JScriptiser Privacy Policy

This document describes what actually happens to your data: what is collected when you sign up and use the platform, which external services are involved, and how to exercise your rights.

1. Who processes your data

1.1. Personal data is processed by the independent professional running the JScriptiser platform (the “Provider”), operating from Georgia.
1.2. Data protection enquiries: jscriptiser@gmail.com. Replies are sent within 30 days of receiving a request.

2. What data is processed

2.1. Account data: name or nickname, email address, avatar, interface language, time zone.
2.2. Sign-in data: password hash, verification codes, two-factor authentication secret, Telegram ID and username, Google account identifier — depending on the sign-in method you choose.
2.3. Technical data: IP address, browser and device information, sign-in times, active sessions.
2.4. Learning data: quiz results, kata solutions, materials viewed, progress, achievements and activity streaks.
2.5. Communication data: requests submitted through the website form (name, contact, message, IP address), conversations with the Telegram bot and with the AI assistant on the site, support enquiries, bug reports and feedback.
2.6. Booking data from the external calendar: name, email, time zone, answers to booking form questions, and referral tags.
2.7. Diagnostic data: technical error reports, including a replay of browser activity at the moment of an error. Text in such replays is masked and images and video are not recorded.

3. Why data is processed and on what basis

3.1. To perform the contract — creating and maintaining your account, giving access to the platform, saving progress, arranging and delivering consultations and related correspondence.
3.2. On the basis of consent — loading the third-party booking calendar and its cookies, and using the AI assistant. Consent can be withdrawn at any time.
3.3. On the basis of legitimate interests — account security, abuse prevention, error diagnostics and improving the platform.
3.4. To comply with legal obligations — keeping records of payments and responding to lawful requests from authorities.

4. Who data is shared with

4.1. Timeweb, hosting provider — servers and database (European location).
4.2. OpenRouter (USA) — processing AI assistant requests: the service receives your messages and passes them to the provider of the selected model. See section 9 for details.
4.3. Sentry — technical error reports and replays of browser activity at the moment of an error.
4.4. Calendly (USA) — consultation booking: name, email, time zone and answers to booking form questions.
4.5. Telegram — if you write to the bot or send direct messages; processing follows the messenger's own rules.
4.6. Email service provider — delivery of verification codes and notifications.
4.7. OpenRouter — preparation of knowledge base learning materials; no user personal data is sent for this purpose.
4.8. Personal data is never sold and is never shared with third parties for advertising.

5. Where data is stored and international transfers

5.1. Servers and the database are hosted in a European location.
5.2. Some of the recipients listed in section 4 are outside the European Economic Area, primarily in the United States. Transfers rely on standard contractual clauses or other lawful mechanisms provided for in the terms of those services.

6. How long data is kept

6.1. Account and learning data is kept while the account exists and is deleted together with it.
6.2. Sign-in sessions and verification codes are deleted automatically once they expire.
6.3. Conversations with the AI assistant are kept until you clear them — with a bot command in Telegram or the clear history button on the site — or until you delete your account.
6.4. Requests submitted through the website form and support enquiries are kept until you ask for them to be deleted; no automatic retention period is set for them.
6.5. Data held in third-party services — the booking calendar and the error diagnostics system — is kept according to those services' own rules.

7. Your rights

7.1. You have the right to access your data and receive a copy, correct inaccurate data, delete data, restrict processing, object to processing, receive your data in a portable format and withdraw consent previously given.
7.2. Email jscriptiser@gmail.com to exercise any of these. Replies are sent within 30 days.
7.3. You can delete your account yourself in your profile — identity confirmation via an email code or your second factor is required.
7.4. If you believe your rights have been breached, you may complain to the Personal Data Protection Service of Georgia or, if you live in the European Economic Area or the United Kingdom, to your national supervisory authority.

8. Cookies and browser storage

8.1. Strictly necessary cookies keep you signed in, secure sign-in through external providers and remember your choice in the consent banner. They are set without consent because the site does not work without them.
8.2. Third-party cookies are set by the booking calendar widget. It only loads after you consent; without consent a plain link is shown instead.
8.3. Browser local storage keeps interface settings and your consent banner choice.
8.4. You can withdraw consent by clearing your choice in the consent banner or clearing site data in your browser.

9. Artificial intelligence

9.1. The AI assistant is available in the Telegram bot and on the site, to registered users. Your questions and the assistant's answers are sent through the OpenRouter service to the provider of the selected model. The text of your question travels the same route when the assistant searches the knowledge base for an answer.
9.2. The models used and their providers may change without changes to this document; the current list is available on request at jscriptiser@gmail.com. Model providers may retain the requests sent to them in accordance with their own terms.
9.3. Conversations are stored on the platform so the assistant can remember the context. You can clear the history with a bot command in Telegram or the clear history button in the assistant window on the site. Using the assistant is optional — the platform works without it.
9.4. Do not enter confidential information, work code or other people's personal data into the AI assistant.
9.5. Some knowledge base materials are drafted with AI assistance and reviewed by a human before publication.

10. Children's data

10.1. The platform is intended for people aged 18 and over and is not designed for children.
10.2. If an account is found to belong to someone under 18, the data will be deleted.

