JES ("we", "the Platform", "the Controller") is a social network for artists and creatives. This Privacy Policy ("Policy") is drafted pursuant to EU Regulation 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by D.Lgs. 101/2018. By using the Platform, you acknowledge and accept this Policy.

1 Personal data processed

1.1 Registration and profile data

• Email address (authentication and service communications)
• Password (stored hashed — never readable by us)
• First/last name, username, bio, artistic title/discipline
• Phone number (voluntary, optional)
• Nationality (voluntary, optional)
• Profile photo provided voluntarily
• Approximate birth year (not publicly visible)
• Explicit consent to receive promotional communications (accepts_promotions) — optional and revocable at any time

1.2 Published content

• Posts: images (up to 10), captions, visibility level, groups, tags, hashtags
• Stories: ephemeral images (deleted after 30 days), links and mentions
• Comments, poll answers, votes
• Posts in groups/communities
• Direct messages (not automatically analysed by us)

1.3 Interaction data

• Likes and saves on other users' content
• Story likes
• Follow relationships (followers/following)
• Group and community memberships
• Reports of content or users

1.4 Technical data

• Session tokens stored in the browser via localStorage
• Content creation, modification and access timestamps
• Message read status
• System logs: IP address, browser type and version, operating system (retained for security purposes, maximum 12 months)

Data we do NOT collect

• Geolocation or GPS data
• Device advertising identifiers (IDFA/GAID)
• Browsing data on third-party sites or apps
• Payment information (JES is free)

2 Legal basis for processing

• Performance of a contract (Art. 6(1)(b)): registration data and content necessary to provide the service
• Legitimate interest (Art. 6(1)(f)): platform security, anonymised aggregate statistical analysis
• Consent (Art. 6(1)(a)): promotional communications (accepts_promotions field) — revocable at any time by writing to jes.socialdellemozioni@gmail.com
• Legal obligation (Art. 6(1)(c)): retention required by applicable law

3 Purposes of processing

• Service delivery: account, feed, messages, groups, polls and notifications
• Security and moderation: abuse detection, report management, disciplinary actions, blacklist of prohibited words
• Platform improvement: anonymised aggregate statistical analysis
• Service communications: transactional emails (password reset, account confirmation, security alerts)
• Promotional communications: newsletters and news sent only to users who gave explicit consent via accepts_promotions
• Direct contact: use of phone and/or email if provided by the user
• JES ARC: the role chosen during registration (artist, company, gallery, etc.) is used solely to display relevant JES ARC personalised advertising content for the user's category. This data is not shared with third parties.

4 Disclosure to third parties and transfers

We do not sell or transfer your personal data to third parties for commercial purposes. We share data exclusively in the following cases:

• Supabase Inc. (data processor): infrastructure provider for database, authentication and storage. Acts under our mandate pursuant to Art. 28 GDPR. Data may be hosted on AWS servers in Europe (eu-central-1) or in the US with adequate safeguards: Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework (European Commission adequacy decision, July 2023). Supabase Privacy Policy.
• Google LLC (Google Fonts): when fonts are loaded, the visitor's IP address is transmitted to Google LLC (USA) servers. Google is certified under the EU–US Data Privacy Framework. No Google Analytics cookies or Google advertising trackers are used.
• Sponsor partners: sponsored posts are static content with external links. JES does not transmit personal data to sponsors (GB Studio, GNG Agency, GES Company, Mercury Auctions).
• Competent authorities: where required by law or court order.

5 Retention period

• Stories: automatically deleted 30 days after publication
• Content and active accounts: retained for the duration of the contractual relationship
• Accounts deleted on request: removed within 30 days, subject to legal retention obligations
• Direct messages: retained while at least one participant keeps an active account
• Security logs: maximum 12 months
• Promotional data (email, phone): until consent is revoked or account is deleted

6 Your rights (Arts. 15–21 GDPR)

As a data subject, you have the following rights:

• Access (Art. 15): request a copy of the data concerning you
• Rectification (Art. 16): correction of inaccurate or incomplete data
• Erasure — "right to be forgotten" (Art. 17): deletion of account and all associated data
• Restriction of processing (Art. 18): suspension of processing in certain cases
• Data portability (Art. 20): receive data in a structured, machine-readable format
• Objection (Art. 21): object to processing based on legitimate interest
• Restriction of processing (Art. 18): suspension of processing in certain cases provided for by law (e.g. contestation of data accuracy)
• Objection to direct marketing (Art. 21(2)): you may object at any time to the processing of your data for direct marketing purposes, including profiling. The objection is absolute and requires no justification.
• Withdrawal of promotional consent: at any time, without affecting access to the service

To exercise your rights, write to jes.socialdellemozioni@gmail.com. We will respond within 30 days.

