LEGAL AND SECURITY
Everything Jatzo has agreed to, in one place.
The documents behind the service: what is done with your data, who else receives it, what the service may not be used for, and how to complain if you are unhappy.
The documents
Privacy notice
What Jatzo collects, why, how long it is kept and what rights you have over it.
Terms of service
The agreement between you and Jatzo Ltd for using the service.
Data protection complaints
How to complain about the way Jatzo handles your personal data, what happens at each step, how long each takes, and where to go if you are not satisfied.
Last updated 21 September 2026
Cookies and device storage
What Jatzo stores on your device, why each item is there and how long it lasts. No analytics, advertising or tracking.
Last updated 21 September 2026
Acceptable use policy
What the Jatzo service may not be used for, from the obvious to the easily missed. It applies to everybody who uses it, on every plan, including the free one.
Last updated 21 September 2026
Invoice Fraud Checker terms of sale
The contract for an Invoice Fraud Checker licence: what you are buying, what the tool does not promise, updates, and your rights if it is faulty.
Last updated 26 October 2026
Reporting a vulnerability
How to report a security problem in Jatzo, and what happens when you do.
Sent on request
The data processing agreement, the list of everyone who receives data and the security questionnaire are sent to a named person at a customer rather than published. Each one sets out where data is held and how it is defended, which is detail for the people who need it and not for anybody else. Ask through the contact form and choose Security / Privacy.
Ask for the document packAre these the current versions?
Every document on this page is rendered from the same source as the copy in the legal pack, so a page here and the document a procurement team holds cannot say different things.
Changes to who receives data
Jatzo gives at least thirty days' notice before adding or replacing a sub-processor, by email to each workspace administrator, as the data processing agreement sets out. The notice does not depend on anybody watching a page.