Jeffie

Privacy Policy

Effective 3 August 2026
Controller / service provider: Mitja Adamlje, s.p., Marnova ulica 31A, SI-1410 Zagorje ob Savi, Slovenia, VAT ID SI73560219. Contact: mitja.adamlje@vendio.io.

1. What Jeffie does with data

Jeffie relays Amazon Buyer-Seller messages between our customers (Amazon sellers) and their support tools. For this correspondence — buyer display names, message text, order IDs and attachments — our customer is the data controller and we act as processor on their documented instructions. For customer account data (portal logins, billing and contact details) and for visits to this website, we are the controller.

2. Data we process

3. Where data lives

The service is hosted on servers in Frankfurt, Germany (EU). E-mail delivery uses Amazon Web Services SES (EU region, Frankfurt) and Postmark (ActiveCampaign, LLC). Optional AI features are clearly marked in the product and use an additional model provider only when enabled for your account. A current subprocessor list with safeguards (including standard contractual clauses where a provider processes data outside the EEA) is available on request.

4. Retention

Relayed message content is retained for the duration of the customer relationship so the conversation history remains usable, and deleted on termination or on the controller's instruction. Backups rotate automatically. Billing records are kept as required by Slovenian law.

5. Legal bases

Processing on behalf of sellers: Art. 28 GDPR (processor) under the seller's controllership. Customer account data: Art. 6(1)(b) GDPR (contract). Security logging: Art. 6(1)(f) GDPR (legitimate interest in operating the service securely).

6. Your rights

Data subjects have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Buyers whose messages are relayed should contact the seller they wrote to (the controller); we support our customers in answering such requests. Complaints may be addressed to the Slovenian supervisory authority (Informacijski pooblaščenec, Ljubljana) or your local authority.

7. Security

TLS in transit, EU hosting, per-tenant data isolation enforced in every query, least-privilege credentials, nightly backups, and no storage of raw mailboxes. Access to production systems is restricted to the provider.

8. Changes

We will update this policy as the service evolves (for example, when subprocessors change) and announce material changes to customers by e-mail.