Joqiva Cookie Policy

2 June 2026

This Cookie Policy explains how Joqiva uses cookies and similar technologies that store information on, or access information from, your device. It applies to Joqiva websites, web applications, customer-facing quote and invoice pages, documented interfaces, communications and related services that link to this Cookie Policy. This Cookie Policy should be read together with our Privacy Policy. Where consent, refusal, objection or preference choices are required, they are handled through Joqiva Cookie Settings, app settings, account settings, a consent banner or another clearly labelled control where available.

Joqiva is operated by FOP Mykola Marchuk Mykolaiovych, an individual entrepreneur registered in Ukraine, trading as Joqiva. Joqiva's current legal entity details, trading name, website, country of establishment, establishment address, correspondence address, registration information, tax status, contact details, privacy contact and UK/EU representative details, where required, are maintained in the Legal Notice.

Cookies are small text files stored on your device when you visit a website or use an online service. This Cookie Policy also covers similar technologies that store information on, or access information from, your device. These may include: (a) cookies; (b) local storage; (c) session storage; (d) tracking pixels; (e) scripts and tags; (f) software development kits, also called SDKs; (g) device identifiers; (h) application storage; (i) link decoration and navigational tracking; (j) fingerprinting technologies; and (k) similar storage or access technologies. In this Cookie Policy, we refer to all of these as "cookies and similar technologies". Some security, audit, error, request and operational records do not necessarily store information on, or access information from, your device. Those records are explained in the Privacy Policy. Where a technology stores information on, or accesses information from, your device, this Cookie Policy applies.

Joqiva may use cookies and similar technologies to: (a) provide the Service; (b) keep you logged in; (c) authenticate users; (d) protect accounts and workspaces; (e) maintain security; (f) prevent abuse; (g) remember cookie choices; (h) remember preferences where enabled; (i) operate customer-facing pages; (j) support subscription checkout and billing where configured; (k) measure website and product performance where analytics cookies or similar technologies are used with consent, or where a lawful PECR exception applies; (l) understand how users interact with Joqiva where analytics cookies or similar technologies are used with consent, or where a lawful PECR exception applies; (m) improve the Service; (n) support affiliate attribution where configured and where valid consent has been given; (o) support marketing or advertising where the relevant technology has been selected, configured and the required consent has been given; and (p) comply with legal and security obligations. Joqiva does not treat advertising, remarketing, cross-site tracking, general business convenience or revenue generation as strictly necessary.

Joqiva uses a conservative cookie consent approach. Strictly necessary cookies and similar technologies are always on because they are needed to provide a service you request, transmit communications, authenticate users, secure accounts, prevent fraud or abuse, remember cookie choices, or otherwise operate essential parts of the Service. Non-essential cookies and similar technologies that store information on, or access information from, your device do not run before consent unless a specific PECR exception applies and Joqiva has implemented the required transparency and objection controls. Where consent is required, Joqiva will collect consent that is freely given, specific, informed and given through a clear positive action. This means that, unless an applicable legal exception clearly applies, we ask for consent before using: (a) functional or preference technologies that are not strictly necessary and do not fall within the appearance exception; (b) analytics or performance technologies; (c) marketing or advertising technologies; (d) non-essential third-party tracking technologies; and (e) non-essential SDK or device identifier features. If Joqiva later relies on the statistical purposes exception or the appearance exception instead of consent, Joqiva will provide clear and comprehensive information and a simple way to object free of charge. We do not use pre-ticked boxes for non-essential categories. We do not use silence, inactivity, continued browsing, or acceptance of Terms of Service as consent for non-essential cookies. Our cookie banner and settings are designed to allow you to: (a) accept optional cookies and analytics storage; (b) reject optional cookies and analytics storage; (c) manage settings; (d) choose available categories separately; (e) save your preferences; and (f) change, object to, or withdraw your choices later. Where non-essential cookies or similar technologies require consent, the consent mechanism should make "Accept", "Reject" and "Manage settings" choices clear and similarly accessible. Joqiva will not treat continued browsing, closing a banner without choosing, accepting Terms of Service, or using the Service as consent to non-essential cookies.

