MATYAEspañol

Privacy

Orbusiness AI LLC draft updated after auditing code and configuration. Some app corrections await deployment.

Operator and scope

MATYA is an AI marketing tool for local businesses. Contact: info@jokma.app. This draft covers matya.app and the processing described for app.matya.app. The operator is Orbusiness AI LLC. No legal address or specific contractual jurisdiction has been confirmed here.

Data and purposes

The application may process business name, website, services, locations, goals, brand colors, owner name, email and phone, brand manuals, photos, videos, drafts, research, plans, publishing history and authorized integration credentials. These support research, branding, content preparation, authorized publishing and owner reports. Published content becomes public on the destination platform. Do not upload unauthorized personal or confidential information.

Google integrations

When enabled and authorized, connections may cover Business Profile (listing data and permitted posts or reviews), Search Console (search performance), Analytics (traffic reports), YouTube (channel, videos and permitted publishing), and Drive (authorized files). Visiting this site does not enable connections. The code requests business.manage, webmasters.readonly, analytics.readonly, youtube.upload and youtube.readonly for their respective features. Drive uses a service account with drive.readonly and folders shared with that account, rather than requesting a visitor OAuth Drive grant.

Meta integrations

Authorized connections may access Facebook pages, professional Instagram accounts, content, publication identifiers and available metrics. Ad features may prepare campaigns and ads; activation depends on owner action and permissions. Access does not automatically extend to private messages or unauthorized assets.

Providers and transfers

Requested features may send business information and content to AI, research and hosting providers. Production configuration includes Gemini, OpenAI, fal.ai, Recraft, Ideogram, DataForSEO and Brevo. Configuration does not prove usage in every workflow. Drive photos may be sent to Gemini for description, quality analysis and detection of visible personal information. Analytics visit summaries and proposal evidence can be included in Gemini prompts. Brand manuals and content instructions are also processed with AI. No production Anthropic key was found. Vercel hosts the app; Supabase stores records and files; Cloudflare R2 stores uploaded files and library copies. The Supabase project is in Canada (ca-central-1). Other providers may process data in other regions under their terms.

Google data and limited use

The proposed policy restricts Google data to visible, user-authorized features. The audited code has no data-sale or proprietary-model-training function. AI transfers for requested features are described above. Before this policy becomes final, provider contracts and service tiers must be confirmed to exclude general model training with Google data. Use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements. Implementation and AI-provider terms must be checked before approving this commitment.

Retention, security and website

Connection credentials are encrypted with AES-256-GCM before storage. Current app access uses a shared password; authorized operators can access the businesses in that workspace. No global record-expiry rule or backup-retention cycle is configured in the audited code. The Supabase media bucket is public: anyone with a file URL can read it. Public R2 URLs are also used for delivery to platforms, including library copies and possibly brand documents before social publishing. Do not upload confidential documents to this storage. Complete file cleanup on business deletion is prepared in a PR and is not deployed yet. This public website adds no application cookies, advertising analytics or forms. The host may process technical request data such as IP address, browser and errors. The separate application may use essential authentication and language cookies.

Your choices

Request access, correction or deletion by emailing info@jokma.app. You may also revoke access in Google or Meta settings. Revocation stops future access but does not automatically delete stored data or external publications. See Data deletion.

Pending review

Draft dated October 12, 2026. Before approval, the operator must confirm legal identity, applicable processing basis, permissions, providers, retention, security, transfers and request handling.

YouTube

MATYA uses YouTube API Services. By using this integration, users are bound by the YouTube Terms of Service. See the Google Privacy Policy. Revoke access in Google account permissions. Deleting MATYA data does not remove videos from YouTube. The audited version fixes uploads as public; visibility selection and retention controls need correction before submitting this integration for review.