Privacy Policy
JAC Collective, LLC ("we," "our," or "us") operates the website at jaccollective.com and the associated Odoo platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services — including when you authenticate via Google OAuth, use our website, or interact with our communication services.
Who This Policy Applies To
Our platform serves two distinct user groups, each with different levels of access:
- Internal Users
- Members of the JAC Collective team who have been granted full or administrative access to the Odoo platform. Internal accounts are invite-only. Internal users may connect Google Calendar and Gmail integrations as part of their workflow.
- External Users (Portal Access)
- Clients, event attendees, and collaborating staff who are granted portal-level access to the platform. External accounts are also invite-only. Portal users can view specific content relevant to them (such as event details or invoices) but do not have access to internal tools or Google workspace integrations.
Public account registration is not available. We do not accept unsolicited sign-ups.
Website Analytics & Tracking (Google Analytics)
We use Google Analytics 4 (GA4) on jaccollective.com to understand how visitors find and interact with our website. This helps us evaluate the effectiveness of our SEO, measure traffic from different sources, and make informed decisions about our content and outreach.
When you visit our website, Google Analytics may collect the following information automatically via cookies and tracking scripts:
- Traffic & source data — how you arrived at our site (e.g., organic search, direct, referral, or UTM-tagged campaign links).
- Page interaction data — which pages you visit, time spent on each page, and general navigation patterns.
- Device & browser data — device type, operating system, browser, and screen resolution (aggregated, not individually identifiable).
- Approximate location — country and region level only, derived from anonymised IP address. We do not collect precise geolocation.
- UTM parameters — campaign identifiers appended to links (e.g.,
utm_source,utm_medium,utm_campaign) used to measure the reach and effectiveness of specific marketing or SEO efforts.
Google Analytics data is aggregated and anonymised. We do not cross-reference analytics data with your Odoo account information.
Google Analytics is a third-party service operated by Google LLC. By visiting our website, data about your visit may be sent to Google's servers. For more information on how Google handles this data, please review the Google Privacy Policy.
Our cookie banner is active on this site. Analytics cookies are only set if you consent. You may withdraw consent at any time through your browser's cookie settings or by opting out via the Google Analytics Opt-out Browser Add-on. For full details on the cookies used, see our Cookie Policy.
Information We Collect via Google OAuth
We use Google OAuth 2.0 to authenticate users and, for internal users, to integrate with Google Workspace services. We request only the minimum scopes necessary for each function. No OAuth scope is requested unless it is actively used.
| Scope | Who It Applies To | Purpose |
|---|---|---|
openid |
All users (internal & external) | Establishes a verified Google identity session for authentication. |
profile |
All users (internal & external) | Retrieves your name and profile picture to populate your account in our platform. |
email |
All users (internal & external) | Retrieves your Google email address to identify and provision your account (Just-in-Time provisioning on first invite-triggered login). |
| Google Calendar API (read & write) |
Internal users only | Syncs calendar events between your Google Calendar and the Odoo calendar. Allows internal staff to view availability and manage scheduling from within the platform. |
| Gmail API (read & write) |
Internal users only | Allows internal staff to read and send emails from their Google Workspace inbox directly within Odoo, supporting communications and follow-ups. |
External portal users authenticate via openid, profile, and email only. They are never prompted for Calendar or Gmail access.
Marketing Communications & Email Collection
When you engage with our services, request platform access, create an account, or submit inquiries, your email address may be collected and added to our distribution lists for future marketing updates, promotional newsletters, and corporate updates from JAC Collective, LLC.
We do not engage in spam or third-party automated tracking for advertising. Our outbound communication adheres strictly to standard anti-spam regulations, and we only send marketing materials relevant to the events, platforms, or services we manage.
How We Use Your Data
We use the data collected through Google OAuth and direct collection frameworks for the following operational workflows:
- To authenticate your identity and securely log you in to our platform.
- To provision your account on first login when you have been invited (Just-in-Time provisioning). Your name, email, and profile picture are used to create your Odoo user profile.
- To sync Google Calendar events with the Odoo calendar so internal users can manage scheduling across both platforms.
- To enable internal users to read and send Gmail messages within Odoo, supporting business communications without leaving the platform.
- To distribute relevant marketing campaigns, platform announcements, and newsletters directly tailored to you.
- To maintain and improve the security of your account and our platform.
JAC Collective's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for any purpose other than those explicitly described in this policy. We do not transfer, sell, or use Google user data to serve advertising.
Data Storage and Security
Our platform is self-hosted on a server located in Richmond, Virginia, United States. All data — including user account information, compiled marketing records, and OAuth tokens — is stored securely on this server and does not leave the United States.
We take the following measures to protect your data:
- OAuth tokens are stored in an encrypted database and are never transmitted in plain text.
- Access to the server and database is restricted to authorized JAC Collective personnel only.
- Our platform uses HTTPS (TLS encryption) for all data in transit.
- We do not store the contents of your Gmail messages or calendar events beyond what is actively displayed within the Odoo platform for operational use. We do not build secondary databases of your email or calendar content.
