Privacy Policy

1. Introduction

JIGSOL APPLIED INTELLIGENCE LIMITED ("Jigsol", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By accessing or using Jigsol, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our services:

• Account Information: Name, email address, company name, job title, phone number
• Business Data: Employee records, supplier information, customer data, financial records, invoices, timesheets
• Payment Information: Billing address, payment card details (processed securely via third-party providers)
• Communications: Support requests, feedback, survey responses

2.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, performance metrics
• Cookies & Similar Technologies: Session cookies, preference cookies, analytics cookies

2.3 Third-Party Integrations

With your permission, we collect data from integrated third-party services such as Xero, Sage, email providers, and other business tools to provide our automation and analytics features.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our platform functionality
• AI & Automation: To process documents, automate workflows, and provide intelligent insights
• Account Management: To create and manage your account, process payments, provide customer support
• Analytics: To understand usage patterns and improve user experience
• Security: To detect, prevent, and respond to fraud, security threats, and technical issues
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Communications: To send service updates, security alerts, and administrative messages (you may opt out of marketing communications)

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contractual Necessity: To fulfill our contract with you and provide our services
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional features (where applicable)
• Legal Obligation: To comply with accounting, tax, and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

5.1 Service Providers

• Cloud hosting providers (AWS, Azure)
• Payment processors (Stripe)
• Analytics services (Google Analytics)
• Customer support tools

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, property, or safety.

6. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA)
• Regular security audits and penetration testing
• Access controls and role-based permissions
• SOC 2 Type II compliance (in progress)

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active plus 7 years (accounting requirements)
• Business Records: 7 years minimum (HMRC compliance)
• Marketing Data: Until you opt out or 3 years of inactivity
• Log Data: 90 days for security purposes

8. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or optional processing

To exercise these rights, contact us at privacy@jigsol.ai

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for platform functionality (authentication, security)
• Analytics Cookies: To understand usage patterns and improve our services
• Preference Cookies: To remember your settings and preferences

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

10. International Data Transfers

Your data is primarily stored in UK/EU data centres. If data is transferred internationally, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) or other approved mechanisms.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) atico.org.uk