Privacy Policy
Last updated: 14 September 2026
JOOBIX is committed to protecting privacy and handling personal data lawfully, fairly, transparently and only to the extent reasonably necessary.
This Privacy Policy explains how personal data may be processed when you visit the JOOBIX website, use JOOBIX software, contact JOOBIX, purchase or license a paid JOOBIX product, or otherwise interact with JOOBIX.
1. Data Controller
The data controller for personal data processed directly by JOOBIX is:
Shaghayegh Ghorbanietemad
Operating under the name JOOBIX
29121 Piacenza (PC), Italy
Email: joobix.co@gmail.com
2. Scope of this Privacy Policy
This Privacy Policy applies to JOOBIX websites and services, including:
- joobix.co and its relevant subdomains;
- app.joobix.co;
- JOOBIX Search Term Intelligence Free;
- JOOBIX paid, Pro or Agency editions where made available;
- JOOBIX Business Truth and related analytical features;
- contact forms and direct communications;
- product feedback;
- software licensing and access-management systems;
- purchase, order and subscription information made available to JOOBIX by its commerce providers.
Independent third-party websites and services have their own privacy policies.
3. Privacy-by-Design Approach
JOOBIX is designed to minimise unnecessary transmission of advertising and business data.
Where a JOOBIX application states that a file is processed locally, the analysis of that file takes place within the user’s browser or device rather than requiring the raw file to be uploaded to JOOBIX for analysis.
However, using an online application still involves ordinary network communications required to load the website or application, receive application updates, verify paid access where applicable, provide security, or communicate with third-party services specifically used by the user.
Local file processing should therefore not be interpreted as meaning that the application never makes any network request.
4. Personal Data JOOBIX May Process
Depending on how you interact with JOOBIX, we may process the following categories of information.
4.1 Contact and Communication Data
This may include:
- name;
- email address;
- company or organisation name, where provided;
- information included in a message, enquiry or support request;
- correspondence between you and JOOBIX;
- marketing consent or withdrawal records.
4.2 Website and Technical Data
When you access a JOOBIX website or online application, ordinary hosting and security systems may process technical information such as:
- IP address;
- browser and device information;
- requested page or resource;
- date and time of access;
- operating-system information;
- error, diagnostic and security logs;
- information necessary to detect abuse, security incidents or technical failures.
JOOBIX seeks to minimise such processing and does not intentionally use technical data for unrelated profiling.
4.3 Search Terms and Advertising Data
JOOBIX Search Term Intelligence may process information contained in advertising reports selected by the user, including:
- search terms;
- campaign names;
- ad-group names;
- keyword information;
- match types;
- impressions;
- clicks;
- advertising spend;
- conversions;
- conversion value;
- other relevant advertising metrics.
For the current local-processing architecture, these files are analysed within the user’s browser and are not uploaded to JOOBIX servers for the purpose of performing the analysis.
JOOBIX does not require the user’s Google Ads password or account credentials and does not automatically make changes to Google Ads campaigns.
4.4 Business Outcomes and CRM Data
Paid or Agency features may allow a user to select a Business Outcomes or CRM export to compare advertising metrics with business results such as:
- outcome status;
- qualified or unqualified status;
- customer or sale status;
- revenue or business value;
- rejection or loss reason;
- campaign, ad-group or keyword context;
- attribution identifiers or other mapped fields needed for analysis.
JOOBIX does not require names, email addresses or telephone numbers for Business Truth analysis.
Users should export only the fields reasonably necessary for the intended analysis and should remove unnecessary personal information before using a file.
Under the current local-processing architecture, Business Outcomes and CRM files selected for analysis are processed within the user’s browser and are not uploaded to JOOBIX servers for the purpose of performing the analysis.
Unmapped columns are not intentionally used by the analysis engine.
Users are responsible for ensuring that they have an appropriate lawful basis and authority to process any personal or client data they choose to use with JOOBIX.
Users should not include special-category or highly sensitive personal data unless it is genuinely necessary and legally permitted. JOOBIX does not request such information for its normal advertising-analysis functionality.
