Privacy Policy

1. Introduction

Jaktra ("we", "us", or "our") is an accounts-receivable automation platform. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our website at jaktra.site (the "Site") and our software-as-a-service platform (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information. When you register, we collect your name, work email address, company name, and password (stored hashed).

Customer data (invoice & debtor data). You upload or enter invoice information including debtor company names, contact names, email addresses, amounts, and due dates. This data is processed solely to operate the Service on your behalf and is never used for our own marketing or sold to third parties.

Usage data. We collect logs of actions taken within the platform (email sends, escalation stage changes, dispute resolutions) for audit trail, security monitoring, and product improvement. These logs are associated with your account and are exportable.

Device & browser data. When you visit the Site, we automatically collect your IP address, browser type, operating system, referring URL, and pages visited. This is used for security, analytics, and fraud detection.

Communication data. If you contact us by email or via the Service, we retain those communications to respond to you and improve our support.

3. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To operate the accounts-receivable automation features you have configured, including sending collection emails on your behalf.
• To process and classify inbound debtor replies via our AI service.
• To generate and display analytics and audit logs within your account.
• To send you transactional emails about your account (delivery failures, security alerts, billing).
• To improve the Service, diagnose technical issues, and develop new features.
• To comply with legal obligations and enforce our Terms of Service.

We do not use your customer data (invoice or debtor data) to train our AI models without your explicit written consent.

4. Data Sharing and Third Parties

We do not sell your personal data or your customer data. We share data only with the following categories of service providers, each bound by a data processing agreement:

• Email delivery providers (SendGrid, Resend, or your configured SMTP) — to transmit collection emails on your behalf.
• Payment providers (Razorpay) — to generate and validate payment links embedded in collection emails. We do not store card details.
• Cloud infrastructure — our hosting, database, and caching infrastructure providers for system operation.
• AI inference providers — our AI classification service. Invoice and debtor data sent to inference is subject to the AI provider's enterprise data-processing terms and is not used for model training.

We may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Jaktra, our customers, or others.

5. Data Security

We implement industry-standard security measures including AES-256-GCM encryption at rest, TLS 1.2+ in transit, multi-factor authentication (TOTP), JWT-based session management with short expiry, Redis-backed rate limiting, cryptographic webhook authentication, and a self-healing Dead Letter Queue for email delivery.

No method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

6. Data Retention

We retain your account and customer data for as long as your account is active, plus 90 days after account closure to allow for data export and dispute resolution. Audit logs are retained for 12 months by default. Enterprise plans may negotiate custom retention periods.

You may request deletion of your account and associated data at any time by contacting us at support@jaktra.site.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@jaktra.site.

8. International Data Transfers

Jaktra may process your data in countries outside your country of residence. Where data is transferred outside the EEA, UK, or other jurisdictions with specific transfer restrictions, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) as required by applicable law.

9. Cookies and Tracking

The Jaktra platform uses session cookies (strictly necessary for authentication) and does not set tracking or advertising cookies. The marketing site (jaktra.site) may use analytics cookies to measure page performance. You may disable cookies in your browser settings; doing so will not prevent access to the core Service but may affect analytics features.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe we have collected such data, contact us immediately at support@jaktra.site.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-product notice at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance.

12. Contact Us

For privacy-related enquiries, data subject requests, or Data Processing Addendum requests, contact us at: