Privacy policy

DISSAU is responsible for Jump2bot. If you have a Jump2bot account, write to [email protected]. For anything else, write to [email protected].

• Your account: first and last name (the last name is optional), username, email and language. For your password we only store a one-way hash, never the password itself. If you turn on two-step verification, also its key and your recovery codes.
• Your sessions in the panel and the app, so you can see and close them.
• Security: the username or email typed when signing in, the IP address and whether the attempt succeeded. Also the IP address of attempts to link a phone.
• The organization’s numbers: the number, its label and color, and who it is assigned to.
• The SMS messages received by linked receiver phones: the sender, the text, and the date and time the phone received it.
• The receiver phone: model, app version, SIM slot, whether it has the SMS permission, battery level, whether Android restricts its battery, and the last time it connected.
• A log of the changes made in the organization (for example, creating a user or assigning a number), with internal identifiers of who made them.

So that the people in the organization can read their numbers’ SMS in the panel and the app; to manage accounts and permissions; to protect the service (attempt limits and the change log); to send account emails, such as the link to create or reset your password; and to alert admins when a receiver phone stops connecting or has a problem.

We do not use your data for advertising or profiling.

The app only asks for SMS permissions on a phone the organization has linked as a receiver. Reading messages in the app needs none.

• Receive SMS (RECEIVE_SMS): to pick up each SMS as soon as it arrives and upload it to the organization’s panel.
• Read SMS (READ_SMS): to check the inbox in case the notice for an SMS did not arrive. Only messages received after the phone was linked are read.
• Phone state (READ_PHONE_STATE): to know which SIM each SMS arrived on, on dual-SIM phones.

Only SMS messages that arrive on the linked SIM are uploaded. Until the server confirms it has it, each SMS is kept on the phone itself so it is not lost; then it is removed from the app. If you use your fingerprint to open the app, Android checks it: it never reaches us.

• SMS: 90 days from when they reach the server. Then they are deleted automatically.
• Sign-in and phone-linking attempts: 90 days.
• Your account: for as long as it exists. If your organization deactivates it, it is kept so it can be reactivated. If you ask us to delete it, it is deleted (see “Delete your account”).
• Numbers and receiver phones: for as long as the organization has them.
• Change log: kept, with internal identifiers, so the organization can review what happened.

We do not sell or share your data. Within your organization, admins see all SMS and each user sees only those of the numbers assigned to them.

To run the service we use DISSAU’s servers, where the data is stored; Cloudflare, which carries the traffic of the website and the API to protect it; and DISSAU’s email server. There are no ads and no third-party analytics.

DISSAU’s support team can access an organization to help it. Any changes made that way are logged.

Everything travels encrypted over HTTPS. Passwords and phone credentials are stored only as one-way hashes. An admin can unlink a receiver phone from the panel, and everyone can close their open sessions.

You can ask for a copy of your data, have it corrected or have it deleted by writing to [email protected] from your account’s email. We reply within 30 days. Your admin can also correct your name and email from the panel.

Jump2bot is a service for businesses and is not aimed at minors.

If we change this policy, we will publish the new version here with its date.