5. Local Reports, Exports and Snapshots
JOOBIX may generate files locally on the user’s device, such as:
- CSV action plans;
- diagnostic JSON files;
- feedback files;
- PNG snapshots;
- client-ready reports;
- comparison files or other downloadable outputs.
Where generated locally, these files remain under the user’s control unless the user subsequently chooses to send or upload them elsewhere.
The user is responsible for deciding where generated reports are stored and with whom they are shared.
Users should review reports before sharing them externally, particularly where a report may contain campaign, search-term, business-outcome or client information.
6. Product Feedback
JOOBIX may allow users to generate or submit product feedback.
Where a feedback file is generated locally, JOOBIX does not automatically receive it.
If a user chooses to email, attach or otherwise send a feedback file to JOOBIX, JOOBIX may process the information contained in it in order to:
- investigate a reported issue;
- provide support;
- improve product functionality;
- understand user requirements;
- evaluate recommendation quality;
- identify bugs or unexpected behaviour.
Where the product provides a choice about whether raw campaign or search-term identifiers are included in feedback, those identifiers may be excluded by default.
Users should avoid sending unnecessary confidential, personal or third-party information in feedback.
7. Paid Products and Purchase Information
JOOBIX may offer paid software, Pro or Agency editions.
Where a paid JOOBIX product is offered through Lemon Squeezy, Lemon Squeezy acts as Merchant of Record for the purchase transaction.
Lemon Squeezy and its payment providers may process information necessary to complete a transaction, including:
- customer name;
- email address;
- billing or country information;
- payment-method information;
- tax or VAT information where applicable;
- order information;
- product and variant information;
- subscription status;
- refund or chargeback information;
- fraud-prevention and transaction-security information.
Payment information is processed through Lemon Squeezy and its payment infrastructure under their applicable privacy terms.
JOOBIX does not intend to receive or store complete payment-card numbers, CVV codes or equivalent full payment credentials.
JOOBIX may receive limited purchase information from Lemon Squeezy where necessary to:
- confirm that a product was purchased;
- provide access to the purchased product;
- issue or validate a software licence;
- provide customer support;
- manage refunds, cancellations or access status;
- prevent fraud or unauthorised access;
- maintain records necessary for legal, accounting or contractual purposes.
8. Sources of Paid-Customer Data
Information relating to a paid customer may be obtained:
- directly from the customer;
- from Lemon Squeezy in connection with a purchase;
- from a licence-activation or entitlement service;
- from communications between the customer and JOOBIX.
Information received from a commerce or licensing provider may include customer name and email, order identifiers, product and variant information, licence status and other metadata required to confirm legitimate product access. Where JOOBIX Agency uses a business/professional purchase gate, JOOBIX may also process a minimal eligibility declaration and related contract-evidence metadata, including signatory name and email, professional category, challenge/evidence identifier, UTC timestamps, the exact legal-document versions and specifically approved clause identifiers, document/evidence digests and privacy-minimised HMAC representations of relevant IP/device or user-agent data where used for security and attribution. This processing is carried out where necessary for contract/pre-contract administration and JOOBIX’s legitimate interests in fraud prevention, evidence integrity and the establishment, exercise or defence of legal claims. Such evidence may normally be retained for up to 10 years from the last relevant contractual event or end of the contract, and longer only where necessary for a pending claim, dispute or legal obligation. Examples of related metadata may include the accepted legal-document version and an acceptance timestamp, where reasonably necessary to administer the contract, demonstrate the stated professional purchase basis, prevent misuse or establish, exercise or defend legal claims.
9. Software Licences and Access Validation
Paid JOOBIX products may use licence keys, access entitlements or similar mechanisms.
For licence activation, validation, deactivation and access control, JOOBIX and/or its licensing provider may process information such as:
- licence key;
- licence status;
- licence creation or expiry information;
- activation count and activation limit;
- an instance name or instance identifier;
- activation and validation timestamps;
- product or variant identifier;
- order identifier;
- customer identifier;
- customer email or name where needed to verify the purchaser;
- technical security information reasonably required to prevent unauthorised use.
