Privacy Policy — JabalPay

Effective date: March 4, 2026
Last updated: September 16, 2026

This Privacy Policy explains how JabalPay Inc. (“JabalPay,” “we,” “us”) collects, uses, shares, and protects personal information when you use jabalpay.com and any related products or services (the “Services”).

1) Who we are

JabalPay Inc.
Address: 18 King Street East, Suite 1400, Toronto, Ontario M5C 1C4, Canada
Contact (all inquiries, including privacy requests): our contact form

JabalPay is registered in Canada as a Money Services Business (MSB).
MSB Registration Number: N300000035

2) Scope

This policy applies to personal information we collect:

• on our website and any mobile/web apps we operate,

• through onboarding and verification (KYC/KYB),

• during transactions and customer support interactions, and

• from partners and service providers we work with.

3) Information we collect

Depending on how you use the Services, we may collect:

A. Information you provide

• Identity and profile: name, date of birth, address, email, and WhatsApp phone number where you choose to provide it

  Contact verification: verification status, timestamps, and temporary verification-request records. Contact confirmation does not by itself complete identity or financial-account verification.

• Verification data: government ID images, selfies/liveness checks, proof of address, business documents (for KYB)

• Payment and transaction details: sender/recipient details, bank details (where required), transaction purpose

• Communications: messages you send to support or through the Services

B. Information we collect automatically

• Device and usage data: IP address, device identifiers, browser type, pages viewed, timestamps, referral URLs

• Approximate location: derived from IP address

• Cookies and similar technologies: as described in our Cookie Policy

C. Information from third parties

• Identity/verification providers: KYC/KYB results and risk signals

• Sanctions/PEP screening and fraud prevention providers

• Banking/payment rail partners and infrastructure providers used to execute transactions

4) How we use your information

We use personal information to:

• Provide and operate the Services (create accounts, process transactions, provide support)

• Verify identity, prevent fraud, and protect the platform

• Comply with legal and regulatory obligations (including AML/CTF and sanctions requirements) and maintain required records

• Monitor, debug, and improve performance and user experience

• Send service communications (confirmations, policy updates, security notices)

• Enforce our Terms of Service and other policies

5) Legal bases (where applicable)

Where required by law, we rely on one or more of these legal bases:

• Performance of a contract (to provide the Services you request)

• Legal obligations (compliance, recordkeeping, reporting)

• Legitimate interests (fraud prevention, security, improving the Services)

• Consent (cookies and marketing where required; you can withdraw consent)

6) How we share your information

We do not sell your personal information.

We may share personal information with:

A. Service providers (processors)

Vendors who help us run the business (hosting, analytics, customer support tools, identity verification, sanctions screening, fraud monitoring).

When you request a WhatsApp verification code, we use Meta’s WhatsApp Business service to deliver it. Our authentication, hosting and messaging providers process the information needed to deliver and validate your request. Verification codes are not used for marketing.

B. Payment, banking, and infrastructure partners

To execute transactions, operate payment rails, and provide Services.

C. Legal and regulatory disclosures

If required by law, subpoena, court order, or to respond to regulators or law enforcement, or to protect rights/safety and prevent fraud.

D. Business transfers

If we’re involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7) International data transfers

Your information may be stored or processed outside Canada depending on where our vendors and partners operate. Those jurisdictions may have different privacy laws, and authorities may be able to access data under local law.

8) Data retention

We keep personal information only as long as necessary to:

• provide the Services,

• meet AML/CTF, sanctions, tax, audit, and other legal obligations, and

• resolve disputes and enforce agreements.

Retention periods vary by data type and legal requirements.

WhatsApp verification codes expire after five minutes. JabalPay stores a protected code digest rather than the plaintext code. Temporary WhatsApp challenge records older than 48 hours are removed during scheduled cleanup. The verified phone number and timestamp remain linked to the app account until replaced or removed with app-account deletion. Provider records follow the provider’s retention practices and any applicable requirements.

9) Your rights and choices

Depending on where you live, you may have rights to:

• access, correct, or update your personal information,

• withdraw consent (where processing is based on consent),

• request deletion (subject to legal retention requirements),

• object to certain processing, or request portability (where applicable).

To make a request, use our contact form. We may need to verify your identity before responding.

10) How we protect information

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:

• encryption of data in transit and at rest,

• access controls that limit personal information to personnel who need it,

• logging and monitoring of administrative access, and

• due diligence on service providers that process personal information on our behalf.

No method of transmission or storage is completely secure. We work to protect your information but cannot guarantee absolute security.

11) Privacy complaints

If you have a concern about how we handle personal information, contact us first at our contact form and we will investigate. Our handling of personal information is subject to applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

12) Changes to this policy

We may update this Privacy Policy from time to time. If we make changes, we will update the “Last updated” date and post the revised policy on the Site. Material changes may be communicated through the Services or by email.

Contact

For privacy questions or requests, use our contact form.