Skip to main content

Privacy Policy

Last updated: 2026-04-26

JWLS Technologies Private Limited ("JWLS", "we", "us", "our") operates the JWLS Live Commerce platform — software that lets jewellery merchants run live shopping shows that simultaneously broadcast to Instagram Live, Facebook Live, YouTube Live, and the merchant's own storefront.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and how to exercise your rights over it. By using JWLS, you agree to the practices described here.

1. Who we are

JWLS is a multi-tenant Software-as-a-Service product operated by JWLS Technologies Private Limited, headquartered in India. Each jewellery merchant ("seller") who uses JWLS is an independent business; we act as a data processor on their behalf for end-customer data.

2. What data we collect

2a. Seller data

  • Business name, contact email, phone number, GSTIN, billing address.
  • Inventory data: products, prices, images, stock levels, categories.
  • Sales data: orders, payments, customer interactions.
  • Connected social platform credentials — Facebook Page Access Tokens and Instagram Business Account IDs that the seller voluntarily connects via Meta OAuth so JWLS can pull comments + viewer counts from their Live shows.

2b. End-customer data (collected on behalf of the seller)

  • Name, WhatsApp number, email, shipping address.
  • Order history, cart contents, product reactions.
  • Live show interactions: comments, reactions, viewer presence.
  • Public Instagram + Facebook usernames + comment text when customers comment on a seller's Live video. JWLS stores only the public metadata Meta exposes via the Graph API.

2c. Automatically collected

  • IP address, browser type, device type, operating system.
  • Pages visited, time spent, referrer URL.
  • Cookies — session, preferences, analytics. See Cookie Policy below.

3. How we use your data

  • Operate the platform — process orders, run live shows, deliver inventory.
  • Unified live commerce chat — read comments from a seller's connected Instagram Live and Facebook Live and display them alongside native storefront chat so the seller can respond to all viewers in one place.
  • Improve product experience — anonymous usage analytics.
  • Customer support — when you contact us with a problem.
  • Legal compliance — tax records, fraud prevention, regulatory requests.

4. Data we get from Meta (Facebook + Instagram)

When a seller connects their Facebook Page or Instagram Business account to JWLS, we use the Meta Graph API to access:

  • The seller's Page ID, Page name, and Instagram Business Account ID.
  • Public comments and viewer counts on the seller's Live videos.
  • The seller's Page Access Token so we can keep reading the above without re-authenticating each time.

We do not access:

  • The seller's private Facebook profile, friends list, or personal posts.
  • The seller's Instagram followers' personal data beyond what they post publicly on a Live.
  • Direct messages, unless the seller explicitly enables Inbox unification.

We use Meta data only for the live commerce features the seller activates. We never sell or share Meta data with third parties. We comply with Meta's Platform Terms and Developer Policies.

5. How we share data

We do not sell your data. We share it only with:

  • Payment processors (Razorpay, Stripe, etc.) — only what's needed to charge.
  • Shipping partners (Shiprocket, Delhivery, etc.) — only the recipient address + order details.
  • Cloud infrastructure providers (Supabase, OVH, OneProvider) — hosts our servers; access is encrypted and access-controlled.
  • Government authorities — when legally required by Indian law (RBI, GST, court orders).

6. How long we keep your data

  • Active account data: as long as your account is active.
  • Order data: 7 years (GST + tax compliance).
  • Live show replays: 30, 90, or 365 days based on the seller's plan; deleted automatically after.
  • Live comments + reactions: kept with the broadcast record on the same retention as replays.
  • Account closure: data deleted within 30 days of cancellation, except records we must retain by law.

7. Your rights

Per India's Digital Personal Data Protection Act (DPDP) and equivalent regulations, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data (subject to legal retention).
  • Withdraw consent for processing.
  • Disconnect your Facebook / Instagram account from JWLS at any time via Settings → Connected Accounts.
  • Export your data in machine-readable format.

To exercise these rights, email privacy@jwls.co or use the in-app Settings → Privacy → Delete My Data flow. We respond within 30 days.

8. Data deletion

You can request deletion at any time. See our Data Deletion Instructions page for step-by-step guidance and the automated callback URL Meta uses to honor your request.

9. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Tokens are stored using pgsodium server-side envelope encryption. Production servers are accessed only via SSH with key-based authentication. Personnel access is logged and audited.

Despite our efforts, no system is 100% secure. If we discover a breach affecting your data, we will notify you within 72 hours.

10. Children's data

JWLS is not intended for use by anyone under 18. We do not knowingly collect data from minors. If you believe we have collected data from a child, contact us and we will delete it.

11. Cookies

We use essential cookies for session management and optional analytics cookies (Google Analytics, Microsoft Clarity, Meta Pixel) only when the seller has enabled them. You can manage cookies via your browser settings.

12. Cross-border transfers

Some of our infrastructure is hosted in the EU (Hetzner) and North America. By using JWLS, you consent to your data being processed in these regions under encrypted, access-controlled conditions.

13. Changes to this policy

We may update this Privacy Policy. Material changes will be announced in-app and via email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

14. Contact

JWLS Technologies Private Limited
Email: privacy@jwls.co
Data Protection Officer: privacy@jwls.co