Legal
Privacy Policy
What Jarvis collects, who it goes to, how long we keep it, and how you see, correct or delete it.
Draft. This policy is under review and will be updated before Jarvis is generally available.
1. Who we are
- Jarvis is made by OneStop AI Private Limited (“OneStop AI”, “we”, “us”), B-1006, Brigade Gardenia, 9th Cross Road RBI Layout, J.P. Nagar, Bangalore South, Bengaluru 560078, Karnataka, India.
- This policy covers Jarvis on:
- the mobile app (iPhone and Android)
- the web app
- our website
- Under India’s Digital Personal Data Protection Act, 2023, we are the “Data Fiduciary” for your data.
2. The short version
- We collect what you give Jarvis so it can answer you: your questions, your portfolio, and what you tell it about your goals.
- AI models run by other companies write Jarvis’s answers. We send them only what an answer needs.
- We do not sell your data. We do not use it for ads.
- We do not use your data to train AI models, and neither do the model companies we use.
- Your account, chats and portfolio are stored in India (AWS, Mumbai).
- You can see, correct or delete your data at any time.
3. What we collect
| What | Examples | Where it comes from | Why we need it |
|---|---|---|---|
| Account details | Name, email, profile photo | You, or Google when you sign in with Google | To create your account and sign you in |
| WhatsApp number | Your phone number and WhatsApp display name | WhatsApp, when you message Jarvis | To reply to you and link WhatsApp to your account |
| Your questions and Jarvis’s answers | Chat messages on the app, web and WhatsApp | You | To answer you and keep your chat history |
| Portfolio | Holdings, quantities, buy prices, watchlist | You type it, or upload a screenshot, PDF or CSV | So Jarvis can answer questions about your own money |
| Uploaded files | Broker statements, screenshots | You | To read your holdings out of them |
| What Jarvis remembers about you | Goals, time horizon, risk comfort, past decisions you shared | Built from your chats | So you do not have to repeat yourself |
| Preferences | Horizon (short/mid/long), risk (growth/balanced/cautious), currency | You | To shape answers to you |
| Voice (app only) | Short recordings when you tap the mic | You | To turn your speech into text |
| Device and sign-in details | Device type, operating system, browser | Your device | To keep your account secure and show your active sessions |
| How you use Jarvis | Screens and pages you open, steps you finish (like sign-up), the ad or link that brought you, errors and crashes | Your device | To find where Jarvis breaks or where people get stuck, and fix it |
| Feedback | Thumbs up or down, comments | You | To improve answers |
| Support messages | Anything you send us | You | To help you |
We do not collect:
- your broker or bank login
- your PAN, Aadhaar or bank account number (please do not send them; if a statement you upload contains them, see section 8)
- your exact location
- your contacts
Jarvis does not connect to your broker or bank. It cannot place trades or move money.
4. How we use it
- To run Jarvis: answer your questions, read your portfolio, remember your context.
- To send you updates about your holdings on WhatsApp, if you have them switched on (see section 7).
- To keep Jarvis safe: stop abuse, spam and account takeovers, and enforce daily limits.
- To fix problems and make answers better. Our team may read a conversation when you report it, give feedback on it, or when we need to fix a fault or stop misuse.
- To meet the law.
5. AI and your data
- Jarvis’s answers are written by large language models run by other companies.
- We reach these models through OpenRouter. Today they include models from Google and OpenAI.
- For each answer we send the model your question and the context it needs (for example your holdings or what Jarvis remembers). We do not send your email, phone number or account details.
- In-app voice recordings are turned into text by one of these models. We delete the recording straight after. We keep the text like any other message.
- We use these providers only on terms where they do not use your data to train their models. Some keep a copy for a short time to check for abuse.
- We do not use your data to train or fine-tune AI models. Messages you send on WhatsApp are never used to train AI models.
- Jarvis can look up the web to answer you. The search words it uses may come from your question. We do not attach your name or contact details to a search.
- AI answers can be wrong. See our Terms.
6. Who we share it with
We share data only with companies that help us run Jarvis, only for the reasons above.
| Who | What they do | What they get |
|---|---|---|
| Amazon Web Services (Mumbai, India) | Hosting and storage | Everything we store |
| OpenRouter, and the model companies behind it (e.g. Google, OpenAI) | Writing answers, speech to text | The question and context for each answer |
| WATI and Meta (WhatsApp) | Delivering WhatsApp messages | Your number and the messages between you and Jarvis |
| Sign in with Google | Sign-in only | |
| Resend | Sending sign-in codes by email | Your email |
| Firecrawl | Web search for answers | Search words |
| PostHog (US) | Product analytics: which steps people finish and where they get stuck | A random ID for your account, device and browser type, IP address, the screens and steps you use, and the ad or link that brought you. Never your name, email, phone number, chats or portfolio. |
| Sentry (US) | Error reports when the app or web app breaks | What broke and where in our code, app version, device and operating system. No account details, chats or portfolio. |
- We may also share data if the law requires it, or to protect our users or our rights.
- If OneStop AI is sold or merged, we will tell you before your data falls under a different policy.
- WhatsApp is run by Meta, and your chats there are also covered by WhatsApp’s own privacy policy.
7. WhatsApp messages from Jarvis
- If you start a chat with Jarvis on WhatsApp, we reply there.
