Privacy Policy

Who we are

OneStop AI (“OneStop”, “we”, “us”) builds AI companions for the decisions you carry. Our first product, Jarvis, is a companion for money. This policy covers this website and the Jarvis application.

Entity: [REGISTERED ENTITY NAME] · [REGISTERED ADDRESS]
Privacy contact: privacy@onestop.ai

What we collect

You give us

• Account information — your name, email address, and authentication details when you create an account or join the waitlist.
• Portfolio and financial information — holdings, transactions, balances, goals and anything you write into the Ledger. This is the data Jarvis reads in order to be useful to you.
• Conversations — the questions you ask Jarvis and the context you give it.
• Support correspondence — anything you send us by email.

We collect automatically

• Usage and device data — pages viewed, features used, approximate location derived from IP, browser and device type, and error diagnostics.

From connected accounts

If you choose to connect a broker, bank or other financial account, we receive the holdings and transaction data that connection returns. We request read-only access. We do not place trades, move money, or write to your accounts. You can disconnect a connected account at any time, and disconnecting stops any further data flowing to us.

Why we use it

• To provide Jarvis — answering your questions and reflecting your position back to you.
• To create and secure your account, and to prevent fraud and abuse.
• To fix problems, monitor reliability and improve the product.
• To contact you about the service, and about the beta if you asked us to.
• To meet legal, regulatory and tax obligations.

Under India’s Digital Personal Data Protection Act, 2023, we process your personal data for these stated purposes on the basis of the consent you give when you create an account and connect data, or where processing is necessary for legitimate uses the Act permits. You may withdraw consent at any time (see Your choices below); withdrawing it may mean Jarvis can no longer function.

We do not train models on your data

Jarvis is built on large language models operated by third parties. When Jarvis answers you, the context needed for that answer is sent to the model provider under agreements that prohibit using it for training. We send the minimum required and we do not send credentials for connected accounts.

Who processes it

We share personal data only with service providers who process it on our instructions, under contract, for the purposes above:

• Cloud hosting and storage — [PROVIDER], for running the service and storing data.
• AI model providers — [PROVIDER(S)], to generate Jarvis’s responses, under no-training terms.
• Account connectivity — [PROVIDER], where you connect a broker or bank.
• Analytics and error monitoring — [PROVIDER], for reliability and diagnostics.
• Email delivery — [PROVIDER], for service and beta correspondence.

We may also disclose data where the law requires it, to enforce our terms, or as part of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

Where it is stored, and how long

Data is stored on servers operated by our cloud provider and may be processed outside your country, including in jurisdictions with different data protection laws. Where we transfer personal data internationally we rely on the safeguards the applicable law requires.

We keep your data for as long as your account is open. If you close your account we delete or irreversibly anonymise your personal data within 90 days, except where we must keep records longer to meet a legal, tax or regulatory obligation, or to resolve a dispute.

Security

We encrypt data in transit and at rest, restrict internal access to those who need it, and use read-only access for connected accounts. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

Your choices

You can, at any time:

• Access a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your account and the data associated with it.
• Withdraw consent for processing, or disconnect a linked account.
• Nominate another person to exercise these rights if you die or become incapacitated, as the DPDP Act provides.
• Complain to a data protection authority.

To exercise any of these, email privacy@onestop.ai. We respond within 30 days. If you are in the EU or UK, you have the rights the GDPR provides, including data portability and objecting to processing.

Grievance Officer (India): [NAME] · grievance@onestop.ai

Children

Jarvis is not for anyone under 18. We do not knowingly collect data from children. If we learn we have, we delete it.

Changes

If we change this policy we will update the date above, and for material changes we will tell you by email or in the product before the change takes effect.