Privacy Policy

This policy explains what personal data Jigi processes when a company (“tenant”) uses the platform, why we process it, and the choices available to tenants and their employees. It applies to the Jigi cloud service and, where applicable, to on-premise deployments operated under a Jigi license.

For data your organisation enters into Jigi about its employees — profiles, leave records, contracts, expenses, and similar — your organisation is the data controller and Jigi acts as a data processor, operating strictly on your instructions.

For account and billing data tied to your organisation’s relationship with Jigi directly, Jigi acts as the data controller.

• Account data: name, work email, role, and authentication credentials.
• Workspace data entered by your organisation: employee records, leave requests, bookings, accounting entries, documents, and workflow history.
• Usage data: log-in timestamps, feature usage, and audit trail events.
• Device and connection data: IP address, browser type, and session identifiers.

• To provide, maintain, and secure the modules your organisation has enabled.
• To authenticate users and enforce tenant and role-based access controls.
• To send transactional notifications — approvals, reminders, and account alerts.
• To diagnose issues, monitor platform health, and improve reliability.

Workspace data is retained for as long as your organisation’s subscription is active, plus a limited recovery window after cancellation. On-premise deployments store data entirely within infrastructure your organisation controls; Jigi does not retain a copy. Audit logs are retained separately to support compliance and security investigations.

Data is encrypted in transit and at rest. Every tenant’s workspace is logically isolated so that data, permissions, and configuration cannot cross tenant boundaries. Access to production systems is restricted, logged, and reviewed. See our Security page for more detail.

We use a limited set of infrastructure and service providers — for hosting, email delivery, and monitoring — under data processing agreements consistent with this policy. We do not sell personal data, and we do not share workspace data across tenants.

Depending on your jurisdiction, you may have the right to access, correct, export, or request deletion of your personal data. Employees should first contact their organisation’s administrator, who controls the underlying records; organisations can reach us directly using the contact details below.

We will update the “last updated” date whenever this policy changes, and notify tenant administrators of material changes in advance.

Questions about this policy or a data request can be sent to privacy@jigi.io.