1. INTRODUCTION
1.1 Welcome to Jason Technologies
Jason Technologies ("we," "us," or "our") is a technology company dedicated to building innovative digital solutions that empower individuals, businesses, and communities to thrive in the modern economy. We are the parent company of AchiPay (WhatsApp-based payment platform) and PayYigi (crypto-to-cash conversion platform).
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our products, services, and websites, including:
- AchiPay — achipay.com
- PayYigi — payyigi.com
- Jason Technologies — jasontechnologies.net
- Any other products or services we offer (collectively, the "Services")
1.2 Our Commitment
We are committed to protecting your privacy and handling your personal data with transparency, fairness, and security. We comply with all applicable data protection laws in every jurisdiction in which we operate, including:
- The Nigeria Data Protection Act (NDPA) 2023
- The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
- The Data (Use and Access) Act 2025
- Applicable data protection laws in other jurisdictions where we operate
1.3 Data Controllers
For the purposes of applicable data protection laws, the data controllers for your personal data are:
| Entity | Jurisdiction | Role |
| Jason Technologies Nigeria | Nigeria | Primary data controller for Nigerian users and operations |
| JAFA Tech Limited (UK) | United Kingdom | Data controller for UK, European, and international users |
Both entities operate under the Jason Technologies brand and are jointly responsible for ensuring compliance with this Privacy Policy.
1.4 Scope of This Policy
This Privacy Policy applies to all users of our Services, including:
- Individuals who use AchiPay to send and receive money
- Individuals who use PayYigi to convert cryptocurrency to cash
- Visitors to our websites
- Individuals who contact us for support or inquiries
- Merchants and businesses using our payment services
1.5 Acceptance
By using any Jason Technologies product or service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, you must not use our Services.
1.6 Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any significant changes:
- Via WhatsApp message (AchiPay users)
- Via email to your registered address
- Through a prominent notice on our websites
The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.
2. PERSONAL DATA WE COLLECT
2.1 Information You Provide to Us
We collect the following categories of personal data when you register for and use our Services:
Account Information:
- Full legal name
- Date of birth
- Email address
- Phone number (registered on WhatsApp for AchiPay users)
- Username and password credentials
- 6-digit transaction PIN (encrypted)
Identity Verification Information (KYC/AML):
- Government-issued identification (passport, driver's licence, national ID, or voter's card)
- Photograph or selfie for identity verification
- Residential address
- Proof of address (utility bill, bank statement, or government-issued letter)
- Tax identification number (where required)
- Occupation and source of funds (for AML compliance)
Transaction Information:
- Transaction amounts
- Transaction dates and times
- Recipient names and phone numbers
- Recipient bank account details
- Cryptocurrency wallet addresses (for PayYigi users)
- Transaction references and descriptions
- Currency conversion details
Communications:
- Messages and inquiries sent to our support team
- Feedback, complaints, or dispute information
- Any other information you voluntarily provide to us
Payment Information:
- Bank account details (for payouts and funding)
- Card details (processed by our payment partners, not stored by us)
- Payment provider identifiers
2.2 Information We Collect Automatically
When you use our Services, we automatically collect certain technical information:
Device and Usage Information:
- IP address
- Device type and operating system
- Browser type and version
- WhatsApp version and settings
- Log-in times and session durations
- Pages visited and features used
- Clickstream data
Transaction Metadata:
- Transaction IDs
- Payment status
- Error logs and diagnostic information
Location Information:
- Approximate location based on IP address
- Country of residence (for compliance purposes)
2.3 Information from Third Parties
We may receive information about you from third parties:
- WhatsApp: Basic profile information (name, phone number) through the WhatsApp Business API
- Identity Verification Providers: Verification results and fraud risk scores
- Payment Partners: Transaction status, payment confirmations, and chargeback information
- Banking Partners: Bank account verification and payout confirmations
- Compliance Databases: Sanctions screening results, politically exposed person (PEP) status
2.4 Special Categories of Data
We do not intentionally collect special categories of personal data (sensitive data) such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or sexual orientation. However, certain identity documents (e.g., passports) may incidentally reveal such information. We process this data only as necessary for identity verification and regulatory compliance.
