Privacy policy
Last updated: 14 September 2026. This policy describes how Joyst (“we”, “us”) handles personal data. Joyst is a product associated with Herdl. Contact: hello@joyst.app. Registered company details will be confirmed — treat contact and entity fields as subject to legal review.
What this covers
This notice covers the marketing website at www.joyst.app (including contact forms and cookies) and, at a high level, the Joyst application at dash.joyst.app. The application uses Clerk for authentication and organisation management; Clerk’s own privacy documentation also applies to account data processed there.
Data we collect
Account and organisation data when you sign up on accounts.joyst.app (name, email, organisation membership) via Clerk.
Content you store in Joyst (skills, prompts, annotations, connection metadata, encrypted secrets) — belonging to your organisation.
Marketing-site enquiries submitted through contact forms (name, email, message).
Technical logs and diagnostics reasonably needed to operate and secure the service.
Cookie and similar technology data as described in our cookie notice.
How we use data
To provide and improve the Joyst service and marketing site.
To respond to enquiries and communicate about the product.
To maintain security, prevent abuse, and meet legal obligations.
To understand aggregate usage of the marketing site (if analytics are enabled).
Legal bases (UK GDPR)
Depending on the context, we rely on contract (to provide the service), legitimate interests (to secure and improve Joyst and respond to marketing enquiries), and consent where required (for example certain cookies).
Sharing
We use processors such as hosting, authentication (Clerk), and email infrastructure to operate Joyst. We do not sell personal data. We may disclose information if required by law or to protect rights and safety.
International transfers
Some processors may process data outside the UK. Where required, we use appropriate safeguards (such as standard contractual clauses) as provided by those processors.
Retention
We retain account and organisation content for as long as the organisation uses Joyst, and delete or anonymise within a reasonable period after closure unless law requires longer retention. Marketing enquiries are retained only as long as needed to respond and keep a minimal business record.
Your rights
Under UK GDPR you may have rights to access, rectify, erase, restrict, object, and data portability, and to complain to the ICO. Contact hello@joyst.app to exercise these rights.
Children
Joyst is not directed at children under 16.
Changes
We may update this policy. Material changes will be reflected by updating the date above and, where appropriate, additional notice in the product.