Privacy Policy Jaimru Technology Private Limited 🛡️

Introduction & Commitment to Privacy

Jaimru Technology Private Limited ("Jaimru Technology", "we", "our", or "us"), incorporated under the Companies Act, India, operates the domain https://www.jaimru.com and associated software platforms, APIs, and client portals.

We are dedicated to safeguarding the personal and commercial privacy of our website visitors, registered clients, technology partners, enterprise software users, and recruitment candidates. This Privacy Policy outlines the categories of information we collect, the specific operational purposes for which it is processed, the stringent security protocols we enforce, and your statutory rights under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

Scope of Products & Services Covered

This Privacy Policy specifically governs data collected and processed through our core business verticals:

1. Proprietary Enterprise Software: Jaimru CRM (for travel operators, DMCs, and sales teams) and custom Enterprise Resource Planning (ERP) applications.
2. FinTech & Compliance APIs: Real-time GST e-Invoicing API (IRN generation & signed QR codes), E-Way Bill generation APIs, and third-party payment gateway routing.
3. Cloud & SaaS Partner Implementations: Certified deployments and license provisioning for Google Workspace, Google Cloud Platform (GCP), Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and Zoho CRM/Zoho One.
4. Conversational Automation & Messaging: Official Meta WhatsApp Business API integration, AI customer service chatbots, transactional notification webhooks, and SMS gateways.
5. Custom Software & Digital Engineering: Full-stack web development (PHP, Laravel, Node.js), mobile app development (iOS, Android, Flutter, React Native), UI/UX design, and eCommerce portals.
6. Performance Marketing & SEO: Search engine optimization, Google Ads (PPC) campaign management, and social media marketing (SMO).
7. Manpower Consulting & Staffing Services: IT recruitment, executive search, permanent staffing, contract staffing, and third-party payroll outsourcing.

Categories of Information We Collect

We only collect personal and commercial data that is necessary to deliver our contracted services, satisfy legal mandates, or respond to your commercial requests:

A. Information Provided Voluntarily by You:

• Contact & Identity Data: Full name, corporate email address, mobile/WhatsApp telephone number, job title, and organization name submitted via contact forms, RFP requests, or demo bookings.
• Client Commercial Information: Billing address, GSTIN (Goods and Services Tax Identification Number), company registration details, and domain names required for cloud tenant setups (Google Workspace, Microsoft 365, AWS).
• Product & CRM Account Data: User account credentials, sales leads, customer itineraries, vendor contacts, and quotation data uploaded directly into Jaimru CRM or custom ERPs.
• FinTech & Invoicing Data: B2B invoice parameters, vehicle registration numbers, HSN/SAC codes, and tax breakdowns passed through our e-Way Bill and e-Invoice API gateways for statutory IRN generation.
• Candidate Recruitment Data: Resumes, employment history, educational credentials, ID proofs, and salary expectations submitted via our Careers portal, Post Resume form, or manpower consulting channels.

B. Information Collected Automatically:

• Technical Telemetry: IP address, browser type and version, operating system, referring URL, time zone, and session duration captured for cybersecurity monitoring, fraud prevention, and performance analytics.
• Cookies & Local Storage: Essential session cookies used to retain form inputs, CSRF security tokens, and user preferences across navigation turns.

How We Use Collected Information

Jaimru Technology processes your information strictly under lawful contractual, legitimate interest, and statutory grounds:

• Service Fulfillment: To provision cloud licenses, deploy custom web/mobile applications, configure CRM databases, and manage ongoing server operations.
• Statutory Compliance & API Relaying: To transmit encrypted invoice payloads securely to the government Invoice Registration Portal (IRP) and National Informatics Centre (NIC) for instant IRN and e-Way bill issuance.
• Meta WhatsApp & SMS Communication: When you submit an inquiry form or opt in, we may deliver verified commercial updates, service alerts, project milestones, and system receipts via WhatsApp, phone, or email strictly during standard business hours.
• Recruitment Matching: To evaluate candidate qualifications and present pre-screened professional profiles to hiring partner organizations under contract.
• Billing & Tax Accounting: To issue authentic GST tax invoices, process legitimate renewal notices, and reconcile bank payment gateways.
• Security & Fraud Mitigation: To detect malicious bot traffic, prevent unauthorized API usage, and maintain system availability.

Third-Party Platform Partners & Sub-Processors

To deliver enterprise-grade digital services, we collaborate with globally certified technology vendors and regulatory portals. Data shared with these entities is strictly confined to what is necessary for functional execution:

• Cloud Infrastructure Providers: Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure for secure virtual machine hosting, database storage, and backup replication.
• Productivity & CRM Ecosystems: Google Workspace, Microsoft 365, and Zoho Corporation when fulfilling authorized partner deployments.
• Conversational Infrastructure: Meta Cloud API (Meta Platforms, Inc.) for routing authenticated WhatsApp Business API broadcasts and customer service messages.
• Government Regulatory Portals: The GSTN (Goods and Services Tax Network) and NIC (National Informatics Centre) for authenticated e-Way Bill and B2B e-Invoicing verification.
• Indian Payment Gateways: PCI-DSS certified payment aggregators (e.g., Razorpay, Cashfree, PayU) for processing online transaction settlements. We never store debit/credit card numbers or CVVs on our servers.
• Legal & Law Enforcement: Disclosures made solely where mandated by court orders, government authorities, or applicable statutory laws.

WhatsApp & Direct Communication Policy

By submitting your contact information on our website forms (such as *Get Free Consultation*, *Book A Demo*, or *Contact Us*), you explicitly consent to receive transactional and relevant commercial updates from Jaimru Technology regarding our software solutions, project updates, and cloud services via WhatsApp, SMS, phone call, or email.

Your Right to Opt Out: You maintain the unconditional right to unsubscribe from non-essential promotional messages at any time. Simply reply with "STOP" or "UNSUBSCRIBE" on our official WhatsApp channel, or send an email to info@jaimru.com with the subject line "Opt-Out Request". We will process your removal within 48 business hours.

Data Security & Storage Architecture

We implement defense-in-depth technical, physical, and administrative measures to protect your digital assets against unauthorized access, loss, alteration, or interception:

• End-to-End Encryption: All web traffic and API endpoints enforce TLS 1.3 encryption in transit, and database backups are safeguarded using AES-256 encryption at rest.
• Role-Based Access Control (RBAC): Employee access to production databases and client CRM instances is strictly restricted based on business necessity and protected by multi-factor authentication (MFA).
• Regular Security Audits: Periodic vulnerability assessments, dependency scanning, and web application firewall (WAF) inspections to mitigate OWASP Top 10 vulnerabilities.
• Disaster Recovery & Redundancy: Automated daily backups replicated across geographically separated cloud availability zones to ensure rapid recovery.

Data Retention & Your Legal Rights

We retain client records, API transaction logs, and recruitment applications only for as long as necessary to fulfill our contractual commitments, resolve commercial disputes, or comply with statutory Indian tax and accounting obligations (typically up to 7-8 fiscal years for financial records).

Under applicable Indian data protection regulations (including the DPDPA), you possess the following rights:

• Right to Access: Request a summary of personal data held about you and the processing activities undertaken.
• Right to Correction & Erasure: Request the correction of inaccurate data or the deletion of personal information where statutory retention limits have expired.
• Right to Withdraw Consent: Revoke previously granted consent for discretionary communication channels at any time.

Grievance Redressal & Contact Information

In accordance with the Information Technology Act, 2000 and rules made thereunder, as well as the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are provided below:

We will acknowledge your grievance within 48 hours and work to resolve any substantive concerns within thirty (30) days of receipt.