Last updated: 10 October 2026.
Who is responsible
Jaws Deploy AS, organisation number 933 925 935, Grenseveien 10, 1406 Ski, Norway, is the controller for data used to operate our website, manage accounts and customer relationships, handle billing and support, and measure marketing. Contact admin@jawsdeploy.net about this notice or your privacy rights.
This notice covers www.jawsdeploy.net and app.jawsdeploy.net. Customers determine the purposes of personal data they put in deployment content. We process that data on their behalf under our Data Processing Agreement. Contact your organisation about data it controls.
Data we collect and why
- Accounts: contact and identity information supplied at registration or by an administrator, authentication identifiers, organisation details and memberships, to provide and secure the service.
- Billing: customer and invoice details, subscription information and payment status, to manage subscriptions, collect payment and meet accounting obligations. Stripe processes payments.
- Enquiries and support: email addresses, messages, chat history and information you share, to answer requests and provide support. The contact form also passes your requesting IP address to our team.
- Service and security: IP addresses, browser and device details, access and authentication logs, and activity needed to operate, troubleshoot and protect the service. Deployment content may contain personal data provided by your organisation.
- Optional analytics and advertising: cookie identifiers, browser and device details, pages visited, campaign parameters, CTA clicks and events such as signup, first completed deployment and subscription start, to measure product use and campaign results. Events are designed to exclude names and email addresses and mask invitation codes.
We rely on contract where processing is needed to provide a service to you, legal obligation for required accounting records, and legitimate interests for business enquiries, customer administration, support and security where appropriate. Our interests are responding to requests, operating the business and preventing abuse. Optional analytics and advertising use consent. Data needed to create an account, process a payment or answer a message is necessary for those requests. Analytics consent is optional.
Cookies and your choices
Google Analytics and Google Ads tags load after you enable the relevant category in the cookie banner. Accept or reject analytics, advertising and Support chat separately and change your choice using Cookie settings. Withdrawal does not affect processing already lawfully carried out.
The jaws_consent cookie remembers your choice for 182 days and is shared across our production subdomains. Google Analytics cookies (_ga and _ga_*) may last up to two years, and Google Ads cookies (_gcl_*) up to 90 days, subject to configuration and browser restrictions. Cookie lifetimes differ from server-side retention.
We use Google Analytics to measure visits and events and Google Ads to measure campaign results. Google processes browser information when these services are enabled.
On the marketing website, Crisp loads automatically when you enable Support chat in Cookie settings. Your saved choice applies on subsequent pages. If you decline, you can still open chat on demand using Chat with us. Opening chat contacts Crisp and can set session cookies needed to maintain the requested conversation. Withdrawing Support chat consent stops automatic loading on the marketing website, clears its browser cookies and reloads the page. In the app, Crisp currently loads automatically on page load and displays its own chat bubble. See Crisp's cookie policy. Authentication and other technical cookies support signed-in sessions and security. Google reCAPTCHA protects the contact form and processes browser, device and network information under Google's Privacy Policy.
Who receives data
Our authorised team and service providers receive information needed for their work. Providers include Contabo for hosting, Microsoft Azure for storage, Logto for authentication, Stripe for payments, Mailgun for email, Crisp for chat, Better Stack for monitoring, and Google for reCAPTCHA and consented analytics or advertising. Some providers also process data for their own purposes under their privacy notices. We may disclose data to professional advisers or authorities where necessary for legal obligations or legal claims.
Our cookie banner is self-hosted using CookieConsent, without Cookiebot's hosted service.
Hosting and international transfers
Jaws Deploy Cloud hosting is in Düsseldorf, Germany. Package storage uses Microsoft Azure in Germany West Central and Germany North. Our Trust & Security page identifies EU regions for Better Stack, Mailgun and Logto, and Crisp in France. It identifies Google reCAPTCHA as a US provider. Google Analytics, Google Ads and Stripe may also involve international processing or access. Core EU hosting does not mean every external service processes all data only in the EEA.
For Google Analytics and Google Ads, we use Google's applicable standard data-protection terms. Google relies on the EU-US Data Privacy Framework for eligible transfers to the United States and Standard Contractual Clauses where applicable; see Google's international-transfer information. Stripe's standard Data Processing Agreement and Data Transfers Addendum form part of our Stripe Services Agreement and provide for the Data Privacy Framework and Standard Contractual Clauses where applicable. You can read the linked terms or contact admin@jawsdeploy.net for information or a copy of applicable safeguards.
How long we keep data
- Account and service data, including authentication records and backup copies: during the service relationship and up to 90 days after closure, except records retained for separate purposes below.
- Security, login and server logs: one year.
- Email enquiries and support correspondence: messages are currently retained without a fixed deletion schedule and are not automatically deleted. Contact admin@jawsdeploy.net to request deletion, subject to applicable exceptions.
- Crisp support conversations: conversations are currently retained without a fixed deletion schedule and are not automatically deleted. Limited visible history does not mean deletion. Contact admin@jawsdeploy.net to request deletion, subject to applicable exceptions.
- Invoices and billing records: five years to meet accounting obligations. Specific records may be retained longer where a separate applicable legal obligation or legal claim requires it.
- Google Analytics: event-data retention is set to two months and user-data retention to 14 months. Reset on new user activity is enabled, so new activity renews the user-identifier retention period. These settings do not apply to standard aggregated reports.
Specific correspondence documenting contracts or important customer decisions may be kept while necessary to administer the customer relationship or establish, exercise or defend a legal claim. Accounting records follow the separate schedule above. Any exception to routine deletion must have a documented purpose and an expiry or review date.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability. You can object to processing based on legitimate interests and to direct marketing. Withdraw analytics or advertising consent through Cookie settings or contact us about other consent. We may request proportionate information to verify your identity.
Email admin@jawsdeploy.net with requests. You can complain to Norway's supervisory authority, Datatilsynet, or the supervisory authority where you live or work in the EEA.
Changes
We update this page when practices change and show the revision date above. Where required, we notify you of material changes or request fresh consent.