Privacy Policy

Introduction

Jini (operated by Amigo Softcom LLP, "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at jini.app.

Data Controller

Amigo Softcom LLP is the data controller responsible for your personal data. For any privacy-related inquiries, you can contact us at tax@jini.app.

Information We Collect

We collect information that you provide directly to us, including:

• Account Information - Name, email address, phone number, organization name, and password
• Contact Information - WhatsApp numbers, Slack user IDs, and email addresses for reminder recipients
• Integration Data - OAuth tokens for Slack, Gmail, and Google integrations (stored securely)
• Documents - Proof documents you upload to track completed filings

How We Use Your Information

We use the information we collect to:

• Send tax filing reminders through your preferred channels (email, WhatsApp, Slack)
• Provide and maintain our service
• Store and manage your compliance documents
• Authenticate your identity via Google Sign-In
• Communicate with you about your account
• Improve our services

Data Purpose Table (SEC-030)

The following table explains what data we collect, why, how long we keep it, and our legal basis:

Data Type	Purpose	Retention	Legal Basis
Email Address	Account authentication, sending reminders, account recovery	Until account deletion	Contract performance, Consent
Phone Number	WhatsApp reminders, account verification	Until account deletion	Consent
Name	Personalization, addressing in communications	Until account deletion	Contract performance
PAN/GSTIN/CIN	Entity identification, compliance tracking, filing deadlines	8 years (tax records)	Legal obligation, Contract
Compliance Documents	Proof of filing, audit readiness	8 years (tax records)	Legal obligation, Contract
Proof Identifiers (ARN, SRN, etc.)	Filing verification, compliance status computation	8 years (tax records)	Legal obligation, Contract
OAuth Tokens	Google/Slack/Discord integration access	Until revoked or expired	Consent
Chat Messages	AI assistant context, query history	90 days	Consent
Usage Data	Service improvement, error debugging	180 days	Legitimate interest
Login History	Security, suspicious activity detection	180 days (CERT-In)	Legal obligation

Data Storage and Security

Your data is stored securely on servers located in data centers with industry-standard security measures. We use encryption for data in transit and at rest. OAuth tokens are stored securely and are only used to send reminders on your behalf.

Third-Party Services

We integrate with the following third-party services to provide our functionality:

Authentication & Communication

• Google - For Google Sign-In authentication, Gmail integration, and Google Drive document import
• Slack - To send reminders to your Slack workspace
• Discord - To send reminders to Discord channels
• Meta (WhatsApp Business API) - To send WhatsApp notifications
• AISensy - WhatsApp Business API provider
• Postmark/SendGrid/Mailgun - For email delivery

AI Services (Data Processing)

We use artificial intelligence to provide features like document classification, chat assistance, and email analysis. AI processing only occurs when you have enabled it in your workspace settings.

Automatic PII Redaction (SEC-036)

AI Service Providers

• Groq (United States) - Llama 3.3 for document classification, chat assistance, and email analysis. Receives: redacted text only (no PII, no images, no original documents).

How AI Processing Works

When AI is enabled in your workspace:

• Document Upload: Text is extracted locally, PII is automatically redacted, and only the sanitized semantic text is sent for classification. Original files and images never leave our servers.
• Chat: Your messages are scanned for PII, which is redacted before sending to AI. The AI receives questions like "What is my [PAN_REDACTED] filing status?" not actual identifiers.
• Email Analysis: Email content is redacted (sender, subject, body) before AI analysis for intent detection.

When AI is disabled:

• No document content is sent to AI providers
• You manually classify documents
• AI chat is not available
• Email analysis is disabled
• Core compliance features continue to work normally

What Is NEVER Sent to External AI

• Any personal identifiers - PAN, Aadhaar, GSTIN, CIN, DIN, Voter ID, Passport numbers
• Contact information - Phone numbers, email addresses
• Financial identifiers - Bank account numbers, IFSC codes
• Original documents or images - Only extracted, redacted text
• Passwords or credentials - Never transmitted anywhere

Your Control: You can enable or disable AI processing at any time in your workspace Settings. Disabling AI will immediately stop all AI processing for your workspace.

Data Flow Summary

Service	Data Shared	What Is NOT Shared	Location
Groq (AI)	Redacted text only (semantic content with PII replaced by tokens)	No PAN, Aadhaar, GSTIN, phone, email, bank details, images, or documents	US
Google	Auth tokens, emails (for sync), files (for import)	Passwords, tax identifiers	US
Slack/Discord	Reminder messages (no tax identifiers)	PAN, GSTIN, documents	US
Meta WhatsApp	Phone numbers, reminder messages	PAN, GSTIN, documents, tax details	US
Email providers	Email addresses, reminder content	Full documents, tax identifiers	US

Each third-party service has its own privacy policy. We only share the minimum data necessary to provide our services.

Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by visiting our Data Deletion Request page or contacting us at tax@jini.app.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Withdraw consent for data processing
• Lodge a complaint with a supervisory authority

Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking or advertising cookies.

Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: