Privacy, plainly

This policy covers the PopJar marketing website at getpopjar.com, run by Automate AI. The PopJar app at app.getpopjar.com has its own policy inside the app. We wrote this in plain English on purpose, and it describes what this site actually does, not what a template says.

What we collect, and when

If you do nothing: our servers see the basics any website sees when a page loads: your rough location (country, region, city, from your network address), your browser and device type, and the page you asked for. We use this for security, to filter bots, and to count visits. We do not build a profile of you, and we respect the Do-Not-Track signal: if your browser sends it, we treat it as a standing no.

If you accept analytics in the cookie banner:we set one first-party cookie with a random visitor ID. It lets us see things like which page brought you here, what you clicked, how far you scrolled, and whether you came from an ad, a search, or an AI assistant. We record where your visit came from (the referring site and any campaign tags in the link) the first time you arrive and on later visits. This data goes to our own analytics store, not to an ad network’s tracker.

If you decline: no analytics cookie is set, and events carry no identity. The site works exactly the same. Saying no costs you nothing.

If you give us your email or phone: we only get them when you type them and tick the consent box. We store them with the consent choice, the date, and where on the site you signed up, so we can honor exactly what you agreed to. Emails go through SendGrid to send you what you asked for. Unsubscribing is one click. Text messages happen only if you separately and explicitly say yes to texts, and you can stop them by replying STOP.

What we do not do

• No selling your data. Not to anyone, not ever.
• No hidden device fingerprinting to track you after you said no.
• No recording what you type, beyond the forms you choose to submit.
• No buying data about you from brokers.

Where data goes

Analytics events go to our own first-party store. Leads you submit go to SendGrid (email delivery), and, when configured, to our CRM and an internal alert so a human can respond. If you arrived from an ad and accepted analytics, we may confirm the conversion to that ad platform server-side, with personal details hashed first. Each of these only happens when the matching service is set up, and each records your consent basis.

How long we keep it

Analytics events are kept for up to 24 months, then deleted or fully anonymized. Lead contact details are kept while we have a live consent basis (you have not unsubscribed or asked us to delete). Emails used for matching are stored as one-way hashes where full addresses are not needed.

Your choices and rights

You can decline or change your cookie choice any time (clear the site’s cookies and the banner returns). You can unsubscribe from any email in one click. And you can ask us to delete everything we hold about you: email privacy@getpopjar.com or use the deletion request form. We honor GDPR and CCPA requests regardless of where you live.

Questions

Email privacy@getpopjar.com. A human reads it.