Privacy Policy.

1. Who we are

PeppolBridge is a product of Jina Code Systems, headquartered in Gurugram, India ("we", "us"). We operate the website peppolbridge.jinacode.systems and the PeppolBridge connector platform. For privacy matters, contact sales@jinacode.systems.

2. Two kinds of data, two roles

We handle data in two distinct capacities:

• As a controller — for data you give us directly through this website: contact and partner enquiries, demo bookings, and newsletter or mandate-alert requests.
• As a processor — for invoice and business data flowing through the PeppolBridge platform on behalf of our partners (Access Point and service providers) and their clients. That processing is governed by the partner agreement and applicable data processing agreements, under the partner's instructions.

3. Data we collect on this website

• Enquiry data: this website contains no forms and stores no enquiry data. Meetings are booked through Calendly (subject to Calendly's own privacy policy), and emails you send us are handled in our mail system.
• Demo bookings: scheduling data processed by Calendly when you book a meeting through our booking links.
• Technical data: standard server and analytics information (pages visited, approximate location, device and browser type) used in aggregate to improve the site.

4. How we use it

• To respond to enquiries and run demos you request.
• To evaluate and manage partner applications.
• To send mandate alerts or updates you have explicitly asked for — you can opt out at any time.
• To operate, secure and improve the website.

We do not sell personal data, and we do not use platform invoice data for marketing.

5. Legal bases

Where GDPR or similar laws apply, we rely on: consent (mandate alerts, optional cookies), legitimate interest (responding to business enquiries, site security and analytics), and contract (delivering services to partners). For platform data we act on the partner's documented instructions as processor.

6. Cookies & third-party services

This site uses minimal cookies for functionality and aggregate analytics. Third-party services that may process data when you interact with the site:

• Calendly — demo scheduling.
• Google Fonts — typeface delivery.
• Clearbit / Google favicon services — display of ERP vendor logos.
• LinkedIn — if you follow links to our company page.

Each operates under its own privacy policy.

7. Retention

Enquiry data is kept as long as needed to handle the enquiry and reasonable follow-up, then deleted. Platform invoice data is retained according to the regulatory retention requirements of each market (e.g., tax-record retention periods) and the partner agreement, then deleted or returned.

8. International transfers

We serve partners in the UAE, Malaysia, Belgium, Oman and Qatar. Where data crosses borders we use appropriate safeguards — including standard contractual clauses where GDPR applies, and in-region processing options for Enterprise agreements (see our security page).

9. Your rights

Depending on your jurisdiction — including the EU GDPR, the UAE Personal Data Protection Law (PDPL), and Malaysia's Personal Data Protection Act 2010 — you may have rights to access, correct, delete, restrict or port your personal data, and to object to processing or withdraw consent. To exercise any of these, email sales@jinacode.systems; we respond within the timeframe your law requires. If we process your data on a partner's behalf, we will route your request to that partner as controller.

10. Security

We protect data with encryption in transit (TLS 1.2+) and at rest (AES-256), strict tenant isolation, role-based access with MFA, and immutable audit logging. Full detail is on the security & trust page.

11. Changes

We update this policy as the product and regulations evolve, and change the "last updated" date above when we do. Material changes affecting partners are notified directly.

12. Contact

Jina Code Systems, Gurugram, India · sales@jinacode.systems