Privacy notice

What we collect

• Identity and contact details: name, email, mobile, date of birth, PAN.
• Your investments: holdings, transactions, statements and the files you or your adviser upload (eCAS, registrar statements).
• Your risk profile and the approvals you give for portfolio changes.
• Questions you ask Ask JSS, and your adviser's notes about your account.
• Sign-in and security records: when you signed in, from which network address.

Why we use it

• To give you investment advice and show you your portfolio, as your investment adviser.
• To keep the records the law requires of investment advisers.
• To keep your account secure and investigate misuse.

You give consent when you sign the advisory agreement with JSS. We do not sell your data or use it for marketing by anyone else.

Who processes it for us

• MIDASX (Vijya Fintech, India): our portfolio platform. Holds your investment records and your login.
• Supabase (Mumbai, India): our database for records, approvals and notes.
• Vercel: runs this website from its Mumbai region.
• DeepInfra and Groq (United States): produce Ask JSS answers and spoken replies. They receive the question and the portfolio figures needed to answer it, not your PAN or contact details.
• Resend (United States) and Google Workspace: send and receive our email.

Each processes data only on our instructions. Data sent outside India goes only to countries the Government of India has not restricted.

How long we keep it

At least five years after our advisory relationship ends, as the law requires of investment advisers, and longer if a law or a dispute requires it. After that it is deleted.

How we protect it

Encrypted connections throughout, data stored in India, sign-in through your MIDASX login, access limited to your adviser and you, records that cannot be edited after the fact, and daily backups. If a breach affects your data, we will tell you and the Data Protection Board of India without delay.

Your rights

• Get a summary of the personal data we hold about you and who we have shared it with.
• Have it corrected, completed or updated.
• Have it erased, except what the law requires us to keep.
• Withdraw consent. We will stop processing, though we may then be unable to keep advising you.
• Nominate someone to exercise these rights if you die or cannot act.
• Have a grievance resolved, and if you are not satisfied, complain to the Data Protection Board of India.

Write to hello@jssadvisory.com. We reply within 30 days.

Contact

Grievance officer: Jamshid Pandole, hello@jssadvisory.com · +91 98210 72952.

JSS Advisory LLP, Second Floor, Apeejay Chambers, Wallace Street, Fort, Mumbai 400001.