When we run Google Search Ads, we use the Google Ads tag on jottogo.com and app.jottogo.com (production only) to measure one outcome: a host completing Express Setup (Guest Jotto content plus delivery automation) after clicking our ad. This helps us understand which ads lead to genuinely activated hosts — not just account sign-ups.

The tag fires once per account when that setup completes. We do not use Google Analytics 4, Google Tag Manager, Facebook pixels, remarketing audiences, or Enhanced Conversions. We do not send host email addresses, names, phone numbers, or any guest stay data to Google.

When you arrive from a Google Ad, we may store a first-party click identifier (gclid, gbraid, or wbraid) for up to 90 days so we can attribute a sample preview, an account signup, or a completed Express Setup to the ad click. We do not send guest data or host email addresses to Google.

That identifier is stored in a first-party cookie named jg_google_ads_click so it can survive the journey from jottogo.com to app.jottogo.com during sign-up. See our Cookie Policy for how this fits alongside login and security cookies.

Google may process technical data under its own Privacy Policy. Questions about how we use Google Ads on JottoGo can be sent via our contact page.

When you use address autocomplete, JottoGo sends the address text you type and your selected country to Google Maps Platform so it can return suggestions limited to that country. If you select a suggestion, JottoGo sends its place identifier to retrieve the address fields. You can use manual address entry instead.

When you use Side Guide venue search, JottoGo sends your search text and property location context to Google Maps Platform so it can return nearby place suggestions.

These searches happen only after you use the relevant search field; JottoGo keeps the Google Maps Platform API key on its server. Google processes the search under its Privacy Policy and Google Maps Platform policies. Questions about JottoGo's use of these searches can be sent via our contact page.

To protect JottoGo sign-in from automated abuse, we use Cloudflare Turnstile on host login, crew login, and other sign-in flows where we verify you are not a bot. Turnstile helps us tell legitimate visitors from bots before we send a one-time email sign-in code.

When Turnstile runs, Cloudflare processes minimal technical signals (client IP address, TLS fingerprint, browser user-agent, site key, and the origin of the page where Turnstile runs) solely to detect and block bot traffic. Cloudflare does not use Turnstile to show you advertising or to build marketing profiles. JottoGo does not receive enough information from Turnstile to identify you directly.

For bot protection on our site, Cloudflare acts as a data processor on our instructions; JottoGo is the data controller for that processing. Cloudflare may also use the same signals as a controller to improve Turnstile's bot-detection capabilities, as described in Cloudflare's documentation.

Turnstile may set strictly necessary cookies or similar storage for this security purpose. See our Cookie Policy for how that fits alongside our functional login cookies.

For more detail, read Cloudflare's Turnstile Privacy Addendum (supplement to Cloudflare's Privacy Policy) and Cookie Policy. Questions about how we use Turnstile on JottoGo can be sent via our contact page.

When tax calculation is enabled for Crew IOU, JottoGo sends Avalara the supplier and service addresses, service date, country and region, currency, generic service category or tax code, and line amounts needed to calculate tax.

JottoGo does not send Avalara names, email addresses, phone numbers, payment or bank details, receipt files, or crew-entered descriptions for this calculation.

JottoGo keeps the normalized tax decision, input hash, timestamps, and Avalara reference needed to review and issue the invoice; it does not keep the raw Avalara response in the invoice snapshot.

Avalara processes calculation data under its Privacy Notice and publishes a Data Processing Addendum. Avalara's current legal documents and service-provider information are available in its Legal Center. Questions about this processing can be sent through our contact page.

On a quarterly schedule, JottoGo may send only a country code and, for Canada, a province or territory code to VAT Sense or TaxID.dev to refresh its own reference-rate table.

JottoGo does not send either provider names, addresses, email addresses, phone numbers, tax-registration numbers, invoice contents, prices, bank details, property details, or other customer or crew data.

VAT Sense publishes its privacy policy. JottoGo may use TaxID.dev only as a fallback when refreshing country-level reference rates. These background refreshes are not triggered by opening tax settings or creating an invoice.

Snag Flag lets authorised crew report a property issue using a short description, property area, urgency and an optional photo. JottoGo shares the report with the property host and authorised crew who can access that property. The host is notified by email when a new report is submitted.

Photos are stored in private JottoGo storage and are shown only after an access check. Reports form part of the property's operational history and remain available after they are resolved. They are removed when the host account is deleted, subject to any retention required by law.

Reporters should photograph only what is needed to explain the issue and avoid including people, identity documents or other private information.