1. Who we are
JODNA is the business name of Tarun Tuteja, sole proprietor, based in Navi Mumbai, Maharashtra, India.
JODNA has two parts:
- jodna.in — the public website, where anyone can see exhibitions and the brands taking part.
- app.jodna.in — the platform where organisers and exhibitors sign in and work.
When this policy says "JODNA", "we", "us" or "our", it means the proprietorship of Tarun Tuteja trading as JODNA.
Contact for anything in this policy: jodnaapp@gmail.com · +91 98339 89831
2. The short version
- We ask for what the product needs, and not more.
- We never take card numbers and we never hold your customers' money. Bills your business raises carry your own UPI ID, and payments go straight to your bank.
- The customer records your business enters belong to your business, not to us.
- Website analytics load only if a visitor presses Allow analytics. If they decline, or their browser sends Do Not Track, nothing loads at all — and the site works exactly the same.
- We don't sell personal data and we don't run advertising trackers.
3. Information we collect
3.1 If you have a JODNA account
| What | Required or optional | Why we have it |
|---|---|---|
| Your name | Required | Your account and your documents |
| Mobile number | Required | Your identity in JODNA; signing in with your PIN |
| Email address | Required | Signing in, account recovery, notices about your account |
| Password | Required (at least 8 characters) | Signing in. Stored only as a one-way hash |
| 4-digit PIN | Optional | A faster way to sign in, if you set one |
| WhatsApp number | Optional — we use your mobile number if you leave it blank | Messages about your events |
| Business name | Required for exhibitors; optional for organisers who only run events | Your listing and your documents |
| City and state | Required | Your public listing |
| Event, stall, product, stock and sales data you enter | Required to use those features | Providing the service to you |
| Your UPI ID or payment QR image | Optional | So your bills can carry a pay-now code |
| Details of team members you invite | Optional | Letting colleagues into the same business |
We do not collect your GSTIN, PAN or any other tax identifier. If you need a GST invoice for a JODNA plan, contact us and we'll arrange it with you directly.
We do not ask for your date of birth, and there is no age-verification step in JODNA. We rely on users being adults, as the Terms require.
3.2 Customer records your business enters
When your business records a sale, saves a customer, or captures a visitor's details, you are entering another person's personal data into JODNA. That data is yours. You decide what to collect and why, you make sure you are allowed to collect it, and you respond to that person's requests about it.
We store it, protect it, and act on your instructions. We do not use your customers' data for our own purposes, and we do not share it with other businesses on JODNA.
Reports organisers see are deliberately aggregated: they are designed and tested to exclude customers' names, phone numbers, emails, invoice numbers and payment details. An organiser can see how a stall performed without seeing who its customers were.
3.3 If you visit jodna.in
| What | When | Why |
|---|---|---|
| Analytics: pages viewed, approximate location, device and browser type, referring site | Only after you press Allow analytics | Understanding which pages are useful |
| Your analytics choice | Always — stored in your browser, not sent to us | So we don't ask again |
| Sign-in cookies | When you sign in to app.jodna.in | Keeping you signed in; the app cannot work without them |
4. Why we use it
| What we do | Why |
|---|---|
| Create and run your account, and provide the features you use | To provide the service you signed up for |
| Produce bills, invoices and sales records | To run your business — these records are yours |
| Send sign-in and password-reset emails | To keep your account secure and usable |
| Tell you about changes to your plan or to JODNA | Because you need to know |
| Website analytics | Only with your consent |
| Investigate abuse, fraud and security incidents | To protect you, your customers and us |
| Meet tax and accounting requirements | Because the law requires it |
We do not send marketing email. JODNA has no email-marketing system. The marketing tools in JODNA are WhatsApp broadcasts that your own business sends to its own customers, using credits you buy.
We do not make automated decisions about you that produce legal or similarly significant effects.
5. Who we share it with
We use a small number of service providers. Each is permitted to use the data only to provide their service to us.
| Provider | What for | What they hold |
|---|---|---|
| Supabase | Database, sign-in, file storage | The account, business and customer data described here, plus images you upload |
| Vercel | Hosting jodna.in and app.jodna.in | Technical request data such as IP address and browser type, in server logs |
| Google Analytics | Website analytics | Usage data — only for visitors who press Allow |
| Meta (WhatsApp) | Sending WhatsApp broadcasts, only if your business connects a WhatsApp Business number | Message content and recipients' phone numbers, for messages your business sends |
We may also disclose data where the law requires it, or to prevent serious harm to someone.
We never sell personal data. We do not share one business's customers with another business.
Where your data is stored
Your data is held in our Supabase database in Seoul, South Korea (AWS ap-northeast-2), and files you upload are held in the same Supabase project. This means your data is stored outside India.
We are telling you this plainly rather than burying it, because it is something you may reasonably want to know before you put your customers' details into a platform. Under India's data protection law, transferring personal data out of India is permitted, subject to any restrictions the Government may notify. We remain responsible for your data wherever it is held, and these terms and this policy apply to it regardless of where it sits.
Some data passes through other countries in transit: our website and application are served through Vercel's global network, and Google Analytics processes data on Google's servers for visitors who consent to analytics. The database — the main store of your business and customer records — is in Seoul.
6. Cookies, analytics and shared links
Sign-in cookies keep you signed into app.jodna.in. They are necessary for the app to function, so they are not optional.
Analytics are opt-in. JODNA uses Google Analytics 4, which sets cookies and processes data on Google's servers. It is the only third-party script on our website, and:
- the script is not loaded at all until a visitor presses Allow analytics;
- if they press No thanks, nothing is loaded and any queued data is cleared;
- if their browser sends Do Not Track, we treat that as a refusal and do not even ask;
- the choice can be changed at any time from Cookie settings in the site footer;
- the application at app.jodna.in is not measured with Google Analytics.
Google Analytics 4 does not store visitors' full IP addresses. We make no claim beyond that: we do not assert that our configuration adds further anonymisation.
Links your business shares are public to anyone holding them. When a business shares a bill, an event page or a stall page, anyone who has that link can open it. A bill link shows the bill — the business's details, the invoice number, the items and amounts, and the customer's name. It does not show the customer's phone number or email. Links do not currently expire. Share them only with the person they are meant for.
The public directory shows an exhibition's name, venue, city and dates, and the names of brands whose public stall page is switched on. It never shows contacts, sales or money. Pages appear only while the owner keeps them public.
7. How long we keep it
| Data | How long |
|---|---|
| Account, business, product and stock data | While your account is open. After your subscription ends, we archive it for up to 12 months — kept, but not in active use — so that it can be restored if you come back. After that it is deleted |
| Bills, invoices and sales records | As your business records. We do not delete these behind your back: tax law expects records to be kept for a number of years, and we keep them for that period |
| Customer records your business entered | While your business keeps them, and subject to the same 12-month rule after your subscription ends. You can ask us to delete them sooner, subject to tax requirements |
| Your analytics choice | Until you clear your browser storage |
| Website analytics | Per our Google Analytics setting (currently 14 months) |
| Server logs | At least one year |
You can ask us to delete your data sooner than the 12 months, and we will do it, except for the records tax law requires us to keep. Archiving is our default, not a refusal to delete — if you ask us to erase your data, we erase it. Archiving simply means we don't throw your records away the moment a subscription lapses, and that choice is always yours.
On how deletion happens: it is carried out manually by us on your request. We do not have an automatic deletion job, and we do not claim data disappears on a timer. The 12-month period is a limit we apply and honour, not an automated process — we would rather tell you that plainly than describe software we have not built.
Backups, and how to take your own copy
We do not keep a separate backup copy of your data. Our database provider may keep its own platform-level copies depending on our plan, but we cannot restore your business to an earlier point in time on request, and we do not promise to.
What we do give you is a copy you control. Any business owner or manager can download a complete JSON backup of their business at any time from app.jodna.in → Backup. It includes your business details, events, event days, customers, products and variants, sales, items, payments and payment corrections. Keep it somewhere safe.
That is why we archive rather than delete when a subscription ends: there is no hidden backup we can rebuild your account from, so deleting early would mean losing it permanently.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask to:
- know what we hold about you, and who we have shared it with;
- correct it — most of it you can edit yourself in the app;
- have it erased, where we no longer need it for the purpose it was collected;
- withdraw consent, including for website analytics, at any time;
- nominate someone to act for you if you die or become unable to act;
- complain to us, and then to the Data Protection Board of India.
Write to jodnaapp@gmail.com with the subject "Data request". We acknowledge requests within 7 days. Deletion is currently carried out by us manually, on request — there is no self-serve delete button yet, and we will not pretend otherwise. When we acknowledge your request we will tell you how long it will take.
Asking about your personal data is free. So is correcting it, erasing it, withdrawing consent, or asking what we hold. We will never charge you for exercising a right in this section.
Restoring or exporting business data is a different thing, and may carry a fee. If your subscription has ended and you later need operational records — invoices, sales history, stock — restored or exported, that is a service we provide, and the Terms explain the fee. We will always tell you the amount before any work begins, and you can say no.
We may ask you to confirm the request from the phone number or email on your account, so that we do not hand your data to someone else.
If you are a customer of a business that uses JODNA, your data is controlled by that business. Please ask them. We will help them respond.
How we describe our role. In plain terms: for your own account and business data, JODNA decides how it is handled and is responsible for it. For the customer records your business enters, your business decides and JODNA acts on your instructions. How those roles are named in law — and whether that holds in every situation — is a matter for legal advice, and we describe the arrangement here in the way the service actually works.
9. Security
- Passwords are stored only as one-way bcrypt hashes, and PINs are hashed the same way. We cannot read either.
- Each business's data is separated inside the database by row-level security, enforced by the database itself and covered by automated tests. One business cannot read another's records.
- Traffic is encrypted in transit.
- Administrative access is possible and we are telling you so. The proprietor, and any platform administrator appointed by the proprietor, can access account data across the platform for support, billing, abuse handling and legal compliance. This is a deliberate capability, not an oversight.
No system is perfectly secure. We will tell you if something goes wrong.
10. Children
JODNA is a business tool for adults. Accounts are not intended for anyone under 18, and we do not run tracking, behavioural monitoring or targeted advertising aimed at children. If you believe a child's data has reached us, tell us and we will delete it.
11. If something goes wrong
If we discover a personal data breach, we will notify the Data Protection Board of India and the people affected, explaining what happened, what data was involved, what we have done and what you can do. We will not delay notification while we investigate to the point of putting people at risk.
12. Changes to this policy
If we make a material change, we will tell account holders by email or in the app before it takes effect. The version number and date at the top of this page always reflect the current version.
13. Contact and grievances
JODNA — Tarun Tuteja, sole proprietor Navi Mumbai, Maharashtra, India jodnaapp@gmail.com · +91 98339 89831
Grievance contact: Tarun Tuteja, at the details above.