Privacy Policy

This Privacy Policy explains how Journ ("Journ", "we", "us") collects, uses, and protects your personal data when you use our website and services. We are committed to handling your data in line with the EU General Data Protection Regulation (GDPR).

If you have any questions, you can reach us any time at jessebosch1@icloud.com.

1. Data we collect

• Founding-member applications: your name, email address, optional Instagram handle, the journal types you make or collect, your selling experience, how many journals you have, and any message you choose to send us.
• Account data: if you create an account, your email, username, display name, and a securely hashed password. Optionally a profile photo, bio, and location.
• Listing content: photos, videos, descriptions, and details you upload when listing a journal.
• Technical data: basic, privacy-respecting usage information needed to operate and secure the site.

2. How we use your data

• To review founding-member applications and contact you about them.
• To create and manage your account and profile.
• To publish and operate the listings you choose to create.
• To communicate with you about the service and respond to enquiries.
• To keep Journ secure and prevent abuse.

3. Legal bases

Under the GDPR, we process your data on the bases of: your consent (e.g. submitting the founding-member form); the performance of a contract (operating your account and listings); and our legitimate interests in running, improving, and securing the service.

4. Sharing & processors

We do not sell your personal data. We share it only with trusted service providers who help us run Journ, acting as data processors on our behalf — for example our hosting and database providers and our email-delivery provider. These providers process data only as needed to provide their service.

5. Data retention

We keep your data only for as long as necessary for the purposes set out above, or until you ask us to delete it. Founding-member applications are kept while we evaluate and build the community; you may ask us to remove yours at any time.

6. Your rights under the GDPR

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at jessebosch1@icloud.com.

7. Cookies

We use only the cookies necessary to keep you signed in and to keep the site secure. We do not use advertising or third-party tracking cookies.

8. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you.