Legal
Privacy Policy
Last Updated: May 2026
Introduction
J0 from Corp ("we," "us," or "our") is committed to protecting the privacy of individuals who visit our websites, use our platform, or engage with our services. This privacy policy describes the categories of personal information we collect, the purposes for which we use it, how we store and protect it, the circumstances under which we disclose it, and the rights you have regarding your data.
This policy applies to all J0 from Corp websites, platforms, and services including but not limited to jofrom.io, app.jofrom.io, demo.jofrom.io, all related subdomains, mobile applications, APIs, and any other digital properties owned or operated by J0 from Corp. It also applies to information collected offline through direct engagements, phone calls, or in-person interactions conducted in connection with our services.
By accessing or using any J0 from Corp service, you acknowledge that you have read and understood this privacy policy. If you do not agree with the practices described here, you should discontinue use of our services.
1. Information We Collect
We collect information across three categories: information you provide directly, information generated through your use of our services, and information obtained from third-party sources.
1.1 Information You Provide
- Contact information: full name, email address, phone number, mailing address, company name, job title
- Account information: login credentials (username and password), profile details, role, department, organizational hierarchy data
- Communication content: messages, inquiries, feedback, support tickets, survey responses, and any attachments you send to us
- Operational data: workforce data, labor cost figures, scheduling information, headcount details, and other information provided during LaborMap diagnostics, staffing engagements, or consulting interactions
- Billing and payment information: invoicing details, purchase order numbers, and payment method information (payment processing is handled by third-party processors; we do not store full payment card numbers)
- Employment and candidate data: resumes, work history, skills assessments, interview notes, and related information submitted through our staffing services
1.2 Information Collected Automatically
- Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, language preference, and unique device identifiers
- Usage data: pages visited, features accessed, clickstream data, search queries within the platform, time spent on pages, navigation paths, and interaction patterns
- Log data: server access times, error logs, referral URLs, exit pages, and crash reports
- Location data: approximate geographic location derived from IP address
- Performance data: page load times, service response times, and application performance metrics
1.3 Information From Third-Party Sources
- Business contact information from data providers and publicly available sources used to support our staffing and outreach services
- Information from integration partners when you connect third-party tools to our platform
- Fraud prevention and identity verification data from specialized service providers
2. How We Use Your Information
We use collected information for the following purposes:
- To provide, operate, maintain, and improve our staffing services, platform, and LaborMap diagnostics
- To deliver workforce recommendations, reports, and analysis based on operational data you provide
- To create and manage your account, authenticate your identity, and maintain platform security
- To communicate with you about your account, active engagements, service updates, inquiries, and support requests
- To process transactions, generate invoices, and manage billing
- To monitor, analyze, and improve usage patterns, platform performance, and user experience
- To detect, investigate, and prevent fraud, unauthorized access, and other security incidents
- To comply with applicable laws, regulations, legal processes, and enforceable governmental requests
- To enforce our terms of service, acceptable use policies, and other contractual obligations
- To conduct internal research and development, including training and improving our service delivery methods
- To send administrative notices including security alerts, system updates, and changes to our policies
We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human review.
3. Legal Bases For Processing
Depending on your jurisdiction, we process personal information under one or more of the following legal bases:
- Performance of a contract: processing necessary to fulfill our obligations under a service agreement with you or your organization
- Legitimate interests: processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security, where those interests are not overridden by your rights
- Consent: where you have given explicit consent to processing for a specific purpose, which you may withdraw at any time
- Legal obligation: processing necessary to comply with applicable law or regulation
4. Data Storage And Security
Your data is stored on secure servers hosted in the United States through Google Cloud Platform. We implement security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
- Role-based access controls limiting data access to authorized personnel on a need-to-know basis
- Multi-factor authentication for administrative and platform access
- Regular security assessments, vulnerability scanning, and penetration testing
- Logging and monitoring of access to systems containing personal information
- Incident response procedures for identifying, containing, and remediating security events
- Employee security training and confidentiality obligations
No method of transmission or storage is completely secure. While we work to protect your information using commercially reasonable measures, we cannot guarantee absolute security.
5. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to provide our services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the nature of the data and the purpose for which it was collected:
- Account data is retained for the duration of the account relationship and for a reasonable period afterward to support reactivation or comply with legal requirements
- Operational and engagement data is retained for the duration of the service engagement plus the applicable statute of limitations period
- Log and usage data is retained for up to 24 months for security and analytics purposes
When data is no longer required for any legitimate purpose, it is securely deleted or irreversibly anonymized.
6. Third-Party Sharing
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We may disclose information to third parties in the following circumstances:
- Service providers and subprocessors who assist in operating our platform, delivering our services, processing payments, providing customer support, or performing analytics, each subject to written confidentiality and data protection obligations
- Professional advisors including legal counsel, auditors, accountants, and insurers as necessary for the operation of our business
- Law enforcement, regulatory authorities, or other governmental bodies when required by applicable law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
- In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case affected users will be notified via email or prominent notice on our website before personal information is transferred and becomes subject to a different privacy policy
- With your employer or contracting organization to the extent necessary to deliver staffing services under a master service agreement or similar arrangement
All third-party recipients are contractually required to use personal information only for the purposes for which it was disclosed and to maintain appropriate security safeguards.
7. Cookies And Tracking Technologies
We use cookies and similar technologies (pixels, local storage, session storage) to maintain session state, authenticate users, remember preferences, and analyze how our services are used.
- Essential cookies: required for platform functionality, authentication, and security. These cannot be disabled without impairing core service functionality.
- Analytics cookies: optional cookies and scripts used to understand usage patterns, measure performance, and improve our services. We use Google Analytics and Apollo website analytics unless rejected or turned off in settings.
We do not use advertising or tracking cookies for behavioral targeting.
On your first website visit, analytics starts by default unless you reject all optional cookies or open settings to turn analytics off. Most browsers also allow you to block or delete cookies. Disabling essential cookies may prevent you from accessing or using certain features of the platform.
8. International Data Transfers
Our servers and primary operations are located in the United States. If you access our services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using our services, you acknowledge this transfer. Where required by applicable law, we implement appropriate safeguards such as standard contractual clauses to protect transferred data.
9. Children'S Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, contact us at the address below.
10. Your Rights
Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information:
- Access: request confirmation of whether we process your personal information and obtain a copy of the specific data we hold
- Correction: request that we correct inaccurate or incomplete personal information
- Deletion: request that we delete your personal information, subject to applicable legal retention requirements and legitimate business needs
- Portability: request your personal information in a structured, commonly used, machine-readable format and, where technically feasible, request transfer to another controller
- Restriction: request that we restrict processing of your personal information under certain circumstances
- Objection: object to processing of your personal information based on legitimate interests or for direct marketing purposes
- Withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal
- Non-discrimination: exercise your privacy rights without receiving discriminatory treatment
To exercise any of these rights, submit a request to privacy@jofrom.io. We will verify your identity before processing the request. We will respond to verified requests within 30 days. If we require additional time, we will notify you of the extension and the reason for it. If we deny a request, we will provide an explanation and information about your right to appeal.
Authorized agents may submit requests on your behalf with verifiable written authorization.
11. State-Specific Disclosures
Residents of California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have additional rights under applicable state legislation, including the right to opt out of the sale or sharing of personal information and the right to limit the use of sensitive personal information. We honor such rights as required by law. To exercise state-specific rights, contact privacy@jofrom.io and specify your state of residence.
12. Changes To This Policy
We may update this privacy policy to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will post the revised policy on this page with an updated effective date and, where required by law, provide direct notice via email or in-platform notification. Your continued use of our services after the effective date of a revised policy constitutes acceptance of the updated terms. We encourage you to review this policy periodically.
13. Contact
For questions about this privacy policy, to exercise your data rights, or to raise a privacy concern, contact us at:
J0 from Corp
Email: privacy@jofrom.io
We aim to resolve all inquiries and complaints directly. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.