Data Sharing and Disclosure
We do not sell your personal data. We do not share your Google user data or marketing email lists with third-party tools, vendors, data brokers, or external advertisers.
Your data may only be disclosed in the following limited circumstances:
- To provide a feature you have explicitly requested — for example, calendar sync requires passing calendar data between Google's API and Odoo's calendar module.
- When required by law — if we are legally required to disclose information (e.g., in response to a valid court order or subpoena), we will do so only to the extent required and will notify you where legally permitted.
- To protect rights and safety — in situations involving fraud, security threats, or the protection of JAC Collective or its users.
No Google OAuth user data is shared with third-party AI tools, advertisers, or marketing services. Aggregated, anonymised website analytics data is shared with Google Analytics as described in Section 02.
Data Retention
We retain your personal data and OAuth credentials for as long as your account is active and you maintain an ongoing relationship with JAC Collective.
Google Analytics data collected on our website is retained for 14 months within Google Analytics, after which it is automatically deleted.
Marketing email data is kept on file indefinitely to facilitate continuous platform communication, unless a formal opt-out or data deletion directive is issued by the user.
Opt-Out and Data Deletion Rights
You retain full sovereignty over your personal data and how it is utilized for marketing. You have the right to access, correct, or request the deletion of the information we hold about you through the following precise mechanisms:
- 1. Instant Unsubscribe
- Every marketing or informational message sent to you by JAC Collective contains a clear, accessible "Unsubscribe" link embedded directly in the email footer. Clicking this link will immediately remove your email address from our future marketing distribution campaigns.
- 2. Revoking Google Access
- You can revoke JAC Collective's access to your Google account at any time by visiting myaccount.google.com/permissions and removing the JAC Collective application permissions. Your Odoo account will remain accessible via standard password login unless you explicitly request a total deletion.
- 3. Account & Comprehensive Data Deletion Request
- To permanently delete your account, your marketing email records, profile listings, OAuth tokens, and all other historical footprint data from our servers, you may execute a formal right-to-be-forgotten directive. Contact us at [email protected] with the explicit subject line "Data Deletion Request." Upon receiving and confirming your request, we will expunge all tracking data and user profiles entirely within 30 days.
Children's Privacy
Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will take immediate steps to delete the information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes — particularly those altering how we approach consumer marketing data or user-scoped Google account access — we will notify active users by email at the address associated with their profile.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data management routines, please reach out:
📧 Email: [email protected]
🌐 Website: jaccollective.com
📍 Location: Richmond, Virginia, United States
Privacy Policy
JAC Collective, LLC ("we," "our," or "us") operates the website at jaccollective.com and the associated Odoo platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services — including when you authenticate via Google OAuth, use our website, or interact with our communication services.
Who This Policy Applies To
Our platform serves two distinct user groups, each with different levels of access:
- Internal Users
- Members of the JAC Collective team who have been granted full or administrative access to the Odoo platform. Internal accounts are invite-only. Internal users may connect Google Calendar and Gmail integrations as part of their workflow.
- External Users (Portal Access)
- Clients, event attendees, and collaborating staff who are granted portal-level access to the platform. External accounts are also invite-only. Portal users can view specific content relevant to them (such as event details or invoices) but do not have access to internal tools or Google workspace integrations.
Public account registration is not available. We do not accept unsolicited sign-ups.
Website Analytics & Tracking (Google Analytics)
We use Google Analytics 4 (GA4) on jaccollective.com to understand how visitors find and interact with our website. This helps us evaluate the effectiveness of our SEO, measure traffic from different sources, and make informed decisions about our content and outreach.
When you visit our website, Google Analytics may collect the following information automatically via cookies and tracking scripts:
- Traffic & source data — how you arrived at our site (e.g., organic search, direct, referral, or UTM-tagged campaign links).
- Page interaction data — which pages you visit, time spent on each page, and general navigation patterns.
- Device & browser data — device type, operating system, browser, and screen resolution (aggregated, not individually identifiable).
- Approximate location — country and region level only, derived from anonymised IP address. We do not collect precise geolocation.
- UTM parameters — campaign identifiers appended to links (e.g.,
utm_source,utm_medium,utm_campaign) used to measure the reach and effectiveness of specific marketing or SEO efforts.
Google Analytics data is aggregated and anonymised. We do not cross-reference analytics data with your Odoo account information.
Google Analytics is a third-party service operated by Google LLC. By visiting our website, data about your visit may be sent to Google's servers. For more information on how Google handles this data, please review the Google Privacy Policy.
Our cookie banner is active on this site. Analytics cookies are only set if you consent. You may withdraw consent at any time through your browser's cookie settings or by opting out via the Google Analytics Opt-out Browser Add-on. For full details on the cookies used, see our Cookie Policy.