Licence information may be stored locally on the user’s device and/or processed through a JOOBIX-controlled access service or the relevant licensing provider.
A licence instance identifier is used for software-access management. JOOBIX does not intend to use licence information for advertising profiling.
Where the licensing system communicates with Lemon Squeezy, licence-related information may be sent to Lemon Squeezy for activation, validation or deactivation.
Advertising CSV or CRM-file contents must not be included in licence-validation requests unless a future feature expressly requires such processing and this Privacy Policy is updated accordingly.
10. User Accounts and Authentication
JOOBIX does not require a user account for every product.
If an account, customer portal or authenticated paid-access system is provided, JOOBIX may process information necessary to operate that system, such as:
- email address or account identifier;
- authentication or session information;
- access entitlement;
- product licence;
- subscription or purchase status;
- security and login records.
Authentication data will be used only for product access, security, support and related operational purposes unless another purpose is clearly communicated.
11. Purposes and Legal Bases for Processing
JOOBIX processes personal data only where an appropriate legal basis exists.
Depending on the activity, processing may be based on:
Contract and Pre-Contractual Steps
Processing may be necessary to:
- respond to a product or purchase enquiry;
- provide software or product access;
- manage paid licences;
- confirm purchase or subscription status;
- provide support;
- administer the customer relationship.
Legitimate Interests
Where appropriate and where those interests are not overridden by the rights and freedoms of the individual, JOOBIX may rely on legitimate interests to:
- operate and secure its websites and software;
- prevent fraud, abuse or unauthorised access;
- diagnose technical problems;
- respond to business communications;
- maintain reasonable records;
- improve product quality;
- protect JOOBIX’s legal rights.
Consent
Consent may be used for purposes such as:
- optional marketing communications;
- optional non-essential cookies or tracking technologies, if introduced;
- other optional processing clearly identified at the point consent is requested.
Consent may be withdrawn at any time.
Legal Obligations
Personal data may be processed where necessary to comply with:
- tax or accounting requirements;
- applicable consumer or commercial obligations;
- lawful requests from authorities;
- legal claims or dispute-resolution requirements;
- other obligations imposed by applicable law.
12. Contact Forms and Direct Communications
When you submit a contact form or contact JOOBIX by email, JOOBIX processes the information you provide to:
- respond to your enquiry;
- provide support;
- evaluate a potential business relationship;
- respond to product questions;
- maintain necessary communication records.
Contact-form submissions may be processed through the website’s WordPress environment, form infrastructure and email-delivery systems.
13. Marketing Communications
Marketing communications are optional.
JOOBIX will not use a contact-form email address for optional promotional email solely because the user submitted an enquiry.
Where marketing consent is requested, it must be provided separately and voluntarily where required.
You may withdraw marketing consent at any time by contacting JOOBIX.
Withdrawal does not affect processing that was lawful before consent was withdrawn.
Declining marketing communications does not prevent use of the JOOBIX Free application or submission of ordinary support and contact requests.
14. Cookies, Browser Storage and Similar Technologies
JOOBIX may use cookies, browser storage and similar technologies that are strictly necessary for:
- website functionality;
- security;
- authentication;
- licence or access management;
- session continuity;
- PWA installation;
- offline operation;
- software updates;
- user-requested functionality.
Technical storage may be used without being employed for advertising or behavioural profiling.
The JOOBIX PWA may use service-worker caching and browser cache to store application files on the user’s device so that the application can load reliably and, where supported, operate offline.
Such technical application storage is separate from the advertising or Business Outcomes CSV selected by the user.
Browser or PWA data can generally be removed through browser site-data controls or by uninstalling the application.
JOOBIX does not currently intend to place non-essential advertising or profiling trackers within its application.
If JOOBIX later introduces non-essential analytics, advertising, profiling or marketing technologies for which consent is legally required, they will not be activated before the required consent has been obtained.
