Privacy

This page explains what personal data Jamir Labs collects through this website, why we collect it, who else handles it, how long we keep it, and what you can ask us to do with it. We have written it with India’s Digital Personal Data Protection Act, 2023 (the DPDP Act) in mind.

The last part is about Reception, the WhatsApp assistant we are building. That part is not finished yet.

Who is responsible for your data

Jamir Labs decides why and how the data described on this page is used, so under the DPDP Act we are its data fiduciary. Our details:

• Legal name: [[TODO: legal name as it appears on PAN or GST registration]]
• Ownership: Jamir Labs is a sole proprietorship owned by Limawapang L. Jamir.
• Address: Mokokchung, Nagaland, and Delhi
• Email: hello@jamirlabs.com

What we collect

When you send the contact form

The form asks for:

• your name
• your business’s name
• your town
• what you are interested in: Reception, a website or something else
• your WhatsApp number
• your message

When you send it, the form is emailed to us through Resend, an email delivery service, and arrives in our mailbox, which is run by Zoho Mail.

To keep out spam, the form uses Cloudflare Turnstile. It looks at information from your browser, such as your IP address and browser details, to tell a person from an automated program. Cloudflare handles that information under its own privacy policy.

When you message, call or email us

If you message us on WhatsApp or call us, we see your phone number, your WhatsApp name and what you send us, as in any other chat or call. WhatsApp is run by Meta, under its own privacy policy. If you email us, your email arrives in our Zoho Mail mailbox.

When you visit a page

Cloudflare hosts this website. Like any web host, it receives the technical details your browser sends with each visit, such as your IP address and browser type, so that it can deliver the page and protect the site from attacks. [[TODO: what Cloudflare keeps from these visits under our settings, and for how long]]

We do not set cookies on this website, and we do not show ads. [[TODO: check this again once the contact form’s spam check and the analytics are live]]

Visit counts

We plan to count visits with a cookieless analytics service, along with clicks on the WhatsApp, call and email links and sent forms. It is not switched on yet. [[TODO: name the analytics service, what it records and where it stores it, once it is live]]

Why we use it

• To reply to you, and to talk about the work you asked about.
• To keep spam out of our inbox.
• To keep this website running and safe.
• Once visit counts are switched on, to see which pages help people.

You give us these details yourself, to ask us something, and we use them only for that. We do not sell your data, and we do not use it for advertising.

Who else handles it

Each of these companies handles your data only to do its own job for us:

• Cloudflare hosts this website and runs the spam check on the contact form.
• Resend delivers the contact form to our mailbox.
• Zoho Mail runs our mailbox, hello@jamirlabs.com.
• WhatsApp, run by Meta, carries messages you send us there.

Some of these companies may store data outside India. [[TODO: where Resend and Zoho Mail store our data]]

How long we keep it

We keep your details only for as long as we need them to deal with what you asked, and then delete them.

• Enquiries by form, email or WhatsApp: [[TODO: how long we keep enquiries that do not lead to work, and those that do]]
• Records we must keep by law once you are a client, such as invoices: [[TODO: how long, and under which law]]
• Resend’s copy of each form it delivers: [[TODO: how long Resend keeps it]]

Your rights

Under the DPDP Act you can ask us:

• what personal data we hold about you, and how we use it
• to correct it, complete it or bring it up to date
• to delete it, unless the law requires us to keep it
• to stop using it, where you gave us your consent, without affecting what we did before
• to let someone you name act for you if you die or cannot act yourself

You can also make a complaint to us. To do any of these, write to our grievance contact, below. We reply within [[TODO: how many days we take to reply]].

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Grievance contact

• Name: Limawapang L. Jamir
• Email: hello@jamirlabs.com
• Address: Mokokchung, Nagaland, and Delhi

Children

This website is for business owners. We do not knowingly collect personal data from children. If you think a child has sent us their details, tell us and we will delete them.

---

Reception: messages to businesses that use it

This part is not finished. Reception is in development, and no business uses it yet. What follows describes how the software is built today. It will be completed, and checked against the live service, before any business starts using Reception. [[TODO: complete and confirm this part before Reception goes live]]

Who is responsible

When a hotel, homestay or clinic uses Reception, the business decides how its customers’ messages are used, so it is the data fiduciary for them. We would handle the messages on the business’s behalf. [[TODO: legal review of this split of roles]]

What it saves

When someone messages a business that uses Reception, it saves their phone number, the name on their WhatsApp profile, and the text of their messages and of the replies. Photos and voice notes are not downloaded: a photo is kept only as its caption, and a shared location as text. For a hotel, it can also note the dates, the number of guests and the room a guest asks about, for the owner to confirm. [[TODO: confirm]]

Customers are told

Before its first answer to a new customer, Reception is built to send a one-time notice, in English and in Hindi written in Latin letters. It says that they are chatting with an automated assistant for the business, that their messages are saved by the business and read by an AI service so it can draft replies, and that a person can take over if they ask. If a message contains an emergency phrase such as “chest pain”, the instruction to call 112 is sent first and the notice follows it. [[TODO: confirm]]

Who can see the messages

Each business’s conversations are kept separate in the database, so people at one business cannot read another’s. Anyone with a login for a business can read all of that business’s conversations. When a chat is handed to a person at the business, the WhatsApp alert they receive includes the customer’s name, number and message. We can read every conversation too, but we open them only to run, fix or improve the service, or when the law requires it.

Other companies that handle the messages

• Meta (WhatsApp) and Gupshup, our WhatsApp provider, carry every message.
• Supabase stores the conversations, in Mumbai.
• Anthropic, the AI company: when the assistant drafts a reply, it sends Anthropic the message text, up to ten earlier messages from the same chat and the business’s fact sheet, but not the phone number or WhatsApp name attached to the chat.
• Razorpay: billing for businesses is built to run through Razorpay. Card and bank details are entered on Razorpay’s own page, and we do not store them. Razorpay receives the business’s name and one contact phone number.

Anthropic’s commercial terms bar it from training its models on these messages, and it deletes them within 30 days, with a few exceptions such as enforcing its usage policy. [[TODO: where the software is hosted, once it is running]]

How long messages are kept

[[TODO: how long Reception keeps customers’ messages, once automatic deletion runs on the live service]] [[TODO: what happens to a business’s data when it stops using Reception]]

Deleting a customer’s messages

A customer can ask to have their messages with a business deleted, by asking the business or by writing to us. We remove every conversation for that number from our database, and keep a record that the deletion happened: a scrambled form of the number, the date, and how much was removed. Copies already outside our database are not reached: alerts sent to staff phones, files the business has exported, WhatsApp’s and Gupshup’s own records, and backups. [[TODO: confirm, and say how long a deletion takes]]

People who work at the business

For each person at a business, Reception keeps their name and phone number. It uses the number to send them alerts on WhatsApp and to recognise their replies. A person with a login also has an email address in the login system, which Supabase runs. [[TODO: confirm, and how long staff details are kept]]

Changes to this page

When we change this page, we change the date at the top.