR, you have the right to access, rectify, and delete your data. To exercise these rights, write to contact@jacomate.com.
9. Contact
For any question regarding this privacy policy: contact@jacomate.com