Jomi Business privacy policy
This page explains in plain words what data Jomi Business receives, why, and how we protect it. We process personal data in line with the law of the Republic of Tajikistan on personal data protection.
1. Who is responsible for the data
Jomi Studio (Dushanbe) is responsible for the data of the owners and staff who sign in to Jomi Business.
The data of a business’s clients and guests (names, phones, purchases, debts, bookings) is entered by the business itself. The business is responsible for keeping it lawfully; Jomi Studio stores and processes it only on the business’s behalf and to run the service.
2. What data we receive
Owner: name, phone number, password (stored only as a protected hash — we never know the password itself), chosen language.
Staff: name, login, PIN (also only as a hash), role and branch.
Business data: products and prices, receipts, shifts, expenses, stock, deals, payroll, bookings — everything you enter.
QR menu guests: the order, the table number and — if the guest chose to give them — a name and phone.
Technical data: the IP address (to limit password guessing and spam orders), the sign-in cookie and the «known device» cookie (so other people’s wrong tries never block your phone), this device’s notification subscription, the browser and phone name for the «My devices» list (30 days), and in a problem report — the app version and the screen.
3. Why
To run the service: count sales, debts, stock and pay, show reports, take guest orders and send notifications.
To protect the account and the money: limits on sign-in attempts, the activity log, a 24-hour hold on payment details and exports after a password reset with a code.
To take subscription payments and answer support requests.
We show no ads, never sell data and use no third-party tracking or analytics.
4. Where data is stored and who else receives it
The service and its database run on the platform of an outside service, Cloudflare (Cloudflare, Inc., USA). The data is kept not in Tajikistan but on Cloudflare’s servers in other countries: the main database in the Asia-Pacific region, the nightly backups in Eastern Europe. Data travels only over an encrypted connection (HTTPS). The database is backed up every night and backups are kept for 35 days. Once a week the Jomi Studio team keeps a copy of the database on its own, outside Cloudflare (the last 5 copies), and Cloudflare keeps the database’s change history for 30 days — to recover after a failure.
The payment service (if you pay online) receives the amount, the invoice number, the business name and the owner’s name and phone. The SMS service (if SMS is connected) receives the phone number and the code — to confirm the number at sign-up and to reset a password. Telegram receives the messages you turned on yourself (daily totals, orders, and warnings about a sign-in from a new device: the name, role, phone or computer, city and time of the sign-in). Besides that, the Jomi Studio team’s Telegram gets the business name and the owner’s name and phone at sign-up and at a subscription payment, the text of your «Report a problem» messages with the name and role of whoever sent it, and a daily service summary without phone numbers: the names of businesses whose subscription is ending, whose payment waits for confirmation or whose Telegram got disconnected.
We pass data to no one else, unless the law requires it.
5. How long we keep it
While you have a business in Jomi Business and for at least 12 months after the subscription ends — or less, if you ask us to delete the data. Backups disappear after 35 days. Sign-in attempt counters by IP are kept from 15 minutes to a day.
6. Your rights
You can see and correct your data in the app, export it («Settings → Backup copy») and ask us to delete the account and the business — write to us in Telegram or by email, and we will call the number the business is registered to, to make sure the owner is asking. We delete within 30 days and tell you when it is done; copies leave the nightly backups 35 days later, and the team’s weekly copies after the next five. Messages about your business in the team’s Telegram chat are deleted together with the data.
An employee can ask the business owner to change or delete their data; the owner closes their access under «Staff».
7. Cookies and browser storage
We use only necessary cookies: signing in and recognising your device. The browser’s storage keeps your language, a copy of the catalogue and of the business data (profile, payment QR) for working offline, unsent sales and, on a shared cash-desk phone, the names and logins of the staff who signed in last, for a quick sign-in. Signing out wipes the business data from the phone. There are no advertising cookies.
8. How we protect data
Passwords and PINs are stored as hashes, the connection is encrypted, staff have different rights, important actions go into a log, and one business never sees another’s data. If we learn of a leak, we will tell the owners affected.
9. Changes to this policy
If the policy changes, we update this page and its version date, and warn about important changes in the app.