3. HOW WE USE YOUR PERSONAL DATA
3.1 Lawful Bases for Processing
Under the NDPA 2023 and UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following lawful bases:
| Lawful Basis | When We Use It |
| Contractual Necessity | To provide our Services, process transactions, and manage your account |
| Legal Obligation | To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and sanctions regulations |
| Legitimate Interests | To improve our Services, prevent fraud, and ensure security |
| Consent | For marketing communications (where you have opted in) |
3.2 Purposes of Processing
We use your personal data for the following purposes:
1. Providing the Services
- Creating and managing your account
- Processing your transactions (sending and receiving money via AchiPay)
- Converting cryptocurrency to cash via PayYigi
- Facilitating currency conversion
- Providing transaction confirmations and receipts
- Enabling communication through WhatsApp
- Providing customer support and dispute resolution
2. Identity Verification and Compliance
- Verifying your identity as required by law (KYC)
- Conducting sanctions and PEP screening
- Detecting and preventing fraud, money laundering, and terrorist financing
- Complying with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
- Reporting suspicious transactions to regulatory authorities
3. Service Improvement and Analytics
- Analysing usage patterns to improve our Services
- Developing new features and products
- Conducting research and data analysis
- Monitoring system performance and diagnosing technical issues
4. Security and Fraud Prevention
- Monitoring transactions for suspicious activity
- Protecting against unauthorised access and cyber threats
- Investigating and resolving fraud claims
- Implementing security measures and controls
5. Communication and Marketing
- Sending you service-related notifications (transaction confirmations, account updates, security alerts)
- Responding to your inquiries and support requests
- Sending you marketing communications (only with your consent)
- Providing information about new features and promotions
6. Legal and Regulatory Compliance
- Complying with applicable laws, regulations, and court orders
- Responding to lawful requests from government authorities
- Enforcing our Terms of Service and other policies
- Defending against legal claims
3.3 Retention Periods
We retain your personal data only as long as necessary for the purposes for which it was collected, plus any additional period required by law:
| Data Category | Retention Period |
| Account Information | Duration of your account + 5-6 years (as required by financial regulations) |
| Transaction Records | 5-6 years (as required by anti-money laundering regulations) |
| Identity Verification Documents | 5-6 years from account closure (regulatory requirement) |
| Communications and Support | 3 years |
| Marketing Data | Until you withdraw consent |
| Technical Logs | 12 months |
After the retention period expires, we securely delete or anonymise your personal data.
4. DATA SHARING AND DISCLOSURE
4.1 Third Parties We Share Data With
We share your personal data with the following categories of third parties:
1. Payment Partners and Financial Institutions
- Flutterwave and other payment processors
- Banking partners for payouts and settlements
- These partners process payments and facilitate currency conversion
2. Identity Verification Providers
- Regulated third-party KYC providers
- Sanctions screening databases
- These providers verify your identity and assess fraud risk
3. Technology and Infrastructure Partners
- Cloud hosting providers
- Database and analytics providers
- Communication and messaging partners (WhatsApp)
- These partners help us operate and improve our Services
4. Regulatory and Government Authorities
- Nigeria Data Protection Commission (NDPC)
- Central Bank of Nigeria (CBN)
- Nigerian Financial Intelligence Unit (NFIU)
- Financial Conduct Authority (FCA) - UK
- Other regulatory bodies as required by law
5. Professional Advisors
- Legal counsel and auditors
- Compliance consultants
- These advisors help us meet our legal and regulatory obligations
4.2 Data Processing Agreements
Where we share data with third-party processors, we enter into Data Processing Agreements (DPAs) that require them to:
- Process data only on our instructions
- Implement appropriate security measures
- Notify us of any data breaches
- Assist us in responding to data subject requests
- Delete or return data upon termination
4.3 Cross-Border Data Transfers
Your personal data may be transferred to and processed in countries outside Nigeria and the UK, including:
- United States (for cloud hosting and payment processing)
- European Union (for data processing and analytics)
- Other countries where our partners operate
For NDPA Compliance:
