Support · Security
Security and GDPR: what CJM does with your data
Consent, access and data, described as the product works today.
In short
CJM sends data to Meta, Google and GA4 following the consent collected by your site's banner, with connections for Iubenda and Cookiebot. The MCP server is read-only and uses OAuth. Data deletion and export are coming soon. This page describes the product: it is not legal advice.
Consent
CJM does not replace your cookie banner: it reads its signals. There are connections for Iubenda and Cookiebot, and four Consent Mode v2-style consent signals that CJM also publishes to Google Tag Manager. Sending follows consent: without it, nothing is sent.
Access
The MCP server, which connects CJM to Claude and ChatGPT, uses OAuth and works read-only on aggregated data.
Data and deletion
Data deletion and export are coming soon. When they ship, deletion will follow a date declared in advance and we will notify you by email, because it is a legal obligation and not a commercial deadline.
What this page does not say
It does not claim certifications and it is not legal advice. Data location and the list of providers are not published here yet.
Questions about GDPR and data
What happens if the visitor does not give consent?
CJM follows your banner's signals. Without the required consents, sending to the platforms does not start: Meta, for example, blocks without consent for user data and personalization.
Can I delete and export my data?
Coming soon. Deletion and export are features in development: they only go live when they ship, and this page will change with them.
Does CJM guarantee my site's GDPR compliance?
No. CJM respects the consent you collect, but your site's compliance remains yours and your advisor's. This is not legal advice.
Which consent systems does it work with?
Iubenda and Cookiebot, with four Consent Mode v2-style signals. The Cookiebot connection is described in the documentation and should be checked against your banner.
Is Claude or ChatGPT access to my data safe?
The MCP server uses OAuth and is read-only: whoever connects it can ask questions about aggregated data, not change it.
Enter your site. CJM takes care of tracking.
From first click to signed contract.