Jakka, Inc. (“Jakka,” “we,” “us,” or “our”) respects privacy and is committed to responsible, transparent and secure processing of Personal Data. Jakka provides an AI-powered requirements-to-release website acceptance and delivery-assurance platform. Jakka helps organizations determine whether the right website has been delivered according to approved project requirements, including briefs, content, business information, brand requirements, guidelines and functional expectations.

This Privacy Policy applies to Personal Data processed through jakka.ai, app.jakka.ai, Jakka accounts, organizations and projects, website acceptance and quality-assessment workflows, free scans, migration validation, monitoring, AI-powered functionality, reports, APIs, webhooks, MCP functionality, integrations, customer support, the Jakka Chrome extension, sales and business communications, and other Jakka Services that link to this Policy.

Depending on the circumstances, Jakka may act as controller/business or processor/service provider. Jakka generally acts as controller for account administration, subscriptions, billing administration, website visitors, sales prospects, security, abuse prevention, customer support and its own business operations. Where a customer submits Personal Data for a customer-directed website acceptance, migration, monitoring or similar workflow, the customer generally acts as controller/business and Jakka acts as processor/service provider, subject to the applicable Data Processing Addendum.

We may collect names, business email addresses, telephone numbers, job titles, organizations, account identifiers, authentication information, user roles, organization membership, permissions, preferences, subscription details, billing contacts, billing addresses, transaction status, invoices and tax information. Payment-card information may be processed directly by our payment provider rather than stored by Jakka.

Jakka may process project briefs, client briefs, approved content, sitemaps, business information, brand kits, logos, images, asset references, design requirements, client or partner guidelines, terminology rules, mandatory content, CMS instructions, functional requirements, form requirements, customer journeys, migration-source information, uploaded files and other acceptance criteria. Customers are responsible for ensuring they have appropriate authority and lawful grounds to provide Customer Content to Jakka.

When an authorized website is submitted to Jakka, the Services may process URLs, pages, structure, headings, visible content, metadata, links, navigation, buttons, calls to action, forms, images, assets, responsive behavior, accessibility-related attributes, SEO-related information, performance information, security-configuration signals, customer journeys, rendered-page information, screenshots, technical response information and other information necessary for the requested assessment.

Jakka may generate and maintain requirement identifiers, source requirements, expected results, observed results, pass/fail or equivalent status, findings, severity, affected pages, evidence, screenshots, recommended corrections, assignments, re-test results, acceptance history, migration comparison results, monitoring results and reports.

Customers may authorize Jakka to assess staging, password-protected or otherwise restricted websites. Where necessary, Jakka may process credentials, tokens, authentication headers, session information or similar information necessary to access the authorized environment. Customers should provide the minimum access necessary and should preferably use dedicated testing or staging credentials.

Certain Jakka functionality uses artificial intelligence. AI-enabled functionality may process relevant portions of Customer Content, project requirements, website content, findings, screenshots or extracted information where applicable, and user instructions. AI may help interpret requirements, generate acceptance checks, compare expected and observed delivery, classify findings, explain issues, generate recommendations, assist with content or metadata and summarize results. AI-generated results may be inaccurate or incomplete and should receive appropriate human review. Unless expressly agreed otherwise, Jakka does not use Customer Content to train generalized third-party foundation models.

The Jakka Chrome extension allows users to initiate a Jakka assessment of the webpage they are currently viewing. When a user chooses to scan the active webpage, the extension may process the active webpage URL, browser user-agent information, language, time zone, screen resolution, a pseudonymous anti-abuse browser identifier, CAPTCHA verification information, scan identifiers, temporary session or handoff information, scan status and technical error information. The current extension does not request access to general browsing history, cookies, downloads or geolocation and does not continuously monitor browsing activity.