- Jarvis may also send you updates about your holdings on WhatsApp.
- To stop them, reply STOP or tell Jarvis to stop. We will stop straight away.
8. How long we keep your data
The rule we follow
- We keep your data only as long as we need it to run Jarvis for you.
- We keep some records longer when the law makes us.
- When we no longer need data, we delete it, or strip it so it can no longer be linked to you.
Each kind of data
| Data | How long we keep it | What ends it |
|---|---|---|
| Account details (name, email, WhatsApp number) | While your account is open | You delete your account |
| Chats on the app, web and WhatsApp | While your account is open | You delete a chat, or your account |
| What Jarvis remembers about you | While your account is open | You clear it, send /reset on WhatsApp, or delete your account |
| Portfolio and watchlist | While your account is open | You remove holdings, or delete your account |
| Uploaded files (statements, screenshots, CSV) | Up to 14 days | Deleted automatically once your holdings are read |
| Voice recordings (app mic) | Minutes | Deleted straight after they are turned into text. The text is kept like a chat message. |
| Preferences (horizon, risk, currency) | While your account is open | You change them, or delete your account |
| Feedback on answers | 2 years | Time |
| Technical records of how an answer was made | 90 days | Time |
| Security and sign-in logs | 180 days | Time |
| Server logs | 180 days | Time |
| Complaints and support requests | 2 years after they are closed | Time |
| Usage records (PostHog) | While your account is open | You delete your account. Gone within 90 days. |
| Error reports (Sentry) | Up to 90 days | Time |
| Backups | Up to 90 days | Overwritten automatically |
When you delete a chat
- It disappears from your chat list straight away.
- It is removed from our systems within 30 days.
- On WhatsApp, /reset clears what Jarvis remembers and starts fresh. Your past messages are removed within 30 days.
When you delete your account
- You can delete your account in the app or the web app, in Settings > Privacy & data.
- If you cannot sign in, email admin@onestopai.ai from your account’s email, or message Jarvis from your connected WhatsApp number. We check it is you, then delete your account within 30 days.
- Your account closes straight away and you are signed out. This cannot be undone.
- We delete your account, chats, memory, portfolio, uploads and preferences from our systems, normally within 24 hours.
- You get a private status page to check when it is done.
- If you sign up again later, you get a new, empty account. Deleted data does not come back.
We keep only:
- a deletion record and a scrambled copy of your WhatsApp number, so old delayed messages cannot create your account again. They hold no chats or portfolio.
- security logs, for up to 180 days
- from May 2027, records of how your data was processed, for 1 year, as India’s data protection rules require
- anything we must keep because of a legal claim or a request from a government authority
These are kept separately and are not used for anything else.
Backups
- We keep backups to recover from a system failure.
- Deleted data drops out of backups within 90 days.
- We never restore a backup to bring back data you deleted.
Copies other companies hold
| Company | What they hold | How long |
|---|---|---|
| Meta (WhatsApp) | Messages between you and Jarvis on WhatsApp | Up to 30 days on its servers. Your own phone keeps the chat until you delete it. |
- Copies held by companies that work for us, such as PostHog and Sentry, are gone within 90 days of your request to delete your account.
Data that no longer identifies you
- We may keep totals and statistics that cannot be linked back to you, such as “how many people asked about gold this week”.
9. Where it is stored
- Your data is stored in India, on Amazon Web Services in Mumbai.
- To write an answer, parts of a conversation are processed by model companies that may be outside India. We use only providers that protect it as this policy says.
- Usage records (PostHog) and error reports (Sentry) are stored in the US. They never hold your chats or portfolio.
10. How we protect it
- Data is encrypted when it travels and when it is stored.
- Only team members who need it can access it, and access is logged.
- No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
11. Your rights
You can:
- See the data we hold about you.
- Correct anything that is wrong.
- Delete your account and data: in the app, or by emailing admin@onestopai.ai.
- Withdraw consent at any time. Jarvis may not be able to work without some data.
- Nominate someone to use these rights for you if you die or cannot act.
- Complain to our Grievance Officer (section 15). If you are not satisfied, you can complain to the Data Protection Board of India.
To use any of these, email admin@onestopai.ai or message Jarvis on WhatsApp. We reply within 30 days.
12. Children
- Jarvis is for people aged 18 and over.
- We do not knowingly collect data from anyone under 18. If we find we have, we delete it.
13. Cookies
- The web app uses cookies needed to keep you signed in and secure.
- The web app also uses an analytics cookie from PostHog, to count visits and the steps people finish. It holds a random ID, not your name or email.
- We do not use advertising cookies inside Jarvis.
14. Users in the US
- We do not sell or share your personal information for advertising.
- California residents can ask what we collect, ask us to delete it, and will not be treated differently for asking. Email admin@onestopai.ai.
15. Changes and contact
- We will update the date at the top when this policy changes.
- For bigger changes, we tell you by email, in the app or on WhatsApp before they apply.
- Contact: admin@onestopai.ai
- Grievance Officer: admin@onestopai.ai
OneStop AI Private Limited
B-1006, Brigade Gardenia
9th Cross Road RBI Layout, J.P. Nagar, Bangalore South
Bengaluru 560078
Karnataka
India