Privacy policy
Last updated 24 October 2026
Your books are your business. This page says plainly what we collect, where it sits, who can reach it, and how you get it back or have it deleted.
On this page
This is a working draft, not reviewed by a lawyer. It is here so the site is complete and so you can see the shape of the policy. Have an Indian lawyer review and adapt it, and check it against the DPDP Act and your payment provider’s requirements, before you take real customers.
What we collect
Two kinds of information: what you give us to run your account, and what the product records as you use it.
- Account details: your name, mobile number, email, business name, GSTIN, and address.
- Website sign-up details: the name, mobile number, email, business name, city and type of business you enter when you create an account on our website. We use your number and email to contact you about your account, including by phone call and WhatsApp, as you agree when you sign up.
- Sign-in details: your password, which we keep only as a salted one-way hash that we cannot read back, and a record of when you sign in or out with your network address and device type, to keep your account secure.
- If you choose Continue with Google: your name, email address and Google account ID. We never receive your Google password.
- Business data you enter: invoices, customers, suppliers, items, stock movements, payments and expenses.
- Billing details: your plan, invoices we raise, and payment references. Card and UPI details are handled by our payment provider and never reach our servers.
- Technical logs: IP address, browser, device type, and timestamps of requests, kept to keep the service secure and to debug faults.
Where your data is stored
On servers located in India. Data is encrypted in transit with TLS and encrypted at rest. We take an automatic daily backup, retained for 30 days.
Who can see it
You, and anyone you invite into your account with a staff login. Nobody else, with three narrow exceptions.
- A small number of our engineers can access production data when you raise a support request that cannot be solved any other way. Each access is logged.
- Service providers who run parts of the system for us, such as our hosting provider, payment gateway and SMS provider. They are bound by contract and see only what they need.
- Where the law requires it, such as a valid order from a court or a competent authority.
What we never do
- We do not sell your data, and we do not share it with advertisers or data brokers.
- We do not use your invoices, customer lists or pricing to train models.
- We do not contact your customers for our own purposes. Messages go to them only when you send them.
Getting your data out
You can export every invoice, party, item and report at any time, on any plan, at no charge, in Excel or PDF. You do not need to ask us and you do not need to be a paying customer.
Deletion
You can ask us to delete your account and all of its data. We will do it within 30 days, and confirm when it is done. Backups age out within a further 30 days. We keep only what tax law requires us to keep about our own invoices to you.
If you simply stop paying, nothing is deleted. Your data stays available for you to export.
Children
JROne is for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data.
Changes to this policy
If we change something that materially affects you, we will tell you by email and in the product before it takes effect, not quietly update this page.
Contact
For anything about your data, including an export or a deletion request, write to info@jairaghuveeros.com or call +91 91427 35101. Add your registered grievance officer's name and address here before launch, as Indian law requires.