Under the NDPA, personal data may not be transferred outside Nigeria unless the recipient country or organisation provides an adequate level of protection. We ensure:
- Appropriate safeguards are in place
- Data subject rights are protected
- Transfers are documented and justified
For UK GDPR Compliance:
When transferring data outside the UK, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTAs)
- UK Addendum to the EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the UK government
4.4 When We May Disclose Data Without Consent
We may disclose your personal data without your consent in the following circumstances:
- To comply with a legal obligation or court order
- To protect the vital interests of you or another person
- To prevent or detect fraud, money laundering, or other financial crimes
- To enforce our Terms of Service
- To protect the security and integrity of our Services
- In connection with a merger, acquisition, or sale of assets (with notice to you)
5. YOUR DATA PROTECTION RIGHTS
5.1 Rights Under the NDPA 2023
Under the Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
| Right | Description | How to Exercise |
| Right to be Informed | To know what personal data we collect and how we use it | This Privacy Policy provides this information |
| Right of Access | Request a copy of the personal data we hold about you | Email info@jasontechnologies.net |
| Right to Rectification | Request correction of inaccurate or incomplete data | Email info@jasontechnologies.net |
| Right to Erasure | Request deletion of your data (subject to legal obligations) | Email info@jasontechnologies.net |
| Right to Restrict Processing | Request limitation of how we use your data | Email info@jasontechnologies.net |
| Right to Data Portability | Request your data in a machine-readable format | Email info@jasontechnologies.net |
| Right to Object | Object to processing based on legitimate interests or direct marketing | Email info@jasontechnologies.net |
| Right to Withdraw Consent | Withdraw your consent at any time (where processing is based on consent) | Email info@jasontechnologies.net |
5.2 Rights Under UK GDPR
Under the UK GDPR, you have similar rights, including:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights related to automated decision-making
5.3 How to Exercise Your Rights
To exercise any of your rights:
- Contact us at info@jasontechnologies.net
- Provide sufficient information to identify yourself (name, phone number, email)
- Specify the right you wish to exercise
- Provide any additional information we may reasonably request to verify your identity
We will respond to your request within 30 days (UK GDPR) or as required by the NDPC.
5.4 Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with:
In Nigeria:
Nigeria Data Protection Commission (NDPC) — www.ndpc.gov.ng
In the UK:
Information Commissioner's Office (ICO) — www.ico.org.uk
6. DATA SECURITY
6.1 Security Measures
We implement appropriate technical and organisational measures to protect your personal data:
Technical Measures:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest
- Access Controls: Strict role-based access controls
- Authentication: Two-factor authentication (2FA) for account access
- Monitoring: Real-time monitoring for suspicious activity
- Firewalls: Network firewalls and intrusion detection systems
- Secure Storage: Data stored in secure, ISO-certified data centres
- Regular Audits: Regular security assessments and vulnerability scans
Organisational Measures:
- Data Protection Officer: Designated DPO for compliance oversight
- Staff Training: Regular training on data protection and security
- Policies and Procedures: Written policies for data handling and breach response
- Access Management: Least-privilege access principles
- Incident Response: Documented incident response and breach notification procedures
6.2 Data Breach Notification
In the event of a personal data breach:
NDPA Requirements:
- We will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of a breach likely to risk individuals' rights and freedoms
- We will notify affected individuals immediately where a high risk to their privacy is involved
UK GDPR Requirements:
- We will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach (if it poses a risk to individuals)
- We will notify affected individuals if the breach is likely to result in a high risk to their rights and freedoms
6.3 Your Security Responsibilities
You also play a role in protecting your personal data:
- Keep your PIN and password secure
- Do not share your credentials with anyone
- Log out of your account when using shared devices
- Report any suspicious activity to us immediately
- Keep your contact information up to date
7. COOKIES AND TRACKING TECHNOLOGIES
7.1 What Are Cookies?
Cookies are small text files placed on your device when you visit our websites. They help us remember your preferences, analyse site usage, and improve your experience.
