Privacy Policy

For purposes of this Privacy Policy, the following terms have the meanings set forth below:

COOKIESare small files that a site or its service provider transfers to your device (computer or mobile device) or its hard drive through your web browser, only if you allow the same, and they enable the sites or service provider's systems to recognize your browser and capture and remember certain information.

DATA CONTROLLER means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Policy, we are a Data Controller of your data.

DATA PROCESSORS (OR SERVICE PROVIDERS) mean any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

DATA SUBJECT / USER is any living individual who is the subject of Personal Data and is using our Platform. For the purpose of this Policy, you are a Data Subject / User.

PERSONAL DATAmeans information relating to an identified or identifiable natural person, including Protected Health Information ("PHI") and sensitive data.

Our Platform assists Users in business networking, enabling business-to-customer interactions across various applications, with both free-tier and premium subscription options available. The Platform facilitates business inquiries and sales opportunities by connecting businesses to customers through digital business cards, in-app communication channels, and integration with external communication tools such as email, messaging services, and WhatsApp. While Jambo is not an e-commerce platform, it enables businesses to link their online stores to their profiles and provides customers with direct contact options to engage with businesses for inquiries and purchases (collectively, "Services").

The Users will be deemed to have read, understood and agreed to the terms of this Policy once they provide their consent or continue using the Platform after this Policy is presented to them. By granting their assent to this Policy, Users provide consent to such use, collection and disclosure of Personal Data as prescribed in this Policy.

We reserve the right to update or change this Policy at any time, and the Users should check this Policy periodically. To inform you of any material change as regards the manner in which we collect or process your information, including changes to this Policy, our updated Policy will be posted by us on the Platform, indicating the date on which the Policy was last updated at the top of the Policy.

Continued use of the Platform and access to the Services will constitute the Users' acknowledgment of, and their consent to abide and be bound by, this Policy, as amended by us from time to time. Users have the right to opt out of the Platform and discontinue to use the Services at such time as they deem fit. In addition, the Users can, by sending an email to our contact address, inquire whether the Company is in possession of their Personal Data, and they may also require the Company to delete and destroy all such information, upon request.

This Privacy Policy applies to Personal Data, data and other content we collect:

• based on the use of the Services;
• in communications email, text, and other messages between the Services, Platform and Users via web forms or chat, as applicable;
• in communications submitted to the Services using web forms and the social media/comment features on the Services, as applicable; and
• when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Policy.

This Privacy Policy does not apply to information collected by us:

• offline or through any other means, including on any other website or apps operated by us or any third party. You should review the terms and policies of those websites or apps before clicking on any links; or
• any third-party links, including through any application or content (including advertising) that may link to or be accessible from or on the Services.

We collect several different types of information for various purposes to provide and improve our Services.

All information collected by the Company is with the Users' consent. The Company is however free to use, collect, and disclose information of the Users which is in the public domain.

6.1 Personal Data

While using the Platform and accessing the Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personal Data may include, but is not limited to:

• Full name;
• Email ID (personal and work);
• Phone number;
• Title / Designation;
• Name of Organization;
• Details of Organization;
• Information available on the apps and/or platforms used and connected to the Platform by you for work purposes;
• Nationality, geolocation and time zone;
• Information related to the Subscription of your choice;
• Notification preferences;
• Financial Information (including billing address and limited information regarding the payment mode); and
• Metrics on use of the Platform.

For premium users, we may collect additional information including billing details such as credit card information, billing email, banking information, location at the time of transaction and/or a billing address.

We may use your Personal Data to contact you with newsletters, surveys, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by emailing at our contact address.

6.2 Usage Data

We may also collect information that your browser sends whenever you visit the Platform or when you access the Services by or through a computer or mobile device ("Usage Data").

This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of the Platform that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Platform through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

6.3 Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on the Platform and we hold certain information.

Cookies may include an anonymous unique identifier. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze the Platform and the Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some features of the Platform, and the Platform may not work as designed. For more information on cookies and how to disable them, you can consult the information provided by the Interactive Advertising Bureau at www.allaboutcookies.org.

