Privacy Policy
How we handle the data of interview participants, clients and visitors of this website.
This policy explains how Jara Service Group LLC handles personal data in the Selfware products Prima, Narratia and Sitekeeper — in the apps, interviews, client panel, Telegram bot and on their websites.
1. Who we are and how to contact us
Jara Service Group LLC (Delaware, USA), c/o Republic Registered Agent LLC, 262 Chapman Rd, Suite 240, Newark, DE 19702, USA. E-mail: support@selfwarehq.com. Phone: +1 213 306 4100.
2. Two roles: when we decide, and when we work for our client
- We are the controller (responsable) for: our customers' accounts and orders, payments and invoices, support messages, the Prima brief interview, the Narratia website, the conversation with the interviewer on the Narratia homepage and the “Break me if you can” game, and the Sitekeeper account of the person who manages a site.
- We are a processor (encargado) for our business clients when we process: answers of participants in a client's Narratia study; data of guests who book through a client's site; personal data in a client's site content. In these cases the client decides why and how the data is used, its own privacy notice applies, and we follow the client's instructions under our Data Processing Agreement. If you are such a participant or guest, you can contact the client or us; we will pass your request to the client.
3. What we collect, why, and on what basis
3.1 Customers of all three products
| Data | Purpose | Basis |
|---|---|---|
| E-mail, name, company, country, whether you buy as a business or an individual, tax ID (optional for individuals) | Take your order, prepare payment and invoice, provide and administer the service, contact you about it | Performance of the contract; legal obligations (tax and accounting) |
| Payment status and amounts (Stripe processes card data; we do not receive full card numbers) | Billing, refunds, fraud prevention | Contract; legal obligations |
| Your acceptance of the Terms (version, time, language) | Proof of the contract | Contract; legitimate interest in proving it |
| Messages to support | Answer you | Contract; legitimate interest |
3.2 Prima
| Data | Purpose | Basis |
|---|---|---|
| Your typed answers in the brief interview about your business, customers, goals and design wishes; the brief you confirm; the preview and the video review we make from it; the record of your choices on the consent screen. Audio is not recorded | Prepare your brief, a proposal and a first version of your website; if you do not buy, reuse the design and structure (never your content) for other clients | Your consent, given on the consent screen before the interview |
| Materials you send us for the project (texts, photos, logos) | Make your brand and website | Contract |
3.3 Narratia
| Data | Purpose | Basis |
|---|---|---|
| Client panel: your e-mail (sign-in link), organization name, the studies you create (brief, plan, settings), balance and payments | Provide the client panel and the studies you order | Contract |
| Participants of studies run by the Selfware team: answers in writing, and if you answer by voice the recording and its transcript; your summary and corrections; your acceptance of the participant notice | Conduct the interview and prepare the analysis for the stated study | Your consent, given in the participant notice |
| Participants of studies ordered by a client in the client panel | As stated in that study's notice | We act as the client's processor (section 2) |
| Conversation with the interviewer on the Narratia homepage: the topic you choose, your messages, the interviewer's replies, the short summary shown at the end and the time; a keyed hash of the day and your IP address to limit conversations per device. We do not ask for your name or e-mail | Run the conversation and show you its summary, answer questions about it, test and improve the Narratia interviewer | Your consent when you accept the Terms and this policy before the conversation starts |
| Game “Break me if you can”: your game messages, the replies, the verdict and the time; a keyed hash of the day and your IP address to limit games; if you claim a prize, your e-mail is used only to send the code and a hash of it is kept | Run and judge the game, deliver the prize, improve the Narratia interviewer | Your consent when you accept the game rules |
Conversation with the interviewer on the Narratia homepage. The free conversation on the Narratia homepage lets you talk to the Narratia interviewer in a text chat about a topic you choose, without signing up, for up to 15 minutes. Before it starts, you accept the Terms and this policy and confirm you are at least 18. We do not keep your IP address itself, only a keyed hash of it and the day. These messages are not used for marketing and are not shown publicly; OpenAI processes them as described in section 4. The records are kept for up to 12 months and then deleted, together with the interviewer's copy; to have a conversation deleted earlier, write to support@selfwarehq.com. Please do not write personal details about anyone else in the conversation.
3.4 Sitekeeper
| Data | Purpose | Basis |
|---|---|---|
| Your Telegram account data that Telegram passes to the bot (user ID, first name, username, language), time zone and settings | Identify you, run the bot and the app | Contract |
| Access to your site (API keys, application passwords, repository access) and calendar connections — stored encrypted | Make the changes you ask for, show availability for bookings | Contract |
| What you write or say to the assistant; voice messages are transcribed to text and the audio is not kept after transcription; photos you send; the log of each change (“before” and “after”) and of what you confirmed | Carry out and undo your changes; support; security | Contract; legitimate interest in security and in being able to undo changes |
| Studio requests (description, price, status) | Quote and do studio work | Contract |
| Bookings on your site: guest name, e-mail, note, language, time zone, appointment | Provide bookings for your site | We act as your processor (section 2) |
3.5 Websites
Our websites count visits with Umami, which we run on our own server in Helsinki, Finland. It does not set cookies or follow you across sites. Our web servers keep access logs, which include IP addresses, for security. We do not show advertising and do not use advertising cookies.
4. Artificial intelligence
4.1 Our products use AI models from OpenAI, through a ChatGPT subscription, to conduct interviews, analyse answers, write texts and code, and prepare site edits; and voice services from ElevenLabs for speech recognition and synthetic voice.
4.2 We do not train our own AI models on your data, your participants' answers or your site content. To carry out each task we send the content it needs to OpenAI and, for voice, to ElevenLabs. Under the terms of the ChatGPT subscription we use, OpenAI may use the content it receives to improve its models unless that use is turned off in the account settings; ElevenLabs' terms also allow it to use content to train its models unless the account opts out. Please do not share passwords, card numbers, health or other sensitive information.
4.3 AI output may contain mistakes. You can always ask a person on our team to review something that matters to you by writing to support@selfwarehq.com. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.
5. How long we keep data
| Data | Period |
|---|---|
| Prima brief interview and brief, if we have not yet shown you a site | 6 months after the last activity, then deleted. The record of your choices on the consent screen is kept 12 more months, without your answers or contact details |
| Prima preview, review video, brief and project materials, if you have not bought yet | Kept while your order is open. We do not close an order or delete these because you are silent. We delete your content (your texts, photos, any logo or brand material you gave us, your name and data, and what you told us in the brief) when you decline, or when you ask us to (write to support@selfwarehq.com). If you have not bought, we may reuse the design, page structure and the logo we made, reworked for other clients; they never contain your content, name, wordmark text or data |
| Prima brief and project materials, if you become a client | While we provide the service, and then as long as the law requires |
| Narratia participants' answers, recordings and transcripts | For the duration of the study and up to 12 months after it ends, unless deleted earlier on request; deleted at once if a participant withdraws |
| Narratia game records | Up to 12 months |
| Narratia homepage conversations with the interviewer | Up to 12 months, then deleted together with the interviewer's copy |
| Sitekeeper site credentials | Until you disconnect the site or close your account |
| Sitekeeper photos in our media relay | 30 days |
| Sitekeeper guest bookings | 24 months after the appointment date |
| Orders, payments and invoices | As long as tax and accounting law requires |
| Other account data, change logs and support messages | While your account is open, and then up to 12 months |
| Technical database copies before software updates | Up to 30 days |
6. Who receives your data
6.1 Our providers, only to run our products: Hetzner Online GmbH (servers in Helsinki, Finland); OpenAI OpCo, LLC (AI models); Eleven Labs Inc. (speech recognition and voice); Plus Five Five, Inc. — Resend (e-mail delivery); Stripe, LLC (payments); Cloudflare, Inc. (DNS and e-mail routing, file storage for some sites); and GitHub, Inc. (code and content of sites kept in Git). The current list is in Annex 3 of our Data Processing Agreement.
6.2 Our clients, for data we process on their behalf (section 2) — for example, the organization that ordered a Narratia study sees its participants' answers, quotes and the analysis.
