# Where your data is held

Where Justwon hosts your data, how long it is kept, what happens when you disconnect a tool, and where the legal documents are.

This page summarises what Justwon says about your data and points to the documents that are binding. If this page and a legal document differ, the legal document applies.

## The documents that govern

- The privacy policy: https://justwon.ai/terms/privacy-policy
- The terms of use, which hold the data-protection terms until a data processing agreement is signed: https://justwon.ai/terms/terms-of-use
- The cookie policy: https://justwon.ai/terms/cookie-policy

The list of sub-processors is available on request. For anything about your data, a contract or a request, write to legal@justwon.ai.

## Who is responsible for what

For the content you connect to or create in Justwon, you are the controller and Justwon is the processor. Justwon acts on your instructions. Justwon does not sell personal data. Justwon does not use customer content to train AI models, its own or its AI provider's.

## Where your data is held

By default, unless a different region has been agreed with you in writing, your data is hosted in the EU: databases and application compute in Frankfurt, file storage and caching in EU regions, and AI processing and dictation in the EU.

Your workspace shows its regions under **Settings**, on the **Advanced** tab, in **Where your data lives**. The regions are fixed when the workspace is created, and nothing on that screen moves data between regions.

The privacy policy names the service providers that process data for Justwon.

## How your data is protected

Justwon uses a dedicated database per customer for stored workspace content once the workspace is set up, encryption in transit and at rest at the storage layer, application-layer encryption of integration credentials with per-organization keys, and access authorized on every authenticated call.

Justwon does not currently hold ISO/IEC 27001 or SOC 2 certification. Both are planned.

## How long it is kept

Customer content is kept for as long as the workspace exists, or less if you instruct Justwon to erase it. When a subscription ends, Justwon sets a termination date, and you can ask for your data back for 30 days from that date. A seven-day grace window follows, in which you can cancel the deletion. After that the workspace's data is destroyed, and on request Justwon issues a written deletion certificate that states what it does and does not cover. The privacy policy has the full terms.

To delete a workspace, an owner opens **Settings**, then the **Advanced** tab, and selects **Delete workspace**.

## When you disconnect a tool

Reading stops, and the connection and its stored credentials are removed. Justwon asks the other tool to end the access it was given where that tool supports it. Not every tool does, so the app may stay listed in the other tool's own admin until you remove it there. The connect pages say which steps to take in each tool.

The sources it came from are closed, and are not shown or quoted again. After ten days Justwon removes the content it read from the tool; what Justwon worked out from it stays with the account. Reconnect within ten days to bring the sources back. Values filled in through field mappings are cleared, except a contract's dates. Nothing new comes in. What stays is the facts, scores and assessments, and the people and companies. If you need more removed, write to legal@justwon.ai.

## Your own database

When you connect your own database, Justwon connects with a login that can only read, over a connection whose certificate it verifies. See [Connect your database](https://justwon.ai/docs/connect/database).