Security & Data Handling

Last updated: 13 October 2026

Janemoney helps users understand their finances using information they provide and information they choose to connect. Financial information can be sensitive, so protecting it requires careful handling throughout collection, processing, storage, access, and deletion.

This page explains our approach to security and data handling, including connected accounts, AI processing, storage, and account deletion.

1. How we handle your data

We handle information according to the features you use and the permissions you grant. This may include account details, conversations with Jane, uploaded financial documents, financial information obtained from connected services, and insights generated from that information.

Our approach is to:

• Use information for the features and purposes described in our Privacy Policy.
• Limit collection and processing to what is relevant to the feature being used.
• Restrict access to information to authorised purposes.
• Protect information against unauthorised access, loss, alteration, and disclosure.
• Provide ways to disconnect supported integrations and request account deletion.
• Review data-handling practices as our product and infrastructure evolve.

The information processed depends on your use of Janemoney and the permissions you grant to connected services.

2. Infrastructure and storage

Janemoney uses a cloud hosting provider for its infrastructure and storage, with our servers located in India.

Information may be held in persistent databases or files, or processed temporarily in application memory and caches. Technical logs and backups may also contain information needed to operate, troubleshoot, or protect the service.

Different systems can have different storage, access, and retention characteristics. Deleting information from one location does not necessarily mean that every copy, log entry, or backup has been removed at the same moment.

We continue to evaluate how information moves between the application, storage systems, integrations, and service providers so that data-handling practices remain consistent with our stated purposes and applicable requirements.

3. Protecting information

Security measures should address the full lifecycle of information, from the moment it is received until it is deleted or otherwise no longer retained.

Janemoney's security approach covers areas such as:

• Secure connections: protecting information exchanged between users and the service.
• Storage protection: safeguarding information held in persistent storage.
• Credential and token handling: protecting authentication credentials and access tokens used by integrations.
• Access management: limiting access to systems and sensitive information to authorised purposes.
• Monitoring and investigation: identifying and investigating suspicious activity, errors, or potential security incidents.
• Security testing: identifying weaknesses and assessing whether appropriate safeguards are operating as intended.
• Data deletion: removing information from relevant systems when deletion requests are processed, subject to applicable retention requirements.

These are security control areas, not a claim that every control has been independently certified or that every system has passed an external security assessment. No online service can guarantee that security incidents will never occur.

4. Connected accounts and Google access

When you connect Google or another supported service, Janemoney uses the permissions granted through the relevant authorisation flow.

For Google integrations, access is governed by the permissions you approve and Google's applicable policies. Gmail access may involve processing email content to identify financial documents or transaction-related information, depending on the feature you use.

You can disconnect a Google integration or revoke its authorisation. Once revocation takes effect, Janemoney should no longer be able to access information through that authorisation.

Disconnecting an account is different from deleting information already obtained from it. If you want stored information removed, you should also request deletion through Janemoney's account deletion process.

Access tokens and other credentials used to maintain integrations require appropriate protection. Their handling, revocation, and deletion must be consistent with the relevant provider requirements and Janemoney's security procedures.

5. AI processing and service providers

Janemoney uses AI technology to respond to user prompts and analyse information submitted for supported features. Some prompts, documents, and financial information are processed by Janemoney's own in-house open-weights AI models, running on our own servers, to generate responses. We do not send this information to any third-party AI service or API. Janemoney does not use your personal data to train AI models.

Our cloud hosting provider supports Janemoney's infrastructure and storage. Depending on the feature and system configuration, other service providers may also process information to support the service.

Information is subject to the relevant provider's processing arrangements and applicable contractual, legal, and platform requirements.

Google user data is subject to Google's API policies, including the Limited Use requirements. We do not treat a user's connection of Google as permission to use their data for unrelated purposes.

AI-generated analysis may be inaccurate or incomplete. Users should verify important financial figures, extracted details, and tax-related information before acting on them.

6. Retention and deletion

Janemoney supports account deletion requests and the disconnection of connected accounts.

When an account deletion request is processed, relevant stored personal information may be deleted from the systems covered by the deletion procedure. The information involved can include account records, stored financial information, conversations, and derived insights, depending on the applicable process and the data concerned.

Some information may remain temporarily in backups or logs, or may need to be retained where required by law or for a permitted security purpose. The handling and expiry of those copies depend on the relevant systems and retention procedures.

We do not promise that all data is erased instantly from every system or backup.

To request deletion, message Jane on WhatsApp saying “delete my data”, or email abhishek@janemoney.in. We will complete deletion within 30 days and confirm when it is done.

For more information, see our Data Deletion page.

7. Security incidents

We take potential security issues seriously. If we identify a suspected incident affecting information handled by Janemoney, it should be assessed and addressed through the applicable incident-response process.

Depending on the nature of an incident and the legal requirements that apply, this may include investigating the issue, taking steps to limit further impact, restoring affected systems, and notifying relevant individuals or authorities where required.

No particular notification timeline or outcome is guaranteed by this page. Any response will depend on the circumstances and applicable obligations.

8. Your role in keeping your account secure

You can help protect your information by:

• Keeping your account credentials and devices secure.
• Connecting only accounts you are authorised to access.
• Reviewing the permissions requested by each integration.
• Disconnecting services you no longer want to use.
• Avoiding the upload of unnecessary sensitive information.
• Reporting suspected unauthorised access or other security concerns promptly.

If you believe someone has accessed your Janemoney account without permission, contact us using the details below.

9. Reporting a security concern

If you discover a possible security vulnerability, suspect unauthorised access, or have a question about how Janemoney protects information, contact:

• Email: abhishek@janemoney.in
• Website: https://janemoney.in

Please describe the issue clearly and include only the information needed to help us investigate. Do not send passwords, authentication tokens, or complete financial documents in an initial security report.

10. Related policies

For additional information, please refer to:

• Privacy Policy: how Janemoney collects, uses, shares, and retains personal information.
• Terms of Service: the terms governing your use of Janemoney.
• Data Deletion: how to request deletion of your account and associated information.
• Google Data Use Disclosure: how information received through Google APIs is handled.