5.1 Strictly necessary cookies and similar technologies These are needed for Joqiva to work properly. They may be used for: (a) login and authentication; (b) session management; (c) workspace access; (d) account security; (e) fraud and abuse prevention; (f) request security and similar security controls; (g) load balancing; (h) customer-facing page access; (i) remembering your cookie consent choice; (j) maintaining checkout or subscription billing security where a billing provider is used; and (k) other functions necessary to provide the Service you request. Strictly necessary cookies and similar technologies are always active. You cannot switch these off through Joqiva Cookie Settings, because the Service may not work correctly without them. You may be able to block some of them through your browser or device settings, but doing so may stop Joqiva from working properly. 5.2 Functional and preference cookies These help Joqiva remember choices and improve usability. They may be used for: (a) language preferences; (b) display preferences; (c) interface preferences; (d) workspace-related preferences; (e) recently used settings; (f) timezone or regional display preferences; (g) accessibility preferences; and (h) other user preferences. At launch, Joqiva treats optional persistent functional and preference cookies as non-essential unless they are strictly necessary for a feature you request or fall within an applicable PECR exception. If Joqiva relies on the appearance exception for a functional or preference technology, Joqiva will provide clear information and a simple way to object. 5.3 Analytics and performance cookies These help us understand how Joqiva is used and how it performs. They may be used for: (a) page visits; (b) traffic sources; (c) feature usage; (d) performance measurement; (e) error trends; (f) signup flow measurement; (g) aggregate statistics; (h) product improvement; and (i) service reliability analysis. Joqiva does not use analytics or performance cookies or analytics browser storage before consent unless Joqiva clearly states that it relies on a lawful PECR exception and provides the required information and objection control. Where analytics cookies, browser storage, pixels, scripts, tags, device identifiers or similar technologies require consent, they will not run before valid consent is given. Where Joqiva uses limited analytics that do not store information on, or access information from, your device, those records may be explained in the Privacy Policy rather than this Cookie Policy. If Joqiva relies on the statistical purposes exception, Joqiva will use the technology only for statistical information about how the Service or website is used with a view to improving it, will provide clear information, and will provide a simple way to object free of charge. Joqiva does not intentionally use analytics providers to process customer quote content, invoice content, payment proof content, bank details, payment instructions, AI raw input or output, email bodies, customer names, customer email addresses, customer phone numbers, credentials, secrets or full URLs containing access information. Intrusive analytics such as replay-style monitoring, heatmap-style monitoring, automatic capture of page activity and similar technologies are not used unless this Cookie Policy and Cookie Settings clearly say otherwise and the required consent or objection controls are in place. Joqiva also uses internal product analytics based on service activity and usage counters. Where product analytics uses cookies or similar technologies, this Cookie Policy applies. 5.4 Marketing, advertising and affiliate attribution cookies These may be used to measure or support marketing, advertising, affiliate attribution or promotional activity. They may be used for: (a) advertising measurement; (b) campaign performance; (c) remarketing; (d) social media advertising; (e) conversion tracking; (f) affiliate attribution; (g) marketing attribution; and (h) understanding engagement with Joqiva marketing. Joqiva does not use marketing, advertising or affiliate attribution cookies before valid consent. Marketing cookies and advertising technologies are not currently used unless this Cookie Policy, Cookie Settings or another notice says otherwise. If Joqiva uses a cookie, local storage or similar technology to store an affiliate click reference or campaign reference, Joqiva treats that storage as marketing or attribution storage and will not use it before valid consent. Partner commission, where applicable, is validated using Joqiva business records and partner programme rules. Browser pixels, checkout success pages or client-side events are not treated as conclusive proof of commission. 5.5 Security and fraud prevention technologies Some security and fraud prevention technologies are strictly necessary and always active. These may include technologies used for: (a) login protection; (b) session security; (c) suspicious activity detection; (d) abuse prevention; (e) request security; (f) audit logging where device storage or access is required; and (g) service integrity. Where a security technology is necessary to provide or protect the Service requested by the user, it is treated as strictly necessary. If Joqiva uses a security or fraud prevention technology that is not strictly necessary, Joqiva will treat it as non-essential unless another applicable legal exception clearly applies. 5.6 Email tracking technologies Joqiva may process email delivery data, bounce data and technical email metadata as explained in the Privacy Policy. Open and click tracking is disabled by default. If Joqiva enables open tracking, click tracking, tracking pixels, link tracking or similar technologies in emails, Joqiva will assess whether consent, another PECR rule, or another lawful basis is required before enabling the feature. Customer-facing operational emails, quote emails, invoice emails and reminders are not marketing emails by default, but email pixels, click tracking and similar technologies may still involve PECR and data protection rules.

