Privacy policy

1.Who is responsible for your data

For the personal data described in this policy, Jellystack Software Ltd is the controller. You can contact us by email at sales@jellystacksoftware.com or through the contact form.

When you use NexusRMM to manage your own clients’ devices and records, the situation is different. You decide what goes into your workspace, so you are the controller of your clients’ and their staff’s data, and we are your processor, handling it only on your instructions. See “Data you put into the platform” below.

2.What we collect on this website

If you send us a message or ask for a demo, we collect the details you type: your name, work email, company, roughly how many devices you manage, and your message. We also record the page you sent it from, your IP address and your browser’s user-agent, which we use to stop abuse and spam.

This website does not use advertising or analytics cookies, and we do not embed third-party trackers.

3.What we collect when you use the platform

Account details: your name, email address, role and a salted hash of your password, and the settings for two-step sign-in.

Usage and security records: sign-in times, the actions you take (kept in the audit log), and technical logs used to run, secure and fix the service.

Billing details, once billing is switched on, are handled for us by our payment provider.

4.Data you put into the platform

NexusRMM collects information from devices you enrol, such as the device name, hardware and operating system details, installed software, health readings, security status and event logs, and from the tickets, contacts, contracts and invoices you create. This may include personal data about your clients and their staff.

We process that data to provide the service to you. We do not use it for our own purposes, sell it, or use it for advertising. You are responsible for having a lawful basis and the authority to manage those devices and to share that data with us.

5.Why we use personal data, and our legal basis

To reply to your enquiry and to take steps you ask for before entering a contract: this is our legitimate interest in answering you, and your request.

To provide, secure and support the platform: this is performance of our contract with you, and our legitimate interest in keeping the service safe.

To prevent abuse and fraud, and to keep records we are required to keep: legitimate interests and legal obligation.

We will ask for your consent before using your details for anything not covered above.

6.Who we share it with

We use a small number of suppliers to run the service, such as our hosting provider and email delivery. They process data only on our instructions. We do not sell personal data.

We will disclose data if the law requires it, or to protect our rights or the safety of others.

7.Where it is stored

The platform is hosted on servers in the United Kingdom. If a supplier ever processes data outside the UK, we will make sure an appropriate safeguard is in place.

8.How long we keep it

We keep enquiries only for as long as we need to deal with them and for a reasonable period afterwards. Workspace data is kept while your account is active. When a workspace is deleted, its data is removed from the live service, and from backups as they roll over.

9.Security

We protect personal data with measures that include encrypted connections, hashed passwords, optional two-step sign-in, isolation between customers’ workspaces and audit logging. The security page describes them in more detail. No system is perfectly secure, and we will tell you if a breach affects you, as the law requires.

10.Your rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can also complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we have handled your data.

To exercise a right, contact us by email at sales@jellystacksoftware.com or through the contact form. If your data is in a workspace run by one of our customers, please contact that customer, who controls it; we will help them respond.

11.Changes to this policy

We may update this policy. The date at the top of the page shows when it last changed. Material changes will be flagged to customers.