Cherry Jam

Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how Cherry Jam SAS ("Cherry Jam", "we", "us") collects, uses, shares and protects personal data when you visit cherryjam.co (the "Site") or contact us. We act as the data controller of the personal data described below.

1. Who we are

  • Controller: Cherry Jam SAS

  • Address: Calle Río de la Plata 1394, Montevideo, Uruguay

  • Contact for privacy matters: contact@cherryjam.co

Our databases are duly registered with the Unidad Reguladora y de Control de Datos Personales (URCDP) under registration number [URCDP REGISTRATION NUMBER]. In Uruguay, registration of databases is mandatory before any processing of personal data begins.

2. Scope

This policy applies to personal data we process through the Site, our contact form, our scheduling tool, and analytics. It does not cover third-party websites we link to, including our own venture VEXION, which operates under its own separate policy.

3. What data we collect

a) Data you provide directly

  • Contact form: your name, email address, company name, and the contents of your message.

  • Scheduling a call: when you book a call, our scheduling provider Calendly collects your name, email, and the details needed to schedule the meeting.

b) Data collected automatically

  • Usage and analytics data via Google Analytics 4 and Mixpanel — for example pages viewed, actions taken, approximate location, device and browser information, and identifiers stored in cookies.

  • Technical logs generated by our hosting provider — for example IP address, browser type, and access timestamps, used for security and reliability.

We do not intentionally collect sensitive personal data (such as health, biometric, or financial data), and we ask that you do not include such information in your messages.

4. Why we use your data and our legal bases

We use your personal data for a limited set of purposes, each supported by a lawful basis under the GDPR where it applies. We use it to respond to your inquiry and discuss a possible engagement, relying on the performance of pre-contractual steps at your request and on our legitimate interest in answering you. When you book a call through Calendly, we process your data to schedule and hold that call, on the basis of pre-contractual steps and your consent. We use Google Analytics 4 and Mixpanel to measure and improve the Site, based on your consent where consent is required for cookies and analytics. We also process data to maintain security, prevent abuse and keep technical logs, relying on our legitimate interest in a secure Site, and to comply with legal obligations where applicable.

Where we rely on your consent (for example, for scheduling through Calendly and for analytics cookies), you have the right to withdraw that consent at any time, as easily as you gave it. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Under Uruguay's Law No. 18.331 on the Protection of Personal Data, we process your data with your prior, informed consent or on another lawful ground permitted by that law.

5. Cookies and similar technologies

The Site uses cookies and similar technologies, including those set by Google Analytics 4 and Mixpanel, to understand how the Site is used. Where required, non-essential cookies are loaded only after you give consent through our cookie consent banner, managed by Cookiebot. You can withdraw or change your choice at any time, and you can also control cookies through your browser settings. Disabling some cookies may affect how the Site works.

6. Who we share data with (processors and third parties)

We share personal data only with service providers that process it on our behalf, under appropriate agreements:

  • Google (Google Analytics 4) — analytics. United States.

  • Mixpanel — product/usage analytics. United States.

  • Calendly — call scheduling. United States.

  • Amazon Web Services (Amazon Lightsail) — Site hosting, in the AWS US East (Ohio, us-east-2) region. United States.

  • Amazon Web Services (Amazon Simple Email Service – Amazon SES) — delivery of form notifications, in the AWS US East (Ohio, us-east-2) region. United States.

  • Cookiebot (Cybot A/S) — cookie consent management. European Union (Denmark).

  • Content delivery networks (CDNs) — delivery of fonts, scripts and libraries (Google Fonts, Font Awesome). These services automatically receive your IP address when a page loads, in order to serve the requested resources. United States / global.

Calendly acts as our processor for the scheduling you initiate on the Site; for certain of its own operational purposes, Calendly may act as an independent controller under its own privacy policy.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We may disclose data if required by law or to protect our rights.

7. International data transfers

Several of our providers are located in the United States, so your data may be transferred outside Uruguay and the European Economic Area. Where such transfers occur, we rely on appropriate safeguards (such as the providers' standard contractual clauses or equivalent mechanisms) to protect your data consistent with applicable law. In addition, where required under Article 23 of Uruguay's Law No. 18.331, we rely on your explicit consent as a further basis for the international transfer of your data — for example, the consent you give through our cookie banner for analytics and preferences cookies.

8. How long we keep your data

  • Contact form / inquiry data: kept while we are in contact and for up to 24 months afterwards, unless a longer period is needed for an ongoing relationship or to comply with the law.

  • Scheduling data: retained by Calendly per our account settings.

  • Analytics data: retained according to the providers' settings; for Google Analytics 4, our configured retention period is 14 months.

  • Technical logs: kept for a limited period for security purposes.

When data is no longer needed, we delete or anonymize it.

9. How we protect your data

We apply reasonable technical and organizational measures — including encryption in transit (HTTPS), access controls, and limited data collection — to protect personal data against loss, misuse, or unauthorized access. No method of transmission over the Internet is fully secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you;

  • Rectify or update inaccurate or incomplete data;

  • Delete / suppress your data;

  • Object to or restrict certain processing;

  • Withdraw consent at any time;

  • Data portability (GDPR);

  • Lodge a complaint with a supervisory authority.

Under Uruguay's Law No. 18.331, you may exercise your rights of access, rectification, updating, inclusion and suppression, and you may complain to the URCDP (Unidad Reguladora y de Control de Datos Personales). If you are in the EU/EEA, you may complain to your local data protection authority.

If you are in Uruguay, you may exercise these rights free of charge. We distinguish between the right of access (to obtain the data we hold about you), the right of rectification or update (to correct or update inaccurate or outdated data), and the right of suppression / deletion (to have your data removed). In accordance with Law No. 18.331, we will respond to access requests within 5 business days, and we will carry out any rectification, update or suppression within 5 business days of a valid request.

If you are a California resident (CCPA/CPRA): you have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing. We do not sell or share your personal information, and we will not discriminate against you for exercising your rights. We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA/CPRA.

To exercise any right, contact us at contact@cherryjam.co. We will respond within the timeframe required by applicable law.

11. Children's privacy

The Site is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal data from minors.

12. Links to other sites

The Site contains links to third-party sites, including VEXION. We are not responsible for their privacy practices; please review their policies separately.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes will be highlighted where appropriate.

14. Contact

Questions or requests regarding this policy or your personal data: contact@cherryjam.co, Cherry Jam SAS, Calle Río de la Plata 1394, Montevideo, Uruguay.