Skip to content

Legal

Privacy Policy

Last updated: September 19, 2026

1. Who We Are

Jfali ("we", "us", "our") operates a software-as-a-service platform for clinics and service businesses. This Privacy Policy explains how we collect, use, and protect personal data when you interact with our marketing website and platform. Our registered address is jfali.com. For data-related enquiries, contact us at support@jfali.com.

2. Personal Data We Collect

2.1 Via this marketing website

  • Name, email address, phone number, and business name submitted via our enquiry form;
  • IP address and browser user-agent (collected automatically for spam detection);
  • Cookies necessary for form submission and security.

2.2 Via the platform (Client accounts)

When we set up a Client account, we collect the clinic name, administrator name, and email address. Within the platform, Clients collect their own patients' data. We act as a data processor for that data; the Client is the data controller.

  • Google User Data: If you connect your Google Ads account to the platform, we collect your Google Ads account ID, campaign structures, performance metrics, and configuration data via the Google Ads API.

3. How We Use Your Data

  • Enquiry form submissions — to respond to your enquiry and, if relevant, set up a trial account;
  • Client account data — to provide, maintain, and improve the Service;
  • IP address / user-agent — to detect and prevent spam and abuse (we do not use this for advertising);
  • Communication — to send service-related emails (onboarding, notifications, billing).

3a. Google API Data Usage and Limited Use Disclosure

Jfali's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use data obtained through the Google Ads API strictly to provide, maintain, and optimize features within your platform dashboard (such as campaign tracking, performance reporting, and ad management tools). We do not share, sell, or transfer this Google API data to third-party advertising platforms, data brokers, or any external entities.

4. Legal Basis for Processing

  • Enquiry form — legitimate interests (responding to a business enquiry);
  • Client accounts — performance of a contract;
  • Security / spam signals — legitimate interests (protecting the platform from abuse).

5. Data Retention

  • Marketing enquiries are retained for 2 years, or until you ask us to delete them;
  • Client account data is retained for the duration of the subscription and deleted within 90 days of cancellation, unless we are required by law to retain it longer;
  • Platform activity logs and audit records are retained for 12 months.

6. Data Sharing

We do not sell your personal data. We do not share any data obtained via the Google Ads API with external third parties. We may share other platform data with:

  • Email service providers — to send transactional emails. They process data only on our instruction;
  • Legal authorities — where required by law.

7. Your Rights

  • Access your personal data;
  • Correct inaccurate data;
  • Request deletion ("right to be forgotten");
  • Object to processing or request restriction;
  • Data portability (where applicable);

To exercise these rights, contact us at support@jfali.com. We will respond within 30 days.

8. Security

We implement technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted session storage, rate limiting on form submissions, and access controls limiting who can view submitted data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify Clients via email. The "last updated" date at the top of this page will always reflect the most recent revision.

10. Contact Us

For any data protection queries, contact: Support at support@jfali.com or via our contact form.