Privacy Policy
Last updated: February 19, 2026
This Privacy Policy explains how JoPay ("JoPay", "we", "us") collects, uses, and shares information when you use our website, applications, partner portals, and related services (collectively, the "Services").
If you have questions, contact us at privacy@jopay.app.
1) What we collect
A) Information you provide
We may collect:
- Account information (e.g., name, email, business name, country, phone if provided)
- Partner application info (company details, contact person, onboarding estimates)
- Support requests (messages, screenshots, and details you share)
B) Information collected automatically
When you use the Services, we may collect:
- Device and usage data (IP address, browser type, pages viewed, timestamps)
- Cookies and similar technologies (see Cookies section below)
C) Payment-related information
JoPay enables payment links and QR codes that direct customers to pay to a merchant-designated wallet. We may process:
- Payment request metadata (amount, description, status, timestamps)
- Public blockchain data related to a payment (e.g., transaction hash, confirmations, wallet addresses)
Note: JoPay does not custody funds and does not store private keys.
2) How we use your information
We use information to:
- Provide and operate the Services (account access, payment link creation, tracking)
- Route you to the correct portal (JoPay or your partner) when you log in
- Communicate with you (service messages, support responses)
- Improve the Services (analytics, debugging, performance)
- Prevent fraud, abuse, and security incidents
- Comply with legal obligations
3) Legal bases (EEA/UK)
If you are in the EEA/UK, we process personal data under one or more of these bases:
- Contract (to provide the Services you request)
- Legitimate interests (security, fraud prevention, basic service improvement)
- Consent (marketing analytics cookies and tracking, where required)
- Legal obligation (compliance, record-keeping)
4) How we share information
We may share information with:
- Service providers (hosting, analytics, email delivery, customer support tools)
- Partners (if you are onboarded/managed by a partner, to provide support and services)
- Compliance and verification providers (if KYC/KYB is required for features like cash-out or higher limits)
- Legal authorities (if required by law)
We do not sell your personal data.
5) Cookies and analytics
We use cookies and similar technologies to:
- keep you signed in (where applicable),
- understand usage,
- improve site performance.
You can control cookies through your browser settings. We use analytics cookies only when you consent. We may also use limited third-party cookies for anti-bot and spam reduction on public forms.
Cookies used: jopay_mkt_consent (preference), jopay_mkt_session, jopay_mkt_anon, jopay_mkt_ft, jopay_mkt_lt
Providers: Primarily first-party analytics; limited third-party cookies may be used for anti-bot and spam protection.
Analytics preference
You can update your analytics consent at any time.
6) Data retention
We retain personal data only as long as necessary for:
- providing the Services,
- legal and compliance obligations,
- resolving disputes and enforcing agreements.
Retention periods may vary by data type.
7) Security
We use reasonable administrative, technical, and physical safeguards to protect data. However, no method of transmission or storage is 100% secure.
Wallet security: You are responsible for securing your wallet and private keys. JoPay does not store private keys.
8) International transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers (e.g., Standard Contractual Clauses).
9) Your rights (EEA/UK)
Depending on your location, you may have rights to:
- access, correct, or delete your personal data,
- object to or restrict processing,
- data portability,
- withdraw consent (where processing is based on consent),
- lodge a complaint with a supervisory authority.
To exercise rights, contact privacy@jopay.app or submit a request below.
Privacy request form
We will respond within 30 days. Please use the email you want us to contact.
10) Children
The Services are not intended for children under 18. We do not knowingly collect data from children.
11) Partner and third-party services
Partners and third parties (wallets, networks, cash-out providers) may process data under their own policies. Your use of those services is governed by their terms and privacy policies.
12) Changes to this policy
We may update this Privacy Policy from time to time. We will post updates and revise the "Last updated" date.