1. Who this policy covers
This policy applies to Junction’s website at getjunction.io and to the Junction service (together, the “Service”). It describes how we handle information about visitors, people who request a demo, and customers who connect their systems to Junction. Your use of the Service is also subject to our Terms of Service.
2. Information we collect
We collect the following categories of information:
- Account and contact information. Your name, work email, company name, and anything else you send us when you request a demo, create an account, or contact support.
- Connected system data (read-only). When you connect your CRM, such as HubSpot, and your billing system, such as Stripe, Junction reads records needed to compare the two: accounts and contacts, deals and their stages, subscriptions, invoices, charges, cancellations, and the amounts attached to them. Junction has read-only access and does not write to, change, or delete anything in your connected systems.
- Connection credentials. The authorization (OAuth) tokens that let Junction read your connected systems. These tokens are stored encrypted, and you can revoke them at any time by disconnecting a system.
- Usage and device data. Standard log and device information, such as IP address, browser type, pages viewed, and timestamps, which we use to operate and secure the Service.
3. How we use your information
We use the information we collect to:
- compute your results, which means comparing your connected CRM and billing data to find the accounts where they disagree about money and putting a dollar figure on the gap;
- provide, maintain, secure, and improve the Service;
- respond to your requests, provide support, and communicate with you about the Service;
- meet our legal, tax, and accounting obligations.
We use your connected system data only to produce your own results and to support you. We do not sell your data, we do not use it for advertising, and we do not use one customer’s connected data to build products for anyone else.
4. Legal bases
Where data protection law such as the GDPR applies, we process personal information on the basis of performing our contract with you, our legitimate interest in operating and securing the Service, your consent where we ask for it, and compliance with our legal obligations. Where we rely on consent, you may withdraw it at any time.
6. Data retention and deletion
We keep your connected system data only as long as we need it to provide the Service to you, and we keep account and contact information for as long as your account is active or as needed to meet our legal obligations. When you disconnect a system, we revoke the stored tokens for it. When you close your account or ask us to delete your data, we delete or de-identify your connected system data within a reasonable period, typically within 30 days, except where we are required to retain certain records by law. You can request deletion at any time by emailing hello@getjunction.io.
7. How we protect your information
We protect your information with encryption in transit and at rest, encrypted storage of connection tokens, access controls that limit who can reach production data, and read-only access to your connected systems so Junction can never change them. No method of storage or transmission is completely secure, but we work to protect your information and to keep our practices current.
8. Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights, or disconnect a system at any time from your account settings, and you can reach us at hello@getjunction.io. We will not discriminate against you for exercising any of these rights.
9. International data transfers
Junction is operated from the United States, and we host the Service on AWS infrastructure in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
11. Children
The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we make a material change, we will update the “Last updated” date above and, where appropriate, give you additional notice. We encourage you to review this page periodically.
13. Contact us
If you have questions about this policy or how we handle your information, reach us at hello@getjunction.io.