6.1 Marketing site On Joqiva marketing websites and public pages, we may use cookies and similar technologies for site operation, security, cookie consent, preferences, analytics where consent has been given or where a lawful PECR exception applies, and marketing or affiliate attribution where valid consent has been given. Marketing cookies and advertising technologies are not currently used unless this Cookie Policy or Cookie Settings says otherwise. Affiliate click-reference storage is not active unless Joqiva configures it and provides the required consent controls. Non-essential analytics, marketing and affiliate attribution technologies do not run before consent unless a lawful PECR exception applies and the required information and objection controls are provided. 6.2 Web application In the Joqiva web application, we may use cookies and similar technologies for login, authentication, workspace access, security, session management, preferences, product operation, support of paid subscription features, and analytics where consent has been given or where a lawful PECR exception applies. Strictly necessary authentication and security technologies are always active. 6.3 Documented interfaces Documented interfaces may use security and account-access controls. Where any technology stores information on, or accesses information from, a user's device, this Cookie Policy applies. 6.4 Customer-facing quote and invoice pages Customer-facing quote and invoice pages may use strictly necessary technologies to display the page, protect access, maintain security, record quote acceptance, record quote decline, record quote questions, record document download requests, record "I've paid" interactions, process uploaded files where enabled, and support audit history. Joqiva does not use marketing or advertising cookies on customer-facing quote and invoice pages by default. Joqiva should avoid non-essential analytics cookies or similar tracking technologies on customer-facing quote and invoice pages unless a clear consent mechanism or applicable PECR exception is implemented for End Customers. If Joqiva later adds non-essential analytics, marketing or tracking technologies to customer-facing pages, Joqiva will provide the relevant information and controls before those technologies run, unless a specific PECR exception applies and the required information and objection controls are provided.

Joqiva's AI-assisted features do not set approved AI provider cookies directly on your device for AI-assisted processing. AI-assisted processing is handled through Joqiva systems and approved service providers where the feature is enabled. AI-assisted processing is explained in our AI Processing Notice.

Joqiva may use a billing provider or merchant of record for Joqiva subscription fees. Subscription billing is for Joqiva subscription fees only. It is separate from End Customer invoice payments. Billing providers are not used for customer invoice bank-transfer payment tracking. Joqiva does not process, collect, hold, transfer, settle or control payments owed by End Customers to Joqiva customers. A billing provider may use cookies or similar technologies during checkout, payment method collection, billing authentication, fraud prevention, payment confirmation or subscription management. Where those technologies are necessary to complete subscription checkout or protect billing security, they may be treated as strictly necessary. Where a billing provider uses its own cookies or similar technologies on its own hosted pages or services, its own cookie policy and privacy policy may also apply. Current billing provider information is made available at checkout, in billing documentation, in the Refund Policy or in the Subprocessors page where applicable.

Some cookies and similar technologies may be set by third-party providers that support Joqiva service categories. These may include providers for: (a) subscription checkout and billing; (b) analytics where consent has been given or a lawful PECR exception applies; (c) marketing or affiliate attribution where consent has been given; (d) security where necessary; (e) customer support where configured; and (f) embedded third-party features where configured. We configure third-party technologies so that non-essential cookies and tracking do not run before consent unless a lawful PECR exception applies. Third-party providers may process information under their own terms and privacy policies where they act independently. Approved subprocessors and relevant provider information are listed at Subprocessors page where applicable.

The exact cookies and similar technologies used by Joqiva may change over time. This inventory summarises the main categories used by Joqiva. Cookie Settings or provider-hosted pages may show additional details where applicable. We will update this section when we add, remove or materially change cookies or similar technologies. 10.1 Strictly necessary technologies Name / key: Joqiva cookie consent preference Provider: Joqiva Domain / service: Joqiva websites, web application and relevant Joqiva-controlled pages Technology type: Cookie, local storage or similar technology Purpose: Stores your cookie consent, refusal, objection or preference choices. Category: Strictly necessary Duration: Up to 24 months Runs before consent: Yes Name / key: Joqiva session or authentication technology Provider: Joqiva or approved authentication provider Domain / service: Joqiva web application and relevant Joqiva-controlled pages Technology type: Cookie, local storage, session storage or similar authentication technology Purpose: Keeps you logged in, manages sessions, protects account access and supports workspace access. Category: Strictly necessary Duration: Session or authentication period configured by Joqiva Runs before consent: Yes, where required for login or app access Name / key: Joqiva security technology Provider: Joqiva or approved security provider Domain / service: Joqiva websites, web application and customer-facing pages Technology type: Cookie, security challenge or similar technology Purpose: Protects the Service from abuse, excessive requests, automated attacks, suspicious activity and security threats. Category: Strictly necessary where required for security or service protection Duration: As needed for security and abuse prevention, usually session or short security period unless a longer period is required for security Runs before consent: Yes, where strictly necessary 10.2 Functional and preference technologies Name / key: Joqiva user preference technology Provider: Joqiva Domain / service: Joqiva websites or web application Technology type: Cookie, local storage, app storage or similar technology Purpose: Remembers interface, accessibility, display, timezone, regional or workspace-related preferences. Category: Functional / preferences Duration: Until replaced, cleared by the user, or cleared by Joqiva product functionality, unless a shorter period is stated in Cookie Settings Runs before consent: No, unless strictly necessary for a feature requested by the user or unless Joqiva relies on a lawful appearance exception with clear information and a simple way to object 10.3 Analytics and performance technologies Name / key: Joqiva analytics technology Provider: Joqiva or approved analytics provider Domain / service: Joqiva websites, web application and Joqiva-controlled pages where analytics is enabled Technology type: Cookie, browser storage, script, tag or similar technology where configured Purpose: Helps Joqiva understand limited website and product usage, performance, reliability and service improvement. Category: Analytics / performance Status: Used only where enabled and where consent has been given or a lawful PECR exception applies. Duration: As stated in Cookie Settings or the relevant provider information. Joqiva will use a duration that is proportionate to the analytics purpose. Runs before analytics consent: No, unless Joqiva relies on a lawful PECR exception and provides the required information and objection control. Limitations: Joqiva does not intentionally use analytics technologies to process customer quote content, invoice content, payment proof content, bank details, payment instructions, AI raw input or output, email bodies, customer names, customer email addresses, customer phone numbers, credentials, secrets or full URLs containing access information. 10.4 Marketing, advertising and affiliate attribution technologies Name / key: Marketing, advertising or affiliate attribution technology Provider: Joqiva or approved marketing, advertising or affiliate provider Domain / service: Joqiva marketing pages where the relevant feature is enabled Technology type: Cookie, tracking pixel, script, tag, local storage or similar technology Purpose: Supports campaign measurement, affiliate attribution, marketing attribution, advertising, remarketing or promotional analytics. Category: Marketing / advertising / affiliate attribution Status: Not used unless selected, configured and disclosed. Duration: As stated in Cookie Settings or the relevant provider information. Runs before consent: No. 10.5 Subscription billing technologies Name / key: Billing provider checkout or customer portal technology Provider: Billing provider or merchant of record Domain / service: Provider-hosted checkout or customer portal pages, or Joqiva-controlled checkout pages where applicable Technology type: Cookie or similar technology Purpose: Supports subscription checkout, billing security, payment method handling, fraud prevention, payment confirmation or subscription management for Joqiva subscription fees. Category: Strictly necessary where required for checkout or billing security; otherwise category depends on purpose Status: Active where a user opens subscription checkout or the customer portal Duration: Set by the billing provider according to its checkout, portal, security and billing requirements Runs before consent: Yes where strictly necessary for subscription checkout or billing security; otherwise no unless consent is given or a lawful PECR exception applies 10.7 Email tracking technologies Name / key: Email open tracking pixel or click tracking link Provider: Joqiva or approved email provider Domain / service: Email communications Technology type: Tracking pixel, link tracking or similar technology Purpose: May record whether an email was opened or whether a link was clicked. Category: Email tracking / analytics Status: Open and click tracking is disabled by default. Duration: Not applicable while disabled. Runs before consent: Not applicable while disabled. If enabled later, Joqiva will assess and implement the applicable PECR, privacy and consent requirements before use. 10.8 Related operational records that are not necessarily cookies Name / key: Security, audit, request, operational or error records Provider: Joqiva or approved service provider Domain / service: Joqiva websites, web application, customer-facing pages or related services Technology type: Operational processing or request metadata Purpose: Protects the Service, supports audit history, validates requests, investigates incidents, prevents abuse, monitors reliability and supports operations. Category: Not necessarily a cookie or storage/access technology unless information is stored on, or accessed from, your device. Duration: Explained in the Privacy Policy and retention terms. Runs before consent: Not applicable where no device storage/access occurs. If device storage/access is used, the relevant category above applies.