Examples of Cookies we use:

• Session Cookies: We use Session Cookies to operate the Platform.
• Preference Cookies: We use Preference Cookies to remember your preferences and various settings.
• Security Cookies: We use Security Cookies for security purposes.
• Advertising Cookies: Advertising Cookies are used to serve you with advertisements that may be relevant to you and your interests.

6.4 Social Media Data

We have pages on social media sites like Twitter, and LinkedIn ("Social Media Pages"). When you interact with our Social Media Pages, we will collect Personal Data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

6.5 Information from Third Parties

We may collect information from third parties, including:

Signups using federated authentication service providers: You can log in to the Platform Services using supported federated authentication service providers such as Facebook, Twitter, LinkedIn, Microsoft and Google. These services will authenticate your identity and give you the option to share certain Personal Data with us, such as your name and email address.

Information from social media sites and other publicly available sources: When you provide feedback or reviews about our products, interact, or engage with us on marketplaces, review sites or social media sites such as Facebook, Twitter, LinkedIn and Instagram through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with you, improve our products, better understand User reactions and issues, or to reproduce and publish your feedback on our Platform.

Third parties may collect certain information by way of cookies, through our Platform. Such information may be collected, inter alia, for the following purposes: (a) advertising; (b) marketing; and (c) data analytics.

We collect Personal Data only necessary for the following purposes:

• To communicate with you (such as through email) about Services that you have signed up for, changes to this Policy, changes to our terms of Service, or important notices;
• To keep you posted on new products and services, upcoming events, offers, promotions and other information that we think will be of interest to you;
• To ask you to participate in surveys, or to solicit feedback on our products and Services;
• To set up and maintain your account, and to do all other things required for providing Services;
• To understand how users use our products and Services, to monitor and prevent problems, and to improve our products and Services;
• To provide customer support, and to analyze and improve our interactions with Users;
• To detect and prevent fraudulent transactions and other illegal activities, to report spam, and to protect the rights and interests of the Company, its Users, third parties and the public;
• To update, expand and analyze our records and identify new Users;
• To analyze trends, administer our Platform, and track visitor navigations on our Platform to understand what visitors are looking for and to better help them;
• To monitor and improve marketing campaigns and make suggestions relevant to Users;
• To improve and enable you to avail our Services, increasing efficiency of existing features, and develop new features;
• To notify you of necessary information related to the Platform and Services and your account on the Platform from time to time;
• To maintain records and provide you with an efficient, safe and customized experience while using the Platform;
• As we believe to be necessary or appropriate, and only as permitted under applicable law to comply with legal obligations, protect our operations, rights, privacy, safety or property, and transfer data in connection with business transfers; and
• For any other purpose with your consent.

For businesses using our Platform to facilitate customer inquiries and sales opportunities, we may also collect:

• Business store links and integration details;
• Communication preferences and available contact channels;
• Customer inquiry data and interaction records; and
• Integration settings for third-party communication tools (such as WhatsApp Business, email services, or messaging platforms).

We may use Personal Data to create non-identifiable, anonymous "aggregate data" for the purposes of marketing, research and analysis.

We may combine the Personal Data we collect or remove pieces of Personal Data to limit or prevent identification of a particular User or device to help with the purpose of research and marketing.

We normally collect or use Personal Data from Users only where we have their consent to do so, where we need the Personal Data to perform a contract with Users, or where the processing is in our legitimate interests and not overridden by the data protection interests or fundamental rights and freedom of the Users. In some cases, we may have legal obligation to collect or retain Personal Data or may need the Personal Data to protect vital interests of Users.

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

For premium users, we may retain certain information for billing and record-keeping purposes for a longer duration in accordance with applicable laws.

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Your consent to this Policy followed by your submission of such information represents your agreement to such transfer.

The Company will take all the steps reasonably necessary to ensure that your Personal Data is treated securely and in accordance with this Policy, and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Data.

As a global organization with users in multiple countries, we may transfer your Personal Data across international borders. When we transfer Personal Data outside of your jurisdiction, we implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy and applicable law.

