Privacy Policy

JoPay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

1. Data Controller

JoPay is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, you can contact us at:

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and password when you create an account.
• Payment Information: Credit/debit card details, billing address. Note: We do not store full card numbers - these are securely processed by our payment processor, Stripe.
• Business Information: If you register as a business, we collect business name, address, bank account details for payouts, and tax identification numbers.
• Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Location Data: With your consent, we collect precise location data to help you find nearby venues and to enable automatic payment when you leave a venue.
• Usage Data: How you interact with the Service, including pages visited, features used, and time spent.
• Transaction Data: Details of payments made through the Service, including amounts, dates, and merchant information.

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies on our website. For detailed information, please see our Cookie Policy.

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Process payments, manage tabs, and enable venue check-ins.
• Account Management: Create and manage your account, authenticate your identity.
• Payment Processing: Process transactions, prevent fraud, and comply with financial regulations.
• Location Services: Find nearby venues and enable automatic payment on departure (with your consent).
• Communications: Send transaction receipts, service updates, and respond to inquiries.
• Improvements: Analyze usage to improve the Service and develop new features.
• Legal Compliance: Comply with legal obligations, resolve disputes, and enforce our terms.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract: Processing necessary to provide the Service you requested.
• Consent: Where you have given consent (e.g., location services, marketing communications).
• Legitimate Interests: For fraud prevention, security, and improving our Service.
• Legal Obligation: To comply with applicable laws and regulations.

5. Information Sharing

We share your information with:

• Venues/Merchants: We share transaction details with venues where you make payments so they can provide their services.
• Payment Processors: We use Stripe to process payments. Stripe's privacy policy governs their use of your data.
• Service Providers: Third parties that help us operate the Service (hosting, analytics, customer support).
• Legal Requirements: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States (where our service providers may be located). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal and regulatory requirements (typically 7 years for financial records)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request limitation of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at privacy@jopay.me. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure payment processing through PCI-DSS compliant providers
• Regular security assessments and monitoring
• Access controls and authentication measures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly.

11. Third-Party Services

Our Service integrates with the following third-party services:

• Stripe: Payment processing - Privacy Policy
• Google Analytics: Website analytics - Privacy Policy
• Apple/Google Maps: Location services in the mobile app

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: