Privacy Policy

Last updated August 16, 2026

JAST (“JAST,” “we,” “us,” or “our”) builds a cross-platform text-expansion and productivity utility for Windows and macOS. This Privacy Policy explains what personal information we collect through jastapp.com and JAST's account, licensing, and payment systems (together, the “Services”), why we collect it, who we share it with, and the choices and rights you have over it.

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Services.

  • We only ask for your email address, and only when you sign up or make a purchase.
  • We never sell or share your personal information.
  • No ad trackers, no analytics cookies, no retargeting, no Facebook Pixel.
  • Payments are handled by a third-party payment processor — we never see your full card number.
  • JAST's keyboard monitoring never logs, stores, or transmits anything you type.
  • JAST is not directed to children under 13.

1. Information we collect

Information you provide directly

  • Email address. Collected when you join our waitlist, sign up for product updates, or purchase a license.
  • Purchase and license information. If you buy a license, we receive limited transaction details from our payment processor, such as the plan purchased, the amount charged, and whether the charge is one-time or recurring. We do not receive or store your full card number, CVV, or billing address ourselves — see “Payments and license activation” below.
  • Messages you send us. If you contact us through our Contact page, we receive whatever you include in that message.

Information collected automatically

  • Hashed IP address. When you submit our waitlist or sign-up form, we derive a salted, one-way hash of your IP address, used solely to limit how many signups a single connection can submit in a short window. We do not store or have access to the plaintext address, and the hash cannot practically be reversed to recover it.
  • Standard technical logs. Our hosting infrastructure keeps ordinary web server logs (such as request timestamps and response codes) for operating and securing the Services, in the same way most infrastructure providers do by default.

Information we intentionally do not collect

We do not request or collect your device's geolocation, contacts, camera, or photo library. We do not offer or use social media login (Facebook, Google, GitHub, or similar). We do not use advertising identifiers, and, as described below, we do not run analytics or tracking scripts of any kind on jastapp.com.

2. How the JAST desktop application handles what you type

JAST's core feature requires operating-system-level permissions to work in any application — on Windows, a low-level keyboard hook; on macOS, Accessibility and Input Monitoring permissions. This is the same category of access a keylogger has, and we treat it accordingly.

  • We never log, store, or transmit the content of anything you type. Not to us, not to any third party, not in a crash report, not at any diagnostic level.
  • Keystrokes are held only in a small, bounded, in-memory buffer used to detect the trigger phrases you configure. That buffer is cleared on a focus change, on expansion, on timeout, and on any non-text key, and it never leaves your device.
  • JAST detects secure input contexts (such as password fields) and suspends buffering rather than reading them.
  • Your snippets, placeholders, macros, and settings are stored locally, in a database on your device. We do not have access to them unless a future, optional sync feature is introduced — and if it is, this Policy will be updated before that feature is enabled.
  • JAST's optional Clipboard History feature stores what you copy locally on your device so you can find and reuse it. This data is never transmitted to us and can be cleared at any time from within the application.

3. How we use your information

  • To operate, maintain, and secure jastapp.com and the Services.
  • To send you product updates you have asked for, such as closed-testing invitations if you joined our waitlist. We do not send newsletters or marketing email you have not asked for.
  • To process one-time and recurring payments and to deliver and support your license.
  • To respond to messages you send us through our Contact page.
  • To detect and prevent fraud and abuse, such as rate-limiting repeated signups from the same connection.
  • To comply with our legal, tax, and accounting obligations.

We do not use your information for interest-based advertising, and we do not build advertising profiles or make decisions that produce legal or similarly significant effects using automated processing.

