1. Introduction

This Privacy Policy describes the policies and procedures of Sonicbrain Technologies Private Limited (doing business as "Jango", "we", "us", or "our") regarding the collection, use, and disclosure of information when you use our website, application, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy and our Terms of Service.

2. Scope of This Policy

This Privacy Policy applies to the information we process through our Service. It does not apply to any third-party websites, services, or applications, even if they are accessible through our Service.

For Enterprise customers utilizing our On-Premise installation, this Policy does not govern the data processed within your self-hosted environment. Such processing is governed by the terms of your Data Processing Addendum (DPA) or other master agreement with us.

3. Information We Collect

We collect information necessary to provide, maintain, and improve our Service, and to fulfill our legal and contractual obligations.

A. Information You Provide

• Account Information: When you create an account, we collect your email address and account credentials.
• Payment Information: For paid subscriptions, we use a third-party payment processor (e.g., Razorpay). We receive transaction confirmation and billing information, but we do not store or have access to your full payment card details.
• User Content: To operate the Service, we must process the data you provide, connect, or make accessible to us (collectively, "User Content"). This information includes any and all data, text, files, documents, credentials, and contextual information necessary for the Service to function and generate a response. Credentials required to connect to external data sources are stored in an encrypted format.
• Communications: When you contact us for support, feedback, or other inquiries, we collect your contact information and the contents of your messages.

B. Information We Collect Automatically

• Usage Data and Log Information: We automatically collect information about your interactions with the Service. This includes your Internet Protocol (IP) address, browser type, device information, operating system, pages visited, time spent on pages, and other diagnostic data.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies (e.g., Google Analytics) to operate and analyze our Service. A cookie consent banner will be provided to manage your preferences in accordance with applicable law.

4. How We Use Your Information

We use the collected information for the following business and commercial purposes:

• To Provide and Maintain the Service: To create and manage your account, process payments, connect to your data sources, execute queries, and return results.
• To Improve and Develop the Service: We utilize User Content and Usage Data to analyze and refine the underlying models and algorithms that power the Service, enhancing its accuracy, relevance, features, performance, and safety.
• To Communicate With You: To send service-related notifications, security alerts, and administrative messages. With your separate consent, we may also send you marketing communications.
• For Security and Compliance: To prevent fraud, detect security incidents, enforce our Terms of Service, and comply with our legal obligations.
• For Research: We may use aggregated or de-identified information for research and development purposes, which is not considered Personal Information under this policy.

5. How We Share and Disclose Information

We do not sell your Personal Information. We may share information only in the following limited circumstances:

• Service Providers: We share information with third-party vendors and service providers who perform services on our behalf. This includes:
  • Cloud hosting providers (e.g., Amazon Web Services).
  • Payment processors (e.g., Razorpay).
  • Analytics providers (e.g., Google Analytics).
  • Email service providers (e.g., Zoho).
  • Third-Party LLM Providers (e.g., Google Gemini and other hosted open-source models).
• Third-Party LLM Providers: To generate responses, we may send relevant User Content to our third-party LLM partners. Our contractual agreements with these providers prohibit them from using your User Content for any purpose other than providing the service to us.
• Business Transfers: If Jango is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if we believe in good faith that it is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Jango, (iii) prevent or investigate possible wrongdoing in connection with the Service, or (iv) protect the personal safety of users or the public.

6. Data Security and Retention

Security: We implement commercially reasonable technical, administrative, and organizational measures to protect your information from loss, misuse, and unauthorized access or disclosure. This includes encrypting sensitive data, such as database credentials, at rest and in transit. We are actively working towards industry certifications such as SOC 2 Type 2. However, no electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Retention: We retain your User Content (including chat history) for as long as your account is active and as necessary to provide the Service. We retain other information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may request deletion of your data by contacting us.

7. International Data Transfers

Our primary servers are located in India (AWS India Region). By using our Service, you consent to the processing and storage of your information in India. Some of our third-party service providers (e.g., LLM providers) may operate globally. If we transfer personal data from regions like the European Economic Area (EEA), we rely on legally-provided mechanisms, such as Standard Contractual Clauses (SCCs), to ensure an adequate level of data protection.

8. Your Privacy Rights and Choices

• Marketing Communications: You may opt-out of receiving promotional emails by following the "unsubscribe" link in the email.
• Cookie Preferences: You can manage your cookie preferences through the consent banner provided on our website.
• Data Access and Deletion: You may have the right to request access to, correction of, or deletion of your personal information. To make such a request, please contact us. We will respond within the timeframe required by applicable law.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. If you are under 13, you may not use the Service. If you are between 13–18, you may only use the Service with parental consent.

10. On-Premise Enterprise Customers

For enterprise customers using our on-premise installation, your User Content and connected data sources remain within your own server environment. This Privacy Policy does not apply to the data processed within your on-premise environment, which is governed by your organization's policies and your Data Processing Addendum (DPA) with us. We may, however, collect limited technical telemetry data (as defined in your DPA) for billing, support, and to ensure the proper functioning of the software.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

12. Contact Us and Grievance Officer

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: contact@askjango.com

In accordance with India's Digital Personal Data Protection Act, 2023, and the Information Technology Rules, 2021, we have appointed a Grievance Officer.