Terms of Service
1. The service
DROP runner (the "Service") downloads deletion lists from the California Delete Request and Opt-out Platform ("DROP") on your behalf, matches them against identifiers you provide, uploads status files, sends notices to the service providers you name, and keeps reports and an audit trail of each cycle. Any other engineering work we do for you is covered by a separate written statement of work.
2. Your account
You must give accurate details, keep your sign-in credentials and your two-factor device private, and tell us promptly at support@jayanas.com if you believe an account has been misused. You are responsible for everyone who uses the Service under your account.
3. Your obligations stay yours
You are the registered data broker. Registration with the California Privacy Protection Agency, your DROP account and API key, the accuracy and completeness of the records you provide, the deletion of matching records in your own systems, your instructions to your service providers, and every legal duty under the Delete Act and the California Consumer Privacy Act remain your responsibility. The Service helps you carry them out and evidence that you did; it does not take them over. Nothing we provide is legal advice.
4. Our role as service provider
When you provide personal information or hashed identifiers, we act as your service provider as that term is defined in California Civil Code section 1798.140. We process that information only to provide the Service to you and for no other purpose; we do not sell or share it, combine it with information from other customers, or retain, use or disclose it outside our direct business relationship with you. We will tell you if we can no longer meet these obligations, allow you to take reasonable steps to stop and remedy unauthorised use, and make our subprocessors bind themselves to the same terms. The design-partner agreement or order form you sign contains the full service-provider terms and controls if it conflicts with this section.
5. Data and security
API keys and webhook secrets are stored encrypted. Files you upload and files we download from DROP are stored in private, encrypted object storage in the United States. Every user must use two-factor sign-in. You may choose to hash records on your own systems with the client we provide, in which case we never receive unhashed personal information. We keep cycle records, reports and the audit trail for the term of your account and for three years afterwards, or longer if you ask, because the Delete Act requires independent audits of the preceding period; you may ask us to delete them sooner.
6. Fees
Plans are billed monthly in advance at the price shown when you subscribe, plus any applicable taxes. You can cancel at any time and the cancellation takes effect at the end of the paid month. Design partners pay nothing during the free period stated in their agreement. Prices for an existing plan change only with thirty days' written notice.
7. Availability
We aim to run every cycle on time and we monitor the Service continuously, but during the design-partner period we do not promise a particular uptime. DROP itself has scheduled maintenance windows and rate limits we do not control. If we become aware that a cycle cannot be completed before its deadline we will tell you promptly so that you can act.
8. Acceptable use
You may use the Service only for your own compliance with the Delete Act. You may not resell it, probe or disrupt it, upload information you have no right to process, or use it to process information about consumers who are not the subject of your broker activities.
9. Intellectual property and feedback
We own the Service and everything in it except your data. You own your data and the reports produced from it. Feedback you give us may be used to improve the Service without any obligation to you.
10. Liability
To the fullest extent permitted by law, our total liability for any claim connected with the Service is limited to the fees you paid us in the twelve months before the claim arose, and neither party is liable for indirect, consequential or punitive damages or for regulatory fines. Nothing in these terms limits liability for fraud or for anything that cannot be limited by law.
11. Termination
Either party may end the account with thirty days' written notice. We may suspend the Service immediately if it is being misused or if fees are unpaid after notice. On termination we will provide an export of your reports and audit trail and then delete your data according to section 5.
12. General
These terms are governed by the laws of the State of Nebraska, and the state and federal courts in Sarpy County, Nebraska have exclusive jurisdiction. If we change these terms we will give you thirty days' notice by email; continued use after that date is acceptance. If any part is unenforceable the rest still applies. Questions go to support@jayanas.com.