15. Functional Third-Party Resources
The JOOBIX website may use third-party resources for functional purposes, such as hosting, content delivery, fonts, security or email infrastructure.
For example, where Google Fonts is loaded from Google-operated servers rather than hosted locally, the user’s browser may communicate directly with Google-operated domains to retrieve the font resource, which can necessarily involve transmission of technical request information such as the user’s IP address.
JOOBIX seeks to minimise unnecessary third-party requests and may replace externally hosted resources with locally hosted alternatives where practical.
16. Service Providers and Recipients
Personal data may be made available only where reasonably necessary to categories of recipients such as:
- website and application hosting providers;
- DNS and infrastructure providers;
- email-delivery providers;
- form-processing providers;
- security and technical-support providers;
- payment and commerce providers;
- licence and entitlement providers;
- accounting or legal professionals where necessary;
- public authorities where disclosure is legally required.
For the application itself, Vercel may be used to host JOOBIX web-application infrastructure.
For paid transactions, Lemon Squeezy may act as Merchant of Record and licensing provider.
Service providers may process only the information relevant to the service they provide, subject to their contractual and legal obligations.
JOOBIX does not sell personal data to advertisers or unrelated third parties.
17. International Data Transfers
Some JOOBIX service providers may operate or process information in countries outside the European Economic Area.
Where GDPR requirements apply to an international transfer, JOOBIX will rely on an applicable legal mechanism where required, which may include:
- an adequacy decision;
- Standard Contractual Clauses;
- another recognised transfer safeguard;
- another lawful derogation or mechanism available under applicable data-protection law.
The precise transfer mechanism may vary depending on the provider and service involved.
18. Data Retention
JOOBIX does not retain personal data longer than reasonably necessary for the purpose for which it was processed, unless a longer period is required or permitted by law.
In particular:
- raw Search Terms and Business Outcomes CSV files processed locally are not retained on JOOBIX servers merely because the user analysed them;
- locally generated reports remain on the user’s device until the user deletes or moves them;
- PWA/application cache remains on the user’s device until cleared, replaced through application updates or removed by the user;
- ordinary contact and support communications may normally be retained for up to 24 months after the last relevant interaction, unless a longer period is reasonably necessary for an ongoing relationship, dispute or legal obligation;
- product-feedback information received by JOOBIX may normally be retained for up to 24 months, or longer where necessary to investigate an unresolved issue or protect legal rights;
- marketing information may be retained until consent is withdrawn or the relevant marketing purpose ends;
- records necessary to demonstrate consent or withdrawal may be retained where reasonably required for compliance;
- purchase, order, refund, accounting and transaction records may be retained for the period required by applicable legal, tax, accounting or dispute-resolution obligations;
- licence and entitlement information may be retained for the duration of the licence or customer relationship and for a reasonable period afterwards where necessary for support, fraud prevention, dispute management or legal compliance;
- technical and security logs are retained according to operational and security needs and are deleted or anonymised when no longer reasonably necessary.
19. Data Minimisation
JOOBIX is designed to reduce unnecessary collection of personal data.
For Agency and Business Truth workflows, users should provide only fields relevant to the analysis.
Names, personal email addresses and phone numbers are generally not required for Business Truth calculations.
Users working with client data are encouraged to remove unnecessary identifying information before selecting a file for analysis.
20. Automated Analysis and Human Review
JOOBIX provides analytical findings and decision-support information for advertising and business-performance workflows.
JOOBIX does not automatically add search terms as negative keywords or automatically modify advertising campaigns in its current architecture.
Recommendations are intended to be reviewed by a human before action is taken.
The JOOBIX software is not intended to make decisions about natural persons based solely on automated processing where those decisions would produce legal effects or similarly significant effects within the meaning of Article 22 GDPR.
21. Security
JOOBIX applies reasonable technical and organisational measures appropriate to the nature of the service and the data involved.
Measures may include:
- HTTPS-encrypted connections;
- browser-local processing of analytical files;
- restrictive application security policies;
- access controls;
- software integrity and release testing;
- separation of analytical data from licensing/payment functions;
- minimisation of unnecessary external dependencies;
- reasonable security logging and monitoring.
No internet service, browser, device or electronic-storage method can be guaranteed to be completely secure.
If a personal-data breach occurs, JOOBIX will take appropriate steps in accordance with applicable data-protection law, including notifications where legally required.
22. Your Responsibilities When Using Client or Third-Party Data
If you use JOOBIX with data relating to customers, leads, employees or other individuals, you are responsible for ensuring that:
- you are authorised to use that data;
- you have an appropriate legal basis for the processing;
- the data is relevant to the intended analysis;
- unnecessary personal data is removed where possible;
- use of the data complies with applicable confidentiality, contractual and data-protection obligations.
JOOBIX’s local-processing design does not remove the user’s own legal responsibilities concerning data the user lawfully possesses and chooses to analyse.
23. Your Data-Protection Rights
Where GDPR applies, you may have the right to:
- obtain confirmation as to whether JOOBIX processes your personal data;
- access your personal data;
- request correction of inaccurate or incomplete data;
- request deletion where legally applicable;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable;
- withdraw consent at any time where processing is based on consent;
- object to direct marketing;
- exercise applicable rights relating to automated decision-making;
- lodge a complaint with a competent supervisory authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
24. Supervisory Authority
If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with the competent supervisory authority.
For JOOBIX’s establishment in Italy, the relevant authority is the:
Garante per la protezione dei dati personali
You may also have the right to contact another competent supervisory authority depending on your place of residence or the circumstances of the processing.
25. Exercising Your Rights
Privacy questions and data-protection requests may be sent to:
JOOBIX may request information reasonably necessary to verify the identity of the person making a request.
Requests will be handled in accordance with the time limits and requirements imposed by applicable law.
26. Mandatory and Optional Information
Information required to provide a requested service, purchase, licence or support function may be necessary in order for JOOBIX to perform that function.
If required information is not provided, JOOBIX may be unable to:
- respond to a request;
- validate a paid licence;
- provide product access;
- process a requested support matter.
Optional information, including marketing consent, is not required in order to use unrelated JOOBIX functionality.
27. Children
JOOBIX is a professional advertising and analytics product and is not designed or directed toward children.
JOOBIX does not knowingly seek to collect personal data from children through its ordinary product workflow.
If JOOBIX becomes aware that personal data relating to a child has been collected in circumstances where it should not have been collected, appropriate steps will be taken in accordance with applicable law.
28. Google and Other Third-Party Platforms
Google Ads and other advertising or CRM platforms are independent third-party services.
JOOBIX is an independent product and is not affiliated with, sponsored by or endorsed by Google unless expressly stated otherwise.
Using JOOBIX does not give JOOBIX access to a user’s Google Ads account unless a separate future integration is explicitly introduced and authorised by the user.
If JOOBIX later introduces API, OAuth or other direct integrations that materially change the personal-data flow, the relevant privacy information will be provided before or when that processing begins.
29. Changes to the Service
This Privacy Policy has been drafted to cover the current JOOBIX website, Free application, planned paid/Agency functionality, Business Outcomes processing, payment flow and software licensing architecture described above.
A complete rewrite should not be required merely because the paid Agency edition becomes commercially available.
However, this Privacy Policy may need to be updated if JOOBIX later materially changes how personal data is processed, for example by introducing:
- server-side storage of raw advertising or CRM files;
- direct Google Ads or CRM API integrations;
- new behavioural analytics or advertising trackers;
- materially different account or identity systems;
- AI services that receive uploaded customer data;
- a materially different payment or licensing provider;
- other new processing not reasonably covered by this Policy.
30. Changes to this Privacy Policy
JOOBIX may update this Privacy Policy where necessary to reflect changes in:
- applicable law;
- product functionality;
- security practices;
- service providers;
- processing activities.
Material changes will be reflected by updating the revision date on this page and, where required, by providing additional notice.