Jakka may generate a pseudonymous browser identifier to prevent abuse, identify automated or duplicate misuse, protect free assessments, enforce legitimate usage limits and protect infrastructure. The identifier may be derived locally from technical characteristics such as user agent, language, platform, time zone, screen characteristics, device capabilities, hardware concurrency, device memory where available, pixel ratio, canvas-derived characteristics and WebGL or graphics-renderer characteristics. Jakka does not use this identifier for personalized advertising, retargeting, unrelated cross-site tracking, creditworthiness, sale to data brokers or unrelated behavioral profiling.

The extension may use Chrome local storage for information necessary to provide its functionality, including a browser identifier, temporary session information, active scan identifiers, scan URLs, pending verification information, scan status, recent errors and unread-result indicators.

Jakka may use CAPTCHA and similar mechanisms to distinguish legitimate users from automated or abusive activity. CAPTCHA-related information may be processed by Jakka and the applicable provider for security, fraud prevention, service integrity and enforcement of legitimate usage restrictions.

We may process IP addresses, browser type, device type, operating system, timestamps, session identifiers, login activity, feature usage, application events, error logs, security events, diagnostic information and service-performance information to operate, secure, maintain and improve Jakka.

Customers may connect Jakka with third-party services. Depending on customer configuration, Jakka may transmit organization identifiers, project identifiers, URLs, findings, acceptance status, issue information, evidence references, assignments, scan events and workflow events to customer-selected destinations. Those services are governed by their own terms and privacy practices.

We may use Personal Data to provide and administer Jakka, authenticate users, create project-specific acceptance plans, assess websites, generate evidence and reports, provide recommendations, support authorized corrections, re-test corrections, compare website migrations, provide monitoring, operate the Chrome extension, APIs and integrations, prevent fraud and abuse, enforce legitimate usage limits, secure Jakka, process subscriptions, provide support, send operational communications, improve reliability, comply with law and protect legal rights.

Where applicable law requires a lawful basis, Jakka may rely on contract, legitimate interests, consent, legal obligations and the establishment, exercise or defense of legal claims. Customers acting as controllers remain responsible for establishing appropriate lawful grounds for Personal Data they instruct Jakka to process.

Jakka may allow users to submit a website URL for assessment without creating a paid account. By submitting a website, the user represents that they own, operate, manage or are otherwise authorized to assess it. Free assessments may use reasonable anti-abuse controls.

Jakka may use cookies, local storage and similar technologies for authentication, security, session management, preferences, functionality, fraud prevention, analytics and other permitted purposes. Where required by law, non-essential technologies will be subject to appropriate notice, consent or opt-out mechanisms.

Jakka may send authentication messages, security alerts, assessment notifications, completion notifications, monitoring alerts, account notices, billing messages, service announcements and support communications. Where permitted by law, Jakka may separately send marketing or product communications, from which users may opt out.

Jakka may disclose Personal Data to service providers and subprocessors supporting cloud infrastructure, storage, AI functionality, payments, customer support, communications, CAPTCHA, operational automation, analytics, logging, security and related infrastructure; to customer-directed services; in corporate transactions; or where reasonably necessary to comply with law, respond to legal process, protect users or Jakka, investigate fraud or abuse, enforce agreements or establish or defend legal claims.

Jakka does not sell Personal Data for monetary consideration. Jakka does not sell Chrome extension user data to data brokers or advertising platforms and does not use extension-derived information for personalized, retargeted or interest-based advertising. If future processing qualifies as “sale,” “sharing” or targeted advertising under an applicable privacy law, eligible individuals will be provided the legally required opt-out mechanism.

Jakka operates internationally and Personal Data may be processed outside the country where it was collected. Where legally required, Jakka uses recognized safeguards. For qualifying EEA transfers these may include the European Commission Standard Contractual Clauses; for qualifying UK restricted transfers, the UK International Data Transfer Agreement or UK Addendum; for Switzerland, appropriate adaptations under Swiss law; for Brazil, mechanisms recognized under the LGPD and applicable ANPD regulations; and for other jurisdictions, adequacy decisions, contractual safeguards, consent where appropriate or another legally recognized transfer mechanism.

