Privacy Policy

Last updated 22 September 2026

This policy explains what JMT Technologies ("we", "us") collects when you use our services or pay one of our invoices, why we collect it, and what we do not do with it.

What we collect

• Business and billing details — the legal entity name, address, PAN or GSTIN and contact details of the client we are invoicing, as supplied by that client.
• Payment references — the amount, date, and the UTR or reference number of a bank or UPI credit, so a payment can be matched to the invoice it was made against.
• Service data — for software we operate on a client's behalf, the content that client's users submit to it (for example questions asked, or documents uploaded for evaluation), processed solely to deliver that service to that client.
• Technical logs — request time, page requested and error details, kept for security and debugging.

What we never collect

We do not collect, process or store card numbers, CVV, UPI PINs, net-banking passwords or any other payment credential. Payments are made either directly to our bank account or through a regulated payment gateway; the credential is handled entirely by your bank or that gateway and never reaches our systems.

Why we use it

To deliver the service contracted for, to raise and reconcile invoices and receipts, to comply with tax and accounting obligations, and to respond to support requests. We do not sell, rent or share personal data for advertising, and we do not profile individuals.

Who we share it with

• Payment and banking partners — to receive and reconcile payment.
• Infrastructure providers — hosting and database providers that run our systems under contract, on a need-to-process basis.
• Statutory authorities — where the law requires it.

How long we keep it

Invoices, receipts and payment records are retained for eight years as required for tax records. Service data is retained for as long as the client's engagement continues, and deleted or returned on written request once it ends. Technical logs are retained for up to 90 days.

Security

Data is held on access-controlled servers, transmitted over TLS, and reachable only by the proprietor. Administrative interfaces are password protected and rate limited.

Your rights

You may ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted where we are not required to retain it. Write to [email protected] and we will respond within 30 days.

Changes

Any change to this policy is published on this page with a new date above.