7 Cookies and tracking technologies

The site jessocial.com does not use profiling cookies or third-party advertising trackers. We use only:

• Technical session cookies: strictly necessary for authentication — exempt from consent requirements under the ePrivacy Directive (2002/58/EC)
• localStorage: local storage of the session token on the user's device — not transmitted to third parties

We do not use analytical cookies, profiling cookies or third-party advertising trackers. The transmission of the IP address to Google LLC for font loading (Google Fonts) is the only technical transfer to a third party and is detailed in Section 4. No cookie consent is required to access or use the Platform.

8 Security measures

We adopt appropriate technical and organisational measures pursuant to Art. 32 GDPR:

• Encryption in transit (HTTPS/TLS 1.2+)
• Password hashing (bcrypt)
• Row-Level Security (RLS) on the database
• Admin panel access restricted to users with the admin role
• Data access limited to authorised personnel on a least-privilege basis

9 Minors

JES is reserved for persons aged 16 or over. We do not knowingly collect data from minors under 16. If we become aware of such data, we will immediately delete the account and all associated data. Reports to jes.socialdellemozioni@gmail.com.

10 Updates to this Policy

The Controller reserves the right to update this Policy. In the event of material changes, registered users will be notified by email or in-app notification at least 14 days before the changes take effect.

11 Contact and right to lodge a complaint

• Email: jes.socialdellemozioni@gmail.com
• Website: jessocial.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante Privacy — garanteprivacy.it).

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User") and JES — The Social of Emotions ("JES", "we", "the Platform") and govern your access to and use of the service available at jessocial.com.

By accessing or using JES, you declare that you have read, understood and fully accepted these Terms and our Privacy Policy. If you do not accept the Terms, you may not access or use the Platform.

1 1. Eligibility

You may register and use JES only if you:

• Are at least 16 years old
• Have the legal capacity to enter into a binding agreement
• Have not previously been suspended or permanently banned from JES
• Do not reside in a country subject to embargo under European Union or United States law

Users between 16 and 17 years old must obtain prior consent from a parent or legal guardian. By registering, they implicitly declare that they have such consent.

2 2. Account & User Responsibility

• You are solely responsible for keeping your login credentials (email and password) secure
• Each individual may register only one active account
• Profile information must be truthful, accurate and not misleading
• Impersonating other people, brands, public figures or official accounts, including @jes_official, is prohibited
• You are responsible for all activities carried out through your account
• Phone number and nationality, if provided, must be truthful

In the event of unauthorised access, notify us immediately at jes.socialdellemozioni@gmail.com. JES is not responsible for damages arising from failure to notify in a timely manner.

3 3. User Content

You are solely responsible for the content you publish on JES — posts, stories, comments, direct messages, polls, group posts — and you declare that such content does not violate third-party rights or applicable law.

Licence: By publishing content on JES, you grant us a worldwide, non-exclusive, royalty-free, sublicensable and transferable licence to reproduce, distribute, display and make available such content solely within the operation of the Platform. We do not use your content for external advertising purposes or to train artificial intelligence models.

Ownership: JES does not acquire ownership of your content. By deleting content or your account, the above licence automatically terminates.

Stories: are automatically deleted 24 hours after publication.

4 4. Prohibited Conduct

The following are expressly prohibited:

• Publishing illegal, defamatory, obscene, violent, pornographic content or content that incites hatred or discrimination
• Harassing, threatening, stalking or intimidating other users (cyberbullying)
• Publishing or distributing child sexual abuse material (CSAM) — this will be immediately reported to the competent authorities
• Spreading spam, using automated bots, creating fake accounts or conducting artificial engagement activities
• Infringing third-party intellectual property rights (copyright, trademarks, patents)
• Attempting to gain unauthorised access to systems, data or third-party accounts
• Creating new accounts to evade previously imposed suspension measures
• Collecting personal data of other users without their consent (scraping, harvesting)
• Publishing personal information of third parties without consent (doxing)
• Using the Platform for phishing, malware distribution or other fraudulent activities

5 5. Moderation & Enforcement

JES reserves the unquestionable right to:

• Remove any content that violates these Terms or applicable law
• Temporarily suspend or permanently ban accounts for serious or repeated violations, without prior notice where urgent action is required (e.g. CSAM, cyberattacks, fraud)
• Restrict certain features for specific accounts
• Report illegal content to the competent authorities, in particular CSAM material

To appeal a suspension, send a reasoned communication to jes.socialdellemozioni@gmail.com within 30 days of notification. JES will respond within 30 working days.

