Skip to content

Privacy Policy

Last updated: July 2026

Jama ("we", "our", "us") operates the jama.pk website and app.jama.pk application. This Privacy Policy describes how we collect, use, and protect your information when you use our services.

Information We Collect

We collect information you provide directly to us:

  • Account information: name, email address, company name, phone number when you register
  • Company data: business registration details, NTN, FBR IRIS credentials (tokens), item catalogs, and invoice data
  • Payment information: processed by our third-party payment provider; we do not store card details
  • Communications: messages you send through our contact form or support channels

How We Use Your Information

We use your information to:

  • Provide and maintain the Jama invoicing service
  • Submit invoices to FBR on your behalf through the PRAL API
  • Sync invoice data with connected CRM platforms (when authorized by you)
  • Send service-related communications (account confirmations, billing notices)
  • Improve our services and develop new features
  • Respond to your inquiries and support requests

Data Storage and Security

Your data is stored on servers hosted in Pakistan. We use industry-standard encryption (256-bit TLS) for data in transit and encryption at rest for sensitive data including FBR credentials.

FBR API tokens are stored encrypted and are only decrypted at the moment of API submission. We follow security best practices including regular access audits, principle of least privilege, and secure development practices.

Third-Party Sharing

We share your information only in the following circumstances:

  • FBR/PRAL: Invoice data is submitted to FBR through the PRAL API as required for digital invoicing compliance
  • CRM platforms: When you explicitly connect a CRM (e.g., Zoho Books), invoice data is synced to that platform
  • Payment processors: Payment information is shared with our payment provider to process subscriptions
  • Legal requirements: When required by Pakistani law, regulation, or legal process

We do not sell your personal information to third parties.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your invoice data in standard formats
  • Withdraw consent for optional data processing

Data Retention

We retain your data for as long as your account is active. Invoice records are retained for the period required by Pakistani tax law (currently 6 years). After account deletion, we remove personal information within 30 days, while anonymized usage data may be retained for analytics.

Contact

For privacy-related questions or to exercise your rights, contact us at hello@jama.pk.