Information We Collect via Google OAuth
We use Google OAuth 2.0 to authenticate users and, for internal users, to integrate with Google Workspace services. We request only the minimum scopes necessary for each function. No OAuth scope is requested unless it is actively used.
| Scope | Who It Applies To | Purpose |
|---|---|---|
openid |
All users (internal & external) | Establishes a verified Google identity session for authentication. |
profile |
All users (internal & external) | Retrieves your name and profile picture to populate your account in our platform. |
email |
All users (internal & external) | Retrieves your Google email address to identify and provision your account (Just-in-Time provisioning on first invite-triggered login). |
| Google Calendar API (read & write) |
Internal users only | Syncs calendar events between your Google Calendar and the Odoo calendar. Allows internal staff to view availability and manage scheduling from within the platform. |
| Gmail API (read & write) |
Internal users only | Allows internal staff to read and send emails from their Google Workspace inbox directly within Odoo, supporting communications and follow-ups. |
External portal users authenticate via openid, profile, and email only. They are never prompted for Calendar or Gmail access.
Marketing Communications & Email Collection
When you engage with our services, request platform access, create an account, or submit inquiries, your email address may be collected and added to our distribution lists for future marketing updates, promotional newsletters, and corporate updates from JAC Collective, LLC.
We do not engage in spam or third-party automated tracking for advertising. Our outbound communication adheres strictly to standard anti-spam regulations, and we only send marketing materials relevant to the events, platforms, or services we manage.
How We Use Your Data
We use the data collected through Google OAuth and direct collection frameworks for the following operational workflows:
- To authenticate your identity and securely log you in to our platform.
- To provision your account on first login when you have been invited (Just-in-Time provisioning). Your name, email, and profile picture are used to create your Odoo user profile.
- To sync Google Calendar events with the Odoo calendar so internal users can manage scheduling across both platforms.
- To enable internal users to read and send Gmail messages within Odoo, supporting business communications without leaving the platform.
- To distribute relevant marketing campaigns, platform announcements, and newsletters directly tailored to you.
- To maintain and improve the security of your account and our platform.
JAC Collective's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for any purpose other than those explicitly described in this policy. We do not transfer, sell, or use Google user data to serve advertising.
Data Storage and Security
Our platform is self-hosted on a server located in Richmond, Virginia, United States. All data — including user account information, compiled marketing records, and OAuth tokens — is stored securely on this server and does not leave the United States.
We take the following measures to protect your data:
- OAuth tokens are stored in an encrypted database and are never transmitted in plain text.
- Access to the server and database is restricted to authorized JAC Collective personnel only.
- Our platform uses HTTPS (TLS encryption) for all data in transit.
- We do not store the contents of your Gmail messages or calendar events beyond what is actively displayed within the Odoo platform for operational use. We do not build secondary databases of your email or calendar content.
Data Sharing and Disclosure
We do not sell your personal data. We do not share your Google user data or marketing email lists with third-party tools, vendors, data brokers, or external advertisers.
Your data may only be disclosed in the following limited circumstances:
- To provide a feature you have explicitly requested — for example, calendar sync requires passing calendar data between Google's API and Odoo's calendar module.
- When required by law — if we are legally required to disclose information (e.g., in response to a valid court order or subpoena), we will do so only to the extent required and will notify you where legally permitted.
- To protect rights and safety — in situations involving fraud, security threats, or the protection of JAC Collective or its users.
No Google OAuth user data is shared with third-party AI tools, advertisers, or marketing services. Aggregated, anonymised website analytics data is shared with Google Analytics as described in Section 02.
Data Retention
We retain your personal data and OAuth credentials for as long as your account is active and you maintain an ongoing relationship with JAC Collective.
Google Analytics data collected on our website is retained for 14 months within Google Analytics, after which it is automatically deleted.
Marketing email data is kept on file indefinitely to facilitate continuous platform communication, unless a formal opt-out or data deletion directive is issued by the user.
Opt-Out and Data Deletion Rights
You retain full sovereignty over your personal data and how it is utilized for marketing. You have the right to access, correct, or request the deletion of the information we hold about you through the following precise mechanisms:
- 1. Instant Unsubscribe
- Every marketing or informational message sent to you by JAC Collective contains a clear, accessible "Unsubscribe" link embedded directly in the email footer. Clicking this link will immediately remove your email address from our future marketing distribution campaigns.
- 2. Revoking Google Access
- You can revoke JAC Collective's access to your Google account at any time by visiting myaccount.google.com/permissions and removing the JAC Collective application permissions. Your Odoo account will remain accessible via standard password login unless you explicitly request a total deletion.
- 3. Account & Comprehensive Data Deletion Request
- To permanently delete your account, your marketing email records, profile listings, OAuth tokens, and all other historical footprint data from our servers, you may execute a formal right-to-be-forgotten directive. Contact us at [email protected] with the explicit subject line "Data Deletion Request." Upon receiving and confirming your request, we will expunge all tracking data and user profiles entirely within 30 days.
Children's Privacy
Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will take immediate steps to delete the information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes — particularly those altering how we approach consumer marketing data or user-scoped Google account access — we will notify active users by email at the address associated with their profile.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data management routines, please reach out:
📧 Email: [email protected]
🌐 Website: jaccollective.com
📍 Location: Richmond, Virginia, United States