Privacy Policy

General

• This Privacy Policy ("the Policy") describes how Jio Platform Ltd. ("Jio") collects, uses, shares and protects personal information collected from users of the EVA Platform and users of bots powered by EVA.
• Jio insists on the highest level of protection for personal information and is obligated to protect it in accordance with applicable laws and regulations.
• This Policy is an electronic record under the Information Technology Act, 2000, published per Rule 3(1) of the IT (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021. It does not require physical or digital signatures.
• To be read together with the Terms and Conditions. Registration or use of any EVA service implies express consent to this Policy.
• This Policy is subject to modification based on business, legal, and regulatory changes. Significant changes will be communicated; users are encouraged to review the page periodically.

Collection of Information

Jio may collect the following types of information:

Personal Information — information reasonably usable to identify a user, including but not limited to:

• Basic registration details: Name, Phone Number, Email Address, Communication or Permanent Address.
• Photograph provided during registration or profile update.
• Proof of Identity and Address documents (PAN Card, Driving License, Passport, etc.)
• Transactions performed, identifiable via customer ID or other unique identifier.
• Demographic details: gender, city, PIN code, or nearest location.
• Usage logs / server logs / cookies, which may contain personal or sensitive personal information.
• Service-specific identifiers: IMSI, MSISDN, Customer ID, etc.
• Device-specific identifiers: IMEI, OS-specific identifiers.

Sensitive Personal Data or Information (treated as part of Personal Information), including but not limited to:

• Passwords or authentication information for any Jio service or app.
• Financial information — bank account, credit card, debit card, or other payment instrument details.

Non-Personal Information — information that does not identify an individual, including session data, web beacons, usage and transaction data, and aggregate log/usage information. Used to deliver web pages, tailor services, measure traffic, improve quality/functionality, and inform advertisers of geographic origin of users.

Use of Information

Information provided is used for purposes connected with business operations, including:

• Verifying identity, access, privileges, and relationship with Jio.
• Provisioning, testing, or improving products/services; recommending products or services.
• Processing requests, enquiries, and complaints; customer service.
• Communicating bills, invoices, offers, content, advertisements, surveys, policies, or administrative information.
• Analytics and reviews for service improvement.
• Personalizing advertising, products, and offers.
• Completing purchases.
• Supporting law enforcement / investigations related to public safety or anti-fraud, as permitted by law.
• Other uses consented to by the user.

Personal Information is kept confidential per applicable laws, with reasonable security controls in place.

Content posted publicly (comments, messages, blogs, etc.) becomes published content and is not considered personal information under this Policy. Takedown requests will be actioned where technically feasible and legally permitted.

Non-Personal Information is used to analyse trends, administer services, understand user behaviour, gather aggregate demographic data, and measure network/app traffic patterns. As it does not identify individuals, it may be used and disclosed at Jio's discretion.

Sharing and Disclosure

Jio does not sell or rent personal information to third parties. Disclosure is limited to the following circumstances:

• Mergers or acquisitions — information may be shared with the acquiring/merged entity, which remains bound by this Policy.
• Partners — vendors, consultants, contractors, group companies/affiliates providing services such as verification, payment processing, customer service, hosting, data analysis, infrastructure, and IT services. Partners operate under contract and confidentiality restrictions.
• Customer-Initiated Sharing — e.g. third-party login via Jio ID. Fresh notice and consent obtained before sharing. Jio's Policy does not apply once data reaches the third party; the third party's own privacy policy governs.
• Government or judicial process — shared with authorities for investigations, legal compliance, enforcement of terms, or to protect Jio, users, and Partners.
• Legal reasons — shared with affiliates to detect/prevent identity theft, fraud, illegal activity, and to correlate accounts against misuse.
• Protection of Jio — to pursue remedies or limit damages from unauthorised use or misuse by third parties.

Storage, Retention and Security

• Security practices aligned with IS/ISO/IEC 27001, covering strategic, operational, managerial, technical, and physical controls. Access to personal information is restricted on a need-to-know basis.
• Industry-standard precautions across website, applications, portals, and network equipment. Secure systems used when accessing/changing account information. Encryption and other controls applied to data at rest and in transit.
• Information is stored primarily in electronic form; some data may be stored physically.
• Third parties engaged for collection/storage/processing must comply with applicable law and adopt reasonable security standards on a commercially reasonable basis.
• Jio is not responsible for breaches or disclosures caused by factors outside its control — hacking, social engineering, cyber terrorism, espionage, or force majeure events (sabotage, fire, flood, explosion, acts of God, civil commotion, strikes, riots, insurrection, war, government action).

Third Party Websites, Applications and Services

Jio's app/website may link to other websites/applications governed by their own privacy policies, beyond Jio's control. Once a user leaves Jio's servers, the destination site's policy applies instead.

Where a user requests Jio to share information with a third party (e.g. login via Jio ID), fresh notice and consent are obtained beforehand. Jio has no control over subsequent handling of that data; the user should review the third party's policy before consenting.

Access, Correction and Deletion

Users are responsible for ensuring information provided is correct, current, and that they hold the rights/consent to provide it.

Subject to technical feasibility and identity verification, Jio provides access to personal and sensitive personal information it holds about the user.

Deletion or withdrawal of consent may result in cancellation of registration or loss of service access. Correction/update/deletion requests may not be processed where unsupported by valid documentation, where retention is required by law/legal proceedings, where technically impractical (e.g. backup data, system redesign), or where it risks other users' privacy.

Queries and Complaints

For feedback or concerns regarding protection of personal information, contact:

grievance.officer@jio.com

Privacy-related feedback or concerns may also be directed to the Privacy Grievance Officer at the same address.