6.3 Telegram handles messages you send to our bot as an independent service under its own privacy policy.
6.4 Authorities, where the law requires it.
6.5 We do not sell personal data and do not share it for targeted advertising.
7. International transfers
Our company is in the United States and our servers are in Finland. Some providers process data in the United States and other countries. When you use our products from Latin America, your data is therefore transferred abroad. We protect it with contracts that require our providers to keep it confidential and secure and to use it only for our products, and, where your law requires it, with the standard clauses or contracts that law provides. Where required, we ask for your consent to the transfer.
8. Security
We encrypt traffic, store site credentials and calendar tokens encrypted, limit access to the people and systems that need it, and allow access to our servers only with keys. No system is completely secure; if an incident affects your data, we will inform you and the authorities as the law requires.
9. Your rights
9.1 You can ask us for access to your data, its correction, deletion, portability, to object to or restrict its use, and to withdraw consent at any time (this does not undo what was lawfully done before). Write to support@selfwarehq.com. We answer within the period your law sets, and free of charge. We may need to confirm your identity.
9.2 If we process your data on behalf of a client (section 2), we will pass your request to that client and help them answer it.
9.3 Country-specific information — see section 10.
10. Country-specific information
Chile. From 1 December 2026, Law 21.719 applies to us when we offer our products to people in Chile. You have the rights of access, rectification, deletion (supresión), objection, portability and blocking (bloqueo). We acknowledge your request on receipt and answer in writing within 30 calendar days (extendable once by 30 days). You can complain to the Agencia de Protección de Datos Personales. Your data is transferred to the United States and to Finland (European Union); the Agencia has not yet published its list of countries with an adequate level of protection, so we rely on contractual safeguards and, where the transfer is needed for your contract, on that contract. Contact channel for people in Chile: support@selfwarehq.com.
Mexico. This section and the rest of this policy are our privacy notice (aviso de privacidad) under the Federal Law on the Protection of Personal Data Held by Private Parties (2025). We do not collect sensitive data, and we use your data only for the purposes in section 3, all of which are needed for the service you asked for; we have no secondary purposes such as advertising. You can exercise your ARCO rights (access, rectification, cancellation, objection), withdraw consent or limit the use of your data by writing to support@selfwarehq.com with your name and the right you want to exercise (we may ask you to confirm your identity); we answer within 20 days and act within 15 days after that, free of charge. We tell you about changes to this notice on this page and by e-mail. The authority is the Secretaría Anticorrupción y Buen Gobierno.
Colombia. This policy is our policy for the processing of personal data (política de tratamiento) under Law 1581 of 2012 and Decree 1074 of 2015. Responsible party: Jara Service Group LLC, address in section 1, support@selfwarehq.com, phone +1 213 306 4100; requests are handled by our support team. You have the right to know, update and rectify your data; to ask for proof of your authorization; to be informed how your data is used; to revoke your authorization and ask for deletion; to access your data free of charge; and to complain to the Superintendencia de Industria y Comercio after first contacting us. Answers to inquiries (consultas) and claims (reclamos) are given within the periods of articles 14 and 15 of Law 1581. By accepting this policy you authorize the transfer of your data to the United States and Finland for the purposes in section 3. This policy is in force from the date at the top; databases are kept for the periods in section 5.
Argentina. You have the rights of access, rectification and deletion under Law 25.326; write to support@selfwarehq.com. LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales. Finland, as a member of the European Union, is considered to have an adequate level of protection by the Argentine authority; transfers to the United States are made with your consent or under the model contractual clauses approved by that authority.
Brazil. We do not target our products at people in Brazil. If the Brazilian General Data Protection Law (Law 13.709/2018) applies to your data, you can exercise the rights it gives you by writing to support@selfwarehq.com.
United States. We do not sell personal information and do not share it for cross-context behavioral advertising. We currently do not meet the thresholds of the California Consumer Privacy Act, but we will answer requests from residents of any U.S. state about their data in the same way as described in section 9.
11. Children
Our products are not intended for people under 18, and we do not knowingly collect their data.
12. Changes
We will publish any change on this page with a new version and date, and tell customers by e-mail or in the app before a significant change takes effect.