Privacy Policy — JabalPay

Effective date: March 4, 2026
Last updated: March 4, 2026

This Privacy Policy explains how JabalPay Inc. (“JabalPay,” “we,” “us”) collects, uses, shares, and protects personal information when you use jabalpay.com and any related products or services (the “Services”).

1) Who we are

JabalPay Inc.
Address: 18 King Street East, Suite 1400, Toronto, Ontario M5C 1C4, Canada
Email (all inquiries, including privacy requests): [email protected]

JabalPay is registered in Canada as a Money Services Business (MSB).
MSB Registration Number: N300000035

2) Scope

This policy applies to personal information we collect:

• on our website and any mobile/web apps we operate,

• through onboarding and verification (KYC/KYB),

• during transactions and customer support interactions, and

• from partners and service providers we work with.

3) Information we collect

Depending on how you use the Services, we may collect:

A. Information you provide

• Identity and profile: name, date of birth, address, email

• Verification data: government ID images, selfies/liveness checks, proof of address, business documents (for KYB)

• Payment and transaction details: sender/recipient details, bank details (where required), wallet addresses, transaction purpose

• Communications: messages you send to support or through the Services

B. Information we collect automatically

• Device and usage data: IP address, device identifiers, browser type, pages viewed, timestamps, referral URLs

• Approximate location: derived from IP address

• Cookies and similar technologies: as described in our Cookie Policy

C. Information from third parties

• Identity/verification providers: KYC/KYB results and risk signals

• Sanctions/PEP screening and fraud prevention providers

• Banking/payment rail partners and infrastructure providers used to execute transactions

4) How we use your information

We use personal information to:

• Provide and operate the Services (create accounts, process transactions, provide support)

• Verify identity, prevent fraud, and protect the platform

• Comply with legal and regulatory obligations (including AML/CTF and sanctions requirements) and maintain required records

• Monitor, debug, and improve performance and user experience

• Send service communications (confirmations, policy updates, security notices)

• Enforce our Terms of Service and other policies

5) Legal bases (where applicable)

Where required by law, we rely on one or more of these legal bases:

• Performance of a contract (to provide the Services you request)

• Legal obligations (compliance, recordkeeping, reporting)

• Legitimate interests (fraud prevention, security, improving the Services)

• Consent (cookies and marketing where required; you can withdraw consent)

6) How we share your information

We do not sell your personal information.

We may share personal information with:

A. Service providers (processors)

Vendors who help us run the business (hosting, analytics, customer support tools, identity verification, sanctions screening, fraud monitoring).

B. Payment, banking, and infrastructure partners

To execute transactions, operate payment rails, and provide Services.

C. Legal and regulatory disclosures

If required by law, subpoena, court order, or to respond to regulators or law enforcement, or to protect rights/safety and prevent fraud.

D. Business transfers

If we’re involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7) International data transfers

Your information may be stored or processed outside Canada depending on where our vendors and partners operate. Those jurisdictions may have different privacy laws, and authorities may be able to access data under local law.

8) Data retention

We keep personal information only as long as necessary to:

• provide the Services,

• meet AML/CTF, sanctions, tax, audit, and other legal obligations, and

• resolve disputes and enforce agreements.

Retention periods vary by data type and legal requirements.

9) Your rights and choices

Depending on where you live, you may have rights to:

• access, correct, or update your personal information,

• withdraw consent (where processing is based on consent),

• request deletion (subject to legal retention requirements),

• object to certain processing, or request portability (where applicable).

To make a request, email [email protected]. We may need to verify your identity before responding.