JAFAX ("we," "us," or "our") operates the website at jafax.org. This Privacy Policy explains what information we collect when you use our site, how we use it, and your rights regarding that information. By using jafax.org, you agree to the practices described in this policy.
We collect information you provide directly to us and information generated automatically when you use the site.
Account information: When you create an account, we collect your display name and email address. If you register using Google or Facebook sign-in, we receive your name, email address, and profile picture from that provider. We do not receive or store your Google or Facebook password.
Convention activity: When you use features such as My Likes and My Schedule, we store your saved items, scheduled panels, personal time blocks, and any drop-in visit times you set. This information is tied to your account and used solely to provide those features to you.
Voting data: When you participate in JAFAX convention voting (such as the Artist of the Show ballot), we record your IP address alongside your vote. This is used solely to prevent duplicate votes and ensure the integrity of the results. IP addresses collected during voting are not linked to your account, are not shared with third parties, and are retained only as long as needed for vote integrity purposes.
Automatically collected data: Like most websites, our server logs basic technical information such as your IP address, browser type, and pages visited. This data is used only for security monitoring and diagnosing technical issues.
We do not use your information for advertising, and we do not sell or share your personal information with third parties for their marketing purposes.
We offer the option to sign in using your Google or Facebook account. When you do so, that provider authenticates you and shares your name and email address with us. Your use of those sign-in services is also governed by Google's and Facebook's respective privacy policies. We only request access to your basic profile and email address — we do not access your contacts, posts, or any other account data.
We send transactional emails only — specifically, account verification links and password reset links. We do not send marketing emails or newsletters without your explicit consent. You may contact us at any time to request removal of your account and associated data.
Your account and associated data (likes, schedule, time blocks) are retained as long as your account is active. If you would like your account and data deleted, contact us at the email address below and we will process your request promptly.
The interactive venue map on jafax.org may ask your browser for permission to access your device's location. If you grant permission, your coordinates are used solely within your browser to show your approximate position on the convention floor map. Your location is never transmitted to our servers and is never stored by us. You can decline the location request at any time without affecting any other feature of the site.
We use session cookies to keep you signed in while you browse the site. We do not use tracking cookies or third-party advertising cookies. No personal information is stored in your browser's local storage.
JAFAX is a convention open to all ages, but our website's account features are not directed at children under 13. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has created an account or submitted personal information without your consent, please contact us at the address below and we will promptly delete that information.
We send transactional emails only — specifically, account verification links and password reset links. We do not send marketing or promotional emails without your explicit consent. In compliance with the CAN-SPAM Act, we agree to the following:
If you receive an unwanted email from us, contact us at info@jafax.org and we will remove you from any mailing list immediately.
Under the California Online Privacy Protection Act, California residents have the right to know what personal information we collect and how it is used. In accordance with CalOPPA:
In the unlikely event of a data breach that affects your personal information, we will notify affected users via email within 7 business days of becoming aware of the incident. The notification will describe what information was affected and what steps we are taking to address it.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.