6 6. Groups & Communities

JES allows users to create and participate in themed groups and communities. The same Terms and Community Guidelines apply within groups. JES reserves the right to remove any group that violates these Terms.

Group administrators are users with additional moderation permissions within their own space. They do not act as "data processors" under Art. 28 GDPR: GB Studio S.r.l. remains the sole data controller for all personal data on the Platform. Group admins are responsible for their own moderation actions and are personally liable for any breach of these Terms committed in the exercise of such functions.

7 7. JES Intellectual Property

The name "JES", the trademark, logo, Platform design, source code, editorial texts and all other distinctive elements are the exclusive property of JES and protected by applicable intellectual property law.

Any reproduction, modification, distribution or commercial use without prior written authorisation from JES is prohibited.

The @jes_official account is the only official JES profile on the Platform.

8 8. Sponsored Content & Third-Party Links

The JES feed may include sponsored posts from selected partners (GB Studio, GNG Agency, GES Company, Mercury Auctions), clearly identified as such. JES is not responsible for the products, services or content of third-party sites accessible via such links.

Links in user bios and posts are detected automatically. JES does not verify or guarantee the accuracy or legality of external website content.

JES ARC — Category-based personalised advertising
Based on the role chosen during registration, users may see dedicated JES ARC advertising content: "JES ARC Artisti" reserved for artists, professional artists and students; "JES ARC Aziende" reserved for galleries and companies. Such content is clearly marked as sponsored and includes a "Scopri di più" button allowing the user to request a free consultation from a JES expert by writing to jes.socialdellemozioni@gmail.com.

9 9. Promotional Communications

JES may send promotional communications, newsletters and Platform updates exclusively to users who have given explicit consent during registration by selecting the relevant option ("I agree to receive promotions and news from JES").

Consent is entirely optional and does not affect access to the service. You may withdraw it at any time by sending a request to jes.socialdellemozioni@gmail.com.

10 10. Service Availability

JES is provided "as is / as available". We do not guarantee the absence of interruptions, errors or discontinuities in the service. We reserve the right to suspend, modify or discontinue the service at any time, with or without notice, for maintenance, technical updates or any other reason.

11 11. Disclaimer & Limitation of Liability

To the maximum extent permitted by applicable law, JES is not liable for:

• Indirect, incidental, special, consequential or punitive damages arising from the use or inability to use the Platform
• Content published by users
• Loss, alteration or unauthorised access to data caused by the user's own conduct
• Service interruptions arising from force majeure or third-party providers

Where not waivable by law, the provisions of the Consumer Code (Legislative Decree 206/2005) apply for the protection of consumers.

12 12. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with Italian law. For any dispute arising from these Terms or the use of JES, the competent court is the Court of Milan (Italy), without prejudice to any mandatory provisions of the Consumer Code applicable to consumers.

13 13. Account Deletion

You may request deletion of your account at any time from the Platform settings or by sending a written request to jes.socialdellemozioni@gmail.com. Deletion is irreversible: posts, comments, messages and profile data will be removed within 30 days of the request.

14 14. Indemnification

The user agrees to indemnify and hold harmless GB Studio S.r.l., its directors, employees, collaborators and successors from any claim, damage, loss, liability or expense (including reasonable legal fees) arising from:

• Content published by the user on the Platform
• Violation of these Terms or applicable law
• Infringement of third-party rights (including intellectual property rights or personality rights)
• Unauthorised use of the account by third parties due to the user's negligence in safeguarding their credentials

15 15. Changes to the Terms

JES reserves the right to modify these Terms at any time. In the event of material changes, registered users will be notified by email or in-app notification at least 14 days before the changes take effect.

16 16. Contact

For any enquiry regarding these Terms, Privacy or support:

• GB Studio S.r.l. — P.IVA 03160850164
• Email: jes.socialdellemozioni@gmail.com
• Website: jessocial.com