Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains how the Jaqpot platform ("Jaqpot", "we", "us", or "our") collects, uses, shares, and protects personal data when you use our websites, applications, APIs, and related services (collectively, the "Service").

1. Who we are

The Service is operated by the Unit of Control and Informatics of the National Technical University of Athens (NTUA), Greece. For the purposes of the General Data Protection Regulation (GDPR), we act as the data controller for the personal data described in this policy.

For any privacy-related question or request, you can contact us at jaqpot@jaqpot.org.

2. Personal data we collect

Account data: first name, last name, username, email address, profile picture, organization membership, and account identifiers used for authentication.
Content and activity data: models, datasets, prediction requests and results, API keys, comments, chat messages, and other content you submit to the Service.
Technical data: IP address, browser and device information, timestamps, request logs, and cookie or similar identifiers.

3. How we use personal data

We use personal data to:

create and manage accounts, organizations, and access rights;
provide, operate, maintain, and improve the Service;
execute model training, deployment, prediction, and other features you request;
monitor usage, prevent abuse, troubleshoot issues, and respond to support requests;
communicate with you about the Service, security, and updates;
comply with legal obligations and enforce our terms.

Our legal bases under the GDPR are: performance of a contract (providing the Service), legitimate interests (security, reliability, support, and improvement of the Service), consent (where required, for example for optional cookies or communications), and legal obligation.

4. Administrator access notice

Account and usage information is visible to authorized Jaqpot administrators. For support, security, monitoring, and operational purposes, authorized administrators may access your account details (including your first name, last name, username, and email address), the models and datasets you submit, and the history of prediction requests associated with your account.

Administrator access is restricted to personnel who need it to operate and support the Service, is subject to confidentiality obligations, and is not used for unrelated purposes. Administrative access is logged and reviewed as part of our security controls.

5. Sharing and disclosure

We do not sell personal data. We may share personal data with service providers that help us operate the Service (for example hosting, storage, email, and monitoring providers), with your organization where you are a member and the Service makes shared resources available, and with public authorities where required by law. Service providers act on our instructions and are bound by appropriate data protection terms.

6. Retention and deletion

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Content such as prediction datasets may be deleted or anonymized after a retention period. You may request deletion of your account and personal data as described below.

7. Your rights

Subject to applicable law, you have the right to access, correct, or delete your personal data, to restrict or object to its processing, to receive a portable copy of the data you provided, and to withdraw consent at any time where processing is based on consent. To exercise these rights, contact us at jaqpot@jaqpot.org. You also have the right to lodge a complaint with a supervisory authority, including the Hellenic Data Protection Authority.

8. Cookies and similar technologies

We use cookies and similar technologies that are necessary for authentication, security, and core functionality, and to remember your preferences. Where required, we ask for your consent before using non-essential cookies. You can control cookies through your browser settings, although disabling essential cookies may prevent the Service from working correctly.

9. Security

We use administrative, technical, and organizational measures to protect personal data, including access controls, encryption in transit, audit logging, and regular review of administrative access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

The Service is primarily operated within the European Economic Area. If personal data is transferred outside the EEA, we will implement appropriate safeguards as required by applicable data protection law.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and update the date above. We encourage you to review this page periodically.

12. Contact

Questions, requests, or concerns about this Privacy Policy can be sent to jaqpot@jaqpot.org.