Privacy Policy
Last updated 3 August 2026
This Privacy Policy explains how Orion Matrix Private Limited (“Jello”, “we”, “us”) collects, uses, shares and protects your personal data when you use the Jello mobile application, this website, or any related service (together, the “Platform”).
We are the Data Fiduciary for the personal data described below. By using the Platform you confirm you have read this Policy. Where the law requires your consent, we ask for it separately and you may withdraw it at any time.
1. Data we collect
Information you give us
- Account details — mobile number, name, and email address if you provide one.
- Address details — your flat, building, society and locality, plus map coordinates when you drop a pin, so we can confirm we serve your building and route a professional to it.
- Booking details — services requested, dates, times, instructions you add for the professional, and your booking history.
- Communications — messages to support, ratings and reviews you submit.
Information collected automatically
- Device and usage data — device model, operating system, app version, IP address, crash reports and diagnostic logs.
- Location — collected only when you are setting or confirming a service address. The customer app does not collect background location.
- Cookies and similar technologies on this website, described in section 8.
Payment information
Card, UPI and netbanking details are entered inside our payment gateway’s own PCI-DSS compliant flow. We never receive or store your full card number, CVV or UPI credentials. We store only a transaction reference, the amount, the method type and the status.
2. Why we use your data
- To create and operate your account and authenticate you by OTP.
- To confirm service availability at your address and assign a professional.
- To process payments, refunds and invoices.
- To share your first name, building and flat with the assigned professional so they can reach you — and to share their first name and photo with you.
- To send booking notifications by push message and SMS.
- To handle support requests, disputes and safety incidents.
- To detect fraud and misuse and to keep the Platform secure.
- To improve the service, using aggregated or de-identified data wherever possible.
- To send promotional messages, only where you have consented. You can withdraw that consent at any time without affecting the service.
3. What the professional sees
Your full address, flat number and any gate or entry instructions are revealed to a professional only after they have accepted your booking. Declined or expired offers never expose where you live. Your phone number is not shared; in-app contact is routed through the Platform.
4. Who we share data with
We do not sell your personal data. We share it only with:
- Service professionals — limited to what is needed to complete your booking, as described above.
- Processors acting on our instructions — payment gateway, SMS and push notification providers, cloud hosting, error monitoring and analytics. Each is bound by contract to use the data only for the service they provide to us.
- Authorities — where disclosure is required by law, court order, or to investigate a safety incident or fraud.
- A successor entity — in a merger, acquisition or restructuring, subject to this Policy continuing to apply.
5. Where your data is stored
Personal data is stored on servers located in India. Some processors may store limited technical data outside India; where that happens we rely on contractual safeguards and transfer only what is necessary. [Confirm this paragraph against your actual infrastructure before publishing.]
6. How long we keep it
- Account and booking records — for as long as your account is active, and afterwards for the period required by tax and accounting law.
- Payment and invoice records — [retention period, typically 8 years under Indian tax law].
- Support conversations — [retention period].
- Location trails during an active booking — retained briefly for dispute resolution, then deleted.
- Diagnostic logs — [retention period].
When you delete your account we erase or irreversibly anonymise your personal data, except records we are legally required to retain.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask what personal data we hold about you and how we have used it.
- Ask us to correct or complete inaccurate data.
- Ask us to erase data we no longer need.
- Withdraw consent you previously gave, as easily as you gave it.
- Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
To exercise any of these, write to grievance@jello.example. You can delete your account directly from the app, or use this page.
8. Cookies on this website
This website uses only what is necessary to serve pages and measure traffic in aggregate. [If you add analytics, advertising or embedded third-party content, list each one here with its purpose and add a consent banner.]
9. Security
Data is encrypted in transit using TLS and at rest by our hosting providers. Authentication tokens are stored in the device keychain or keystore, never in plain application storage. Access to personal data inside the company is limited by role and logged. No system is perfectly secure, but we will notify you and the Data Protection Board as required if a breach affects your data.
10. Children
The Platform is not intended for anyone under 18. We do not knowingly create accounts for children. If you believe a child has given us personal data, write to us and we will delete it.
11. Changes to this Policy
We will post any updated version on this page with a new “last updated” date, and notify you in the app when the changes are material.
12. Contact and grievances
Grievance Officer: [Grievance Officer name]
Email: grievance@jello.example
Orion Matrix Private Limited, [Registered office address], Faridabad, Haryana 121001, India
We respond to grievances within [30] days.