We may keep records of cookie consent, refusal, objection and preference choices so that we can demonstrate and respect your preferences. These records may include: (a) consent status; (b) objection status where applicable; (c) selected categories; (d) timestamp; (e) policy version; (f) consent mechanism version; (g) device or browser identifier; (h) approximate technical metadata; and (i) whether the choice was accepted, rejected, customised, objected to or withdrawn. We may retain cookie consent and objection records for up to 24 months, unless a longer period is required for legal, compliance, dispute or security reasons. We will not repeatedly ask you to consent after you have rejected optional cookies or analytics storage simply because we prefer a different answer. We may ask you to make a new choice where the law, the technology, the purposes, the provider list, or the consent record retention period reasonably requires it.

You can change, withdraw or object to your cookie choices at any time through Cookie Settings where available. Cookie Settings may be available: (a) in the website footer; (b) in app settings; (c) in account settings; or (d) through another clearly labelled Cookie Settings link. When you withdraw consent, Joqiva will stop using consent-based non-essential cookies and similar technologies for the relevant categories. Withdrawing or rejecting analytics cookies or similar storage stops Joqiva from using consent-based analytics cookies or storage for analytics measurement. It does not necessarily stop strictly necessary processing, security processing, or limited analytics or operational measurement that does not require consent under applicable law. Some strictly necessary technologies may continue because they are needed to provide, secure or operate the Service. Where Joqiva relies on the statistical purposes exception or appearance exception instead of consent, objecting will stop the relevant storage or access unless another lawful basis or strictly necessary purpose applies. Withdrawing consent or objecting does not affect the lawfulness of any use before withdrawal or objection.

You may also control cookies through your browser or device settings. Most browsers allow you to: (a) block cookies; (b) delete cookies; (c) receive warnings before cookies are stored; or (d) limit certain tracking technologies. Mobile devices may also provide settings for app permissions, advertising identifiers, notifications, location, diagnostics and similar features. If you block strictly necessary cookies or similar technologies, Joqiva may not work correctly. Joqiva does not rely only on browser or device settings as consent for non-essential cookies unless Joqiva can demonstrate that the setting clearly satisfies the legal requirements for consent in the relevant context.

Customer-facing quote and invoice pages may be used by End Customers who do not have a Joqiva account. These pages may use strictly necessary technologies to: (a) display the quote or invoice page; (b) protect access to the page; (c) prevent abuse; (d) support document download; (e) record quote view, acceptance, decline or question events; (f) record invoice view or payment report events; (g) support payment proof upload where enabled; and (h) support audit and security history. Joqiva does not use marketing or advertising cookies on customer-facing quote and invoice pages by default. Joqiva should avoid non-essential analytics cookies or similar tracking technologies on customer-facing quote and invoice pages unless a clear consent mechanism or applicable PECR exception is implemented for End Customers. If Joqiva later adds non-essential analytics, marketing or tracking technologies to customer-facing pages, Joqiva will provide the relevant information and controls before those technologies run, unless a specific PECR exception applies and the required information and objection controls are provided.

Joqiva websites or communications may link to third-party websites, social media pages or provider-hosted pages. This Cookie Policy does not control cookies or similar technologies used by third-party websites or services after you leave Joqiva-controlled pages. If Joqiva embeds a third-party feature, plugin, pixel, tag, SDK or similar technology on a Joqiva-controlled page, Joqiva will assess whether consent, an objection mechanism, or another legal requirement applies before enabling it. Joqiva will not enable non-essential third-party storage or access technologies before consent unless a lawful PECR exception applies. If you visit a social media platform, payment provider page or another third-party website, that third party's own cookie policy and privacy policy may apply.

We may update this Cookie Policy from time to time. We may update it when: (a) we add or remove cookies or similar technologies; (b) we change providers; (c) we change cookie categories; (d) we change consent or objection settings; (e) we change retention periods; (f) legal requirements change; or (g) we improve the Service. If we make material changes to our use of non-essential cookies or similar technologies, we will ask you to make a new consent choice where required by law. If we introduce a new storage or access technology for a different purpose from the purpose you originally accepted, we will request fresh consent where required or provide the required objection control where an exception applies.

For questions about this Cookie Policy or Joqiva's use of cookies and similar technologies, use the contact details maintained in the Legal Notice. The current privacy contact and legal contact are listed in the Legal Notice.