Jakka retains Personal Data only as long as reasonably necessary for providing Services, maintaining applicable projects, customer-requested retention, account administration, security, fraud prevention, dispute resolution, legal obligations, accounting and legitimate business requirements. Product-data retention may vary by plan. Information deleted from active systems may temporarily remain in backups until those backups expire through the ordinary backup lifecycle.

Jakka uses technical, administrative and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, destruction and loss. No online service can guarantee absolute security. Jakka will not claim a security certification unless that certification has actually been obtained.

Depending on applicable law, individuals may have rights to know whether Personal Data is being processed, access it, obtain information about processing, correct inaccurate data, request deletion, restrict or object to processing, receive portable data, withdraw consent, opt out of certain processing, opt out of qualifying sale/sharing or targeted advertising, limit certain uses of sensitive information, appeal certain privacy decisions and lodge a complaint with a competent authority. Requests may be submitted to [email protected] or through Jakka's Privacy Choices page.

Where the GDPR applies, individuals may have rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent, and may complain to an applicable supervisory authority. Where Jakka acts as processor, requests concerning Customer Personal Data may be referred to the relevant customer/controller.

Where UK data-protection law applies, individuals may exercise applicable UK privacy rights. International transfers subject to UK restrictions will use an appropriate lawful mechanism where required.

Residents of applicable U.S. states may have rights including access/knowledge, correction, deletion, portability, opt-out of qualifying sale or sharing, opt-out of targeted advertising, limitation of certain sensitive-data processing, appeal and freedom from unlawful discrimination. Where legally applicable, Jakka will recognize qualifying universal opt-out preference signals. California consumers may also have rights under the CCPA, including the right to know, access, correct, delete, opt out of sale/sharing and limit certain uses of sensitive Personal Information.

Where Canadian privacy law applies, Jakka will process Personal Information in accordance with applicable requirements concerning accountability, identified purposes, appropriate consent, collection limitation, use/disclosure/retention limitation, accuracy, safeguards, openness, individual access and mechanisms for challenging compliance.

Where the Australian Privacy Act and Australian Privacy Principles apply, Jakka will manage Personal Information openly and transparently and provide applicable access, correction, security and cross-border safeguards. Where applicable requirements concern automated decisions significantly affecting individuals, Jakka will provide required transparency.

Where Singapore's Personal Data Protection Act applies, Jakka will comply with applicable obligations concerning notification, consent, purpose limitation, protection, retention, access/correction, accountability, international transfers and breach notification.

Where Brazil's LGPD applies, eligible individuals may exercise applicable LGPD rights. Qualifying international transfers will be handled using mechanisms recognized under applicable ANPD regulations.

Where India's Digital Personal Data Protection framework applies, Jakka will comply with applicable obligations as relevant provisions of the DPDP Act and Rules become legally operative and may update this Policy as staged provisions enter into force.

Jakka will comply with mandatory privacy requirements applicable to its processing in other jurisdictions, including requirements concerning lawful processing, transparency, data-subject rights, security, retention and international transfers.

Jakka is not designed to require highly sensitive Personal Data for ordinary website acceptance. Customers should not provide health information, biometric information, government identifiers, financial-account credentials or other specially regulated data unless necessary, lawful and appropriately authorized.

Jakka is a business-oriented Service and is not directed to children. Jakka does not knowingly solicit Personal Data from children below the applicable age of digital consent.

Jakka may use automated and AI-assisted systems to generate website findings, classifications, recommendations and acceptance information. These systems are intended to assist website-production and quality-assurance workflows rather than make decisions about an individual's legal rights, employment, credit, insurance or comparable high-impact matters. Where applicable law imposes additional transparency or rights concerning automated decision-making, Jakka will comply.

Jakka may link to or integrate with third-party services. Those providers may independently process information according to their own privacy practices.

We may update this Policy to reflect changes in Services, technology, law, subprocessors, security practices or business operations. Where required, we will provide notice of material changes.

Jakka, Inc.
8 The Green, Ste A
Dover, DE 19901
United States
Email: [email protected]
Website: jakka.ai