10.1 Transfer Mechanisms

Depending on the regions involved, we rely on the following transfer mechanisms:

• EEA, UK, and Switzerland: We use EU Standard Contractual Clauses (SCCs), UK International Data Transfer Addendum, or Swiss-specific safeguards as appropriate. Where available, we may also rely on adequacy decisions issued by the European Commission, UK Government, or Swiss Federal Data Protection and Information Commissioner.
• Asia-Pacific Region: We comply with the APEC Cross-Border Privacy Rules system where applicable and implement contractual safeguards in accordance with local requirements.
• Africa:We implement contractual safeguards that meet the requirements of relevant data protection authorities, including those under South Africa's POPIA and Nigeria's NDPR.
• India:We comply with India's cross-border data transfer requirements as specified in the Digital Personal Data Protection Act and related regulations.

10.2 Data Localization

In jurisdictions with data localization requirements:

• For Indian users, we store certain categories of personal data on servers located in India as required by applicable law.
• For users in other jurisdictions with localization requirements, we maintain regional storage as necessary to comply with local laws.

10.3 Adequacy Assessment

Before transferring Personal Data internationally, we conduct assessments to determine whether the recipient country provides an adequate level of data protection. Where necessary, we implement supplementary measures to ensure an equivalent level of protection.

10.4 Your Rights Regarding International Transfers

You have the right to obtain information about the safeguards we implement for international data transfers. To exercise this right, please contact us using the information provided in the "Contact Us" section.

We may disclose Personal Data that we collect, or you provide:

11.1 Disclosure for Law Enforcement

Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.

11.2 Business Transaction

If we or our subsidiaries are involved in a merger, acquisition or asset sale, your Personal Data may be transferred.

11.3 Other Cases

We may disclose your information also:

• to our subsidiaries and affiliates;
• to contractors, service providers, and other third parties we use to support our business;
• to fulfill the purpose for which you provide it;
• for the purpose of including your company's logo on our website;
• for any other purpose disclosed by us when you provide the information;
• with your consent in any other cases;
• if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others.

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

13.1 General Data Protection Rights

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at our contact address.

In certain circumstances, you have the following data protection rights:

• the right to access, update or to delete the information we have on you;
• the right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete;
• the right to object. You have the right to object to our processing of your Personal Data;
• the right of restriction. You have the right to request that we restrict the processing of your personal information;
• the right to data portability. You have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format;
• the right to withdraw consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal information.

13.2 EEA, UK, and Swiss Residents

If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have certain data protection rights covered by the General Data Protection Regulation (GDPR), UK GDPR, and Swiss data protection laws.

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you are a resident of the EEA, UK, or Switzerland and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

13.3 California Privacy Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

California residents have the right to:

• Know what personal information is being collected about them;
• Know whether their personal information is sold or disclosed and to whom;
• Say no to the sale of personal information;
• Access their personal information;
• Request deletion of personal information;
• Not be discriminated against for exercising their privacy rights.

13.4 Canadian Privacy Rights

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Canadian residents have the right to:

• Access their personal information held by the organization;
• Challenge the accuracy and completeness of their information and have it amended as appropriate;
• Withdraw consent at any time, subject to legal or contractual restrictions;
• File a complaint with the Office of the Privacy Commissioner of Canada if they believe their privacy rights have been violated.

13.5 Africa-Specific Privacy Rights

If you are a resident of an African country with data protection legislation, you have specific rights under your local laws.

African residents may have the right to:

• Right to Access: You may request access to your personal information.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal information under certain circumstances.
• Right to Data Portability: You may request your data in a structured, commonly used format.
• Right to Object to Processing: You may object to certain types of processing of your personal data.
• Right to Object to Automated Decision-Making: You may object to decisions based solely on automated processing, including profiling.
• Right to Submit a Complaint: You have the right to submit a complaint to the relevant regulatory authority.

South African residents are specifically protected under the Protection of Personal Information Act (POPIA). Nigerian residents are protected under the Nigeria Data Protection Regulation (NDPR), and Kenyan residents are protected under the Data Protection Act.

