What we crawl
Jakka-bot crawls only the pages of the domains you have added as projects. The user agent identifies itself as Jakka-bot/1.0 ( https://jakka.ai/bot ). We respect robots.txt and crawl-delay by default; you can override only on verified domains you own.
What we store
Page content: text, structured data, screenshots, and DOM snapshots are stored in object storage during the retention window.
Test results: issue records, scores, and history are stored in our application database.
Brand Kit and Project Brief: as you enter them, plus any documents you attach.
Credentials: HTTP Basic Auth credentials for password-protected crawls, Jira API tokens, and any other connector secrets are encrypted with AES-256 at rest. They are never logged or exposed in reports.
Where we run
Jakka runs on AWS. Data residency is selectable per project; supported regions today include US and EU. AI inference uses AWS Bedrock with Anthropic Claude models. Customer data is not used to train Anthropic's or Jakka's models.
Retention
Retention depends on your plan. Lower tiers retain history for 30 days. Pro retains up to 90 days. Agency retains up to 180 days. Enterprise can be configured up to 365 days or longer. Deleting a project permanently removes its crawl artifacts and history.
Audit logs
Every sensitive action (sign-in, role changes, project creation or deletion, API key creation or revocation, billing changes) is logged. Audit log retention is plan-dependent. Owners and Admins can export the log from Org > Settings > Data & Privacy.
GDPR, CCPA, and privacy requests
You can request access, export, or deletion of personal data through Org > Settings > Data & Privacy. Owner or Admin role required. Most requests complete within 30 days. For data subject requests on behalf of clients, contact support with details.
Export your data
Owner or Admin can request a full org export from Data & Privacy. Jakka generates a ZIP of CSVs with your projects, runs, issues, pages, and assets metadata, plus a JSON manifest. The download link is valid for 48 hours.
Report a security issue
Email [email protected] with details. We acknowledge within 24 hours and aim to resolve confirmed issues within 30 days depending on severity.