Privacy Policy

Last updated: 8 November 2026

This policy explains what personal data Stjobno (https://stjobno.com) and its services — Chatbook, Mail and the other tools on the site — process, why, and what your rights are.

Who is responsible

The controller of your personal data is OÜ MEO SERVICES (registry code 11227630, Vabaõhukooli tee 112, 12015 Tallinn, Estonia). Write to us at zen@stjobno.com.

Browsing the site

Visit statistics. To see which pages are used we count visits: the page, where the visitor came from, the browser, the device type and the country and city found from the IP address. The IP address itself is not stored — visitors are counted by a one-way code. Robots are left out. The statistics are kept for up to 25 months.
Server logs. The web server records requests (IP address, time, page) for security and troubleshooting; the logs are kept for a limited time.

Your account

Anyone may create an account. For it we keep your name, e-mail address, your password (only as a one-way hash), your language and your settings, and — when you sign in with Google, Yandex ID, VK ID, Microsoft or Facebook — the identifier, name, e-mail address and picture that service shares with us. If it shares no confirmed address, we send a link to the address you type, to make sure it is yours. You may add a phone number and a profile photo. For your security we keep the list of devices where you are signed in (browser, system and an approximate place, without the IP address) and, if you switch on two-step verification, its keys (an authenticator's secret is stored encrypted, recovery codes only as hashes).

We write to your account's e-mail address for the service itself — the confirmation of the address, security codes, password resets, receipts, team invitations and the notices you keep switched on (Profile → Notifications) — from our own address. No advertising without your separate consent.

Teams

When you invite someone to a team we keep their e-mail address and send them the invitation; it is deleted with the team. Members of a team see each other's name, e-mail address and photo, and the team's groups. The password of a team's shared mailbox is kept encrypted with a key of its own and shown only to the team's owner and administrators; the mail itself stays on the mail server, and each member who adds the mailbox to Mail is treated as for their own mailboxes (above).

Chatbook

Chatbook is built so that your chat stays with you: the export is opened and laid out by your browser, on your device. The messages, names and photos are not sent to us for making the book. We receive data only when you choose to:

Buy a book — the order: price, language, payment method, your account and e-mail, and counts about the book (messages, photos, voice messages, pages, people, days). No text, name or photo.
Use the AI texts (optional) — samples of the chat's messages, with the people's names replaced by letters, are sent to an AI provider to write chapter titles or retell the months. Our own records keep no texts.
Write out voice messages on our server (optional) — the audio is sent to our server and to the speech-to-text provider; each audio file is deleted once written out, the texts after 7 days.
Keep the book on the site (optional) — the finished book is stored for 30 days and can be opened by anyone who has its link; you can delete it earlier.

Mail

Mail connects to the mailboxes you add. We store each mailbox's address and login (the password encrypted), the headers of your recent messages (sender, recipients, subject, date, flags) and the text of a message once you open it, so that it opens quickly next time. Your mail stays on your mail servers; removing a mailbox removes what we kept of it. If you use Mail's AI functions (translation, summaries, writing help, dictation, questions about your mail), the texts concerned are sent to an AI provider for that request only; their texts are not kept in our AI records. E-mail texts are sent only to providers that may receive personal data (see below).

Payments

Card and PayPal payments are processed by Lemon Squeezy (USA), which acts as the merchant of record — it collects the payment and handles the invoice and taxes under its own privacy policy. Crypto payments are processed by CoinGate (Lithuania). We never see your card or wallet details; we receive the order's status, amount, e-mail and, for subscriptions, their state and a link to manage them. Payment records are kept as long as accounting law requires (in Estonia, seven years).

Who else processes data

Hosting — the provider of the servers the site runs on.
Sign-in services — Google (USA), Microsoft (USA), Meta / Facebook (USA), Yandex (Russia) and VK (Russia), only when you choose to sign in with them, under their own privacy policies. We receive your identifier there, your name, e-mail address and picture; they learn that you signed in to this site.
AI providers — OpenAI (USA), Anthropic (USA), Google (USA), Mistral AI (France) and Xiaomi MiMo (China), depending on the function. E-mail texts and anything with names go only to OpenAI, Anthropic, Google or Mistral. Chatbook's samples (names replaced) may go to any of them. Speech-to-text is done by OpenAI.
Push notifications — if you allow them, your browser's push service (Google, Apple, Mozilla or Microsoft) delivers the notice to your device.
Payment providers — Lemon Squeezy and CoinGate, as above.

Some of these providers are outside the European Economic Area; transfers rely on the European Commission's adequacy decisions (such as the EU–US Data Privacy Framework) or standard contractual clauses. We do not sell personal data and do not use it for advertising.

Cookies and storage in your browser

The site sets only the cookies it needs to work. There are no advertising or third-party tracking cookies.

Session and security — the session cookie and the security (XSRF) cookie.
Staying signed in — the "remember me" cookie (30 days) and a device cookie that lets you see and sign out your devices; "do not ask again on this device" for two-step verification (30 days).
Language — the language you chose.
Statistics — for signed-in visitors, a signed code of the account so that visits are not counted twice.

Your browser's own storage (local storage, IndexedDB) keeps your preferences and, in Chatbook, your book while you make it. It stays on your device; clearing the site's data in your browser removes it.

Why we may process it

to provide the services and the things you buy (the contract with you);
security, statistics and improving the site (our legitimate interests);
the optional functions you switch on — AI texts, voice messages, push notifications (your consent, which you can withdraw by switching them off);
accounting and tax records (a legal obligation).

How long we keep it

Account data is kept until you delete the account (Profile → Security → Delete the account). Orders and payment records are kept as accounting law requires. The other periods are given above.

Your rights

You may ask to see, correct, export or delete your data, to restrict or object to its processing, and withdraw any consent. Most of it you can change or delete yourself in your Profile. Write to us at zen@stjobno.com. You also have the right to complain to a data protection authority — in Estonia the Andmekaitse Inspektsioon (www.aki.ee).

Changes

When this policy changes, the date at the top changes too; important changes are announced on the site.