11. Security

11.1. Passwords are stored as irreversible hashes, two-factor secrets are encrypted, and data is exchanged over a secure connection.
11.2. Database access is restricted and administrative actions are logged.
11.3. No system is perfectly secure. If a breach creates a risk to your rights, you will be notified.

12. Changes to this policy

12.1. This policy may be updated. The date of the last update is shown at the top of the document.
12.2. Material changes are announced by email or when you sign in.

Email for legal and privacy requests: jscriptiser@gmail.com

2. What data is processed

2.1. Account data: name or nickname, email address, avatar, interface language, time zone.

2.2. Sign-in data: password hash, verification codes, two-factor authentication secret, Telegram ID and username, Google account identifier — depending on the sign-in method you choose.

2.3. Technical data: IP address, browser and device information, sign-in times, active sessions.

2.4. Learning data: quiz results, kata solutions, materials viewed, progress, achievements and activity streaks.

2.5. Communication data: requests submitted through the website form (name, contact, message, IP address), conversations with the Telegram bot and with the AI assistant on the site, support enquiries, bug reports and feedback.

2.6. Booking data from the external calendar: name, email, time zone, answers to booking form questions, and referral tags.

2.7. Diagnostic data: technical error reports, including a replay of browser activity at the moment of an error. Text in such replays is masked and images and video are not recorded.

3. Why data is processed and on what basis

3.1. To perform the contract — creating and maintaining your account, giving access to the platform, saving progress, arranging and delivering consultations and related correspondence.

3.2. On the basis of consent — loading the third-party booking calendar and its cookies, and using the AI assistant. Consent can be withdrawn at any time.

3.3. On the basis of legitimate interests — account security, abuse prevention, error diagnostics and improving the platform.

3.4. To comply with legal obligations — keeping records of payments and responding to lawful requests from authorities.

4. Who data is shared with

4.1. Timeweb, hosting provider — servers and database (European location).

4.2. OpenRouter (USA) — processing AI assistant requests: the service receives your messages and passes them to the provider of the selected model. See section 9 for details.

4.3. Sentry — technical error reports and replays of browser activity at the moment of an error.

4.4. Calendly (USA) — consultation booking: name, email, time zone and answers to booking form questions.

4.5. Telegram — if you write to the bot or send direct messages; processing follows the messenger's own rules.

4.6. Email service provider — delivery of verification codes and notifications.

4.7. OpenRouter — preparation of knowledge base learning materials; no user personal data is sent for this purpose.

4.8. Personal data is never sold and is never shared with third parties for advertising.

5. Where data is stored and international transfers

5.1. Servers and the database are hosted in a European location.

5.2. Some of the recipients listed in section 4 are outside the European Economic Area, primarily in the United States. Transfers rely on standard contractual clauses or other lawful mechanisms provided for in the terms of those services.

6. How long data is kept

6.1. Account and learning data is kept while the account exists and is deleted together with it.

6.2. Sign-in sessions and verification codes are deleted automatically once they expire.

6.3. Conversations with the AI assistant are kept until you clear them — with a bot command in Telegram or the clear history button on the site — or until you delete your account.

6.4. Requests submitted through the website form and support enquiries are kept until you ask for them to be deleted; no automatic retention period is set for them.

6.5. Data held in third-party services — the booking calendar and the error diagnostics system — is kept according to those services' own rules.

7. Your rights

7.1. You have the right to access your data and receive a copy, correct inaccurate data, delete data, restrict processing, object to processing, receive your data in a portable format and withdraw consent previously given.

7.2. Email jscriptiser@gmail.com to exercise any of these. Replies are sent within 30 days.

7.3. You can delete your account yourself in your profile — identity confirmation via an email code or your second factor is required.

7.4. If you believe your rights have been breached, you may complain to the Personal Data Protection Service of Georgia or, if you live in the European Economic Area or the United Kingdom, to your national supervisory authority.

8. Cookies and browser storage

8.1. Strictly necessary cookies keep you signed in, secure sign-in through external providers and remember your choice in the consent banner. They are set without consent because the site does not work without them.

8.2. Third-party cookies are set by the booking calendar widget. It only loads after you consent; without consent a plain link is shown instead.

8.3. Browser local storage keeps interface settings and your consent banner choice.

8.4. You can withdraw consent by clearing your choice in the consent banner or clearing site data in your browser.

9. Artificial intelligence

9.1. The AI assistant is available in the Telegram bot and on the site, to registered users. Your questions and the assistant's answers are sent through the OpenRouter service to the provider of the selected model. The text of your question travels the same route when the assistant searches the knowledge base for an answer.

9.2. The models used and their providers may change without changes to this document; the current list is available on request at jscriptiser@gmail.com. Model providers may retain the requests sent to them in accordance with their own terms.

9.3. Conversations are stored on the platform so the assistant can remember the context. You can clear the history with a bot command in Telegram or the clear history button in the assistant window on the site. Using the assistant is optional — the platform works without it.

9.4. Do not enter confidential information, work code or other people's personal data into the AI assistant.

9.5. Some knowledge base materials are drafted with AI assistance and reviewed by a human before publication.

11. Security

11.1. Passwords are stored as irreversible hashes, two-factor secrets are encrypted, and data is exchanged over a secure connection.

11.2. Database access is restricted and administrative actions are logged.

11.3. No system is perfectly secure. If a breach creates a risk to your rights, you will be notified.