4. Cookies, analytics, and advertising

We do not use any of the following on jastapp.com:

  • Digital analytics or traffic-tracking software (such as Google Analytics)
  • Advertising, or advertising networks of any kind
  • The Facebook Pixel or any comparable conversion-tracking pixel
  • Retargeting for advertising purposes
  • Advertising or tracking cookies, web beacons, or comparable tracking technologies

Because we do not track visitors across sites or over time, our servers do not currently respond differently to a “Do Not Track” browser signal — there is no tracking to disable. If that ever changes, this Policy will be updated to explain how we respond, and we will update the “Last updated” date above accordingly.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with:

  • Service providers who process it on our behalf and under our instructions, such as our payment processor, our transactional email provider (used only to notify us of new signups and, where applicable, to communicate with you about your account or license), and our cloud hosting and database providers.
  • Legal and safety reasons, if required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of JAST, our users, or others.
  • Business transfers, if we are involved in a merger, acquisition, or sale of assets, in which case we will provide notice before personal information becomes subject to a different privacy policy.

6. Payments and license activation

JAST offers both a one-time license purchase and a recurring subscription plan. Whichever you choose, payment card details are collected and processed directly by a third-party payment processor, not by us. We do not receive, transmit, or store your full card number, expiration date, CVV, or billing address; we receive only what is necessary to confirm your purchase and provision your license.

A JAST license may be activated on a limited number of devices (currently two). To enforce that limit, we keep an activation record associated with your license (for example, a device identifier and activation or deactivation timestamps). This record is used only to administer your license and provide support.

7. Data retention

We retain personal information only for as long as necessary for the purposes described in this Policy. Waitlist and sign-up email addresses are kept until you ask us to delete them, until they are no longer needed for the purpose they were collected for, or as required by law. Payment and license records are kept for as long as needed to support your license and to meet our financial recordkeeping obligations. Hashed IP addresses are kept only as long as needed for abuse prevention.

8. Data security

We use reasonable technical and organizational measures to protect personal information, including encrypting data in transit and limiting access to personnel and service providers who need it to do their jobs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

The Services are not directed to, and are not offered to, children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 16 (or the age of consent that applies where you live), please do not use the Services or provide us with personal information without your parent or guardian's involvement. If we learn we have collected personal information from a child in a way that is not permitted by law, we will delete it. If you believe a child has provided us with personal information, please contact us using the details below.

10. Your privacy rights

If you are in the European Economic Area, the UK, or Switzerland (GDPR)

We process your personal information on the following legal bases:

  • Consent, for waitlist signups and product update messages you have asked for.
  • Contract, to process your payment and provide the license you purchased.
  • Legitimate interests, to secure our systems and prevent fraud and abuse (such as our rate-limiting of repeated signups).
  • Legal obligation, for recordkeeping we are required to perform.

Subject to applicable limitations, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request erasure of your personal information
  • Restrict or object to certain processing
  • Receive a portable copy of your information
  • Withdraw consent at any time, without affecting processing that already occurred
  • Lodge a complaint with your local data protection supervisory authority

If you are a California resident (CCPA/CPRA)

In the preceding 12 months, we have collected the categories of personal information described in Section 1 above — principally identifiers (your email address) and, where you make a purchase, commercial information (your order and license details). We collect this directly from you and, for abuse prevention, automatically via a hashed IP address. We have not sold or shared (as those terms are defined under the CCPA) any personal information, and we do not use or disclose sensitive personal information beyond what is necessary to provide the Services.

Subject to applicable limitations, California residents have the right to:

  • Know what personal information we have collected, used, and disclosed
  • Delete personal information we have collected from you
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information (we do not sell or share it)
  • Non-discrimination for exercising any of these rights
  • Appeal a denial of a request
  • Designate an authorized agent to act on your behalf

Exercising your rights

To exercise any of the rights above, contact us using the details in “Contact us” below. We may need to verify your identity, typically by confirming the email address associated with your request, before acting on it, and we will respond within the timeframe required by applicable law.

11. International data transfers

Our service providers, including our hosting, database, payment, and email-delivery providers, may process personal information in the United States or other countries outside your own. Where required by applicable law, we rely on appropriate safeguards, such as standard contractual clauses, to protect personal information transferred internationally.

12. Third-party links

The Services may link to third-party websites we do not operate. This Policy does not apply to those sites, and we encourage you to review their own privacy policies before providing them with any information.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and for material changes we may provide additional notice, such as a notice on jastapp.com. We encourage you to review this page periodically.

14. Contact us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, please visit our Contact page.