13.6 India-Specific Privacy Rights

In addition to the general provisions in this Privacy Policy, the following applies to users in India under the Digital Personal Data Protection Act (DPDPA):

• Consent Requirements: We obtain explicit consent before collecting or processing sensitive personal data.
• Data Principal Rights: As a data principal, you have the right to confirm whether we process your personal data, access the data, correct inaccuracies, complete incomplete data, and erase data in certain circumstances.
• Data Localization: Certain categories of data may be stored exclusively on servers located within India in compliance with applicable regulations.
• Grievance Redressal: Our Grievance Officer will acknowledge your complaint within 24 hours and resolve it within 30 days. If you are dissatisfied with our response, you may approach the Data Protection Authority under applicable law.

All data principals have the right to withdraw consent, subject to legal consequences, and may lodge complaints with the Data Protection Board of India.

We encourage you to first contact us with any questions or concerns.

We may employ third party companies and individuals to facilitate the Services ("Service Providers"), provide Services on our behalf, perform Service-related ancillary services or assist us in analyzing how the Services are used by our Users.

The Service Providers will have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purposes.

Some of the Service Providers we engage include (but are not limited to) the following analytics, development, and AI Service Providers:

14.1 Analytics

We may use third-party Service Providers to monitor and analyze the use of the Platform and the Services.

• Google Analytics:Google Analytics tracks and reports website traffic and may share data with other Google services. For more information on Google's privacy practices, please visit: https://policies.google.com/privacy?hl=en
• Firebase: Firebase is an analytics service provided by Google Inc. You may opt-out of certain Firebase features through your mobile device settings. For more information: https://policies.google.com/privacy?hl=en

14.2 Development Tools

We may use third-party Service Providers to automate the development process of the Platform, such as GitHub for hosting and reviewing code, managing projects, and building software.

14.3 AI Platforms and Tools

We may use third-party artificial intelligence platforms such as large language models and natural language processing models hosted on third-party platforms for the purpose of enhancing our platform features and functionalities. The data shared excludes personally identifiable information and isn't utilized by the third-party for any other objective.

14.4 Other Service Providers

We may share Personal Data with vendors and Service Providers to assist us with business operations and to perform certain services and functions, including:

• Hosting and Cloud Services: Amazon Web Services (AWS) for on-demand cloud storage and computing;
• Performance Monitoring: New Relic for performance monitoring and real-time analytics;
• Analytics Tools: Grafana Cloud and Microsoft Clarity for observability and user behavior insights;
• Error Monitoring: Rollbar for error monitoring and debugging;
• Development and Deployment: Vercel for hosting, deploying, and scaling the Platform.

We request you to review and confirm your acceptance with the latest terms and privacy policies of the Service Providers, available on their respective websites or platforms.

14.5 Payments

We provide paid products and services, including subscription models for access to premium features of the Platform. We use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. This information is provided directly by you to our third-party payment processors, whose use of your Personal Data is governed by their privacy policies. These payment processors adhere to the standards set by PCI-DSS to ensure secure handling of payment information.

The Platform may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site.

We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

By accessing the Platform, you agree that we shall not be liable to you or any other User for any breach of Personal Data or loss incurred by your use of such websites or services. The inclusions or exclusions are not suggestive of any endorsement by the Company of the website or contents of the website. You may visit any third-party website linked to the Platform at your own risk.

The Platform and the Services are not intended for use by children under the age of 18 ("Child" or "Children").

We do not knowingly collect Personal Data from Children. If you become aware that a Child has provided us any Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we shall take all steps necessary to remove such Personal Data from our servers.

We reserve the right to update or change this Policy from time to time. You are advised to review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on the Platform.

We will notify you of any material changes via email and/or a prominent notice on the Platform, prior to the change becoming effective and update the "effective date" at the top of this Policy.

Any complaints, abuse or concerns with regards to content and or comment or breach of the terms in this Policy shall be immediately informed to the designated Grievance Officer as mentioned below in writing or through email signed with the electronic signature:

Name: India Head

Email: admin@jambocard.com

Your use of the Platform and any dispute over privacy is subject to this Policy and the Company's Terms of Service available on the Platform.

If you have any questions about this Policy, please contact us:

By email: hello@jambocard.com

Phone: +91-9964477708