7.2 Cookies We Use
| Type | Purpose | Example |
| Essential Cookies | Necessary for the website to function | Session cookies, security cookies |
| Preference Cookies | Remember your settings and preferences | Language preferences, region selection |
| Analytics Cookies | Help us understand how you use the site | Google Analytics (optional) |
| Marketing Cookies | Deliver relevant advertisements (only with consent) | Advertising cookies (optional) |
7.3 Your Cookie Choices
- You can manage cookies through your browser settings
- You can withdraw consent for non-essential cookies at any time
- Essential cookies cannot be disabled as they are necessary for the website to function
7.4 Third-Party Tracking
We may use third-party analytics services (e.g., Google Analytics) that set their own cookies. These third parties have their own privacy policies, and we encourage you to review them.
8. CHILDREN'S PRIVACY
8.1 Age Restriction
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
8.2 Verification
If we discover that we have collected personal data from an individual under 18, we will take steps to delete that data promptly.
8.3 Reporting
If you believe we have collected data from a minor, please contact us at info@jasontechnologies.net.
9. THIRD-PARTY SERVICES AND LINKS
9.1 WhatsApp
AchiPay uses the WhatsApp Business API to deliver payment services. Your use of WhatsApp is subject to:
- WhatsApp's Terms of Service
- WhatsApp's Privacy Policy
We encourage you to review these documents.
9.2 Payment Partners
We use third-party payment processors (Flutterwave, and others). These partners have their own privacy policies and terms.
9.3 External Links
Our websites may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read their privacy policies.
10. PRODUCT-SPECIFIC PRIVACY PROVISIONS
10.1 AchiPay — WhatsApp Payments
Data Collected:
- WhatsApp phone number and profile information
- Transaction history and details
- Bank account information for payouts
- Identity verification documents
Special Considerations:
- All WhatsApp communications are end-to-end encrypted
- Transaction data is stored in compliance with UK GDPR and NDPA
- Users can request deletion of their data at any time
10.2 PayYigi — Crypto-to-Cash Conversion
Data Collected:
- Cryptocurrency wallet addresses
- Transaction history and details
- Bank account information for payouts
- Identity verification documents
- Source of funds information (for AML compliance)
Special Considerations:
- Crypto transactions are recorded on public blockchains (irreversible)
- We do not store private keys or wallet passwords
- AML compliance requires enhanced due diligence for certain transactions
11. DATA PROTECTION OFFICER
11.1 Appointment
We have appointed a Data Protection Officer (DPO) to oversee our data protection compliance.
11.2 Contact the DPO
You can contact our Data Protection Officer at:
Email: info@jasontechnologies.net
Address: Jason Technologies, Data Protection Officer, Lagos, Nigeria
12. COMPLAINTS PROCEDURE
12.1 Internal Complaints
We have a formal data protection complaints procedure:
- Submit a complaint to info@jasontechnologies.net
- We will acknowledge receipt within 5 business days
- We will investigate and respond within 30 days
- If you are unsatisfied, you may escalate to the relevant supervisory authority
12.2 Supervisory Authorities
In Nigeria:
Nigeria Data Protection Commission (NDPC)
Website: www.ndpc.gov.ng
In the UK:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
13. DEFINITIONS
| Term | Definition |
| AchiPay | Jason Technologies' WhatsApp-based payment platform |
| AML | Anti-Money Laundering |
| CBN | Central Bank of Nigeria |
| Data Controller | The entity that determines the purposes and means of processing personal data |
| Data Processor | The entity that processes personal data on behalf of the data controller |
| DPA | Data Processing Agreement |
| DPO | Data Protection Officer |
| FCA | Financial Conduct Authority (UK) |
| KYC | Know Your Customer – identity verification process |
| NDPA | Nigeria Data Protection Act 2023 |
| NDPC | Nigeria Data Protection Commission |
| PayYigi | Jason Technologies' crypto-to-cash conversion platform |
| PEP | Politically Exposed Person |
| UK GDPR | UK General Data Protection Regulation |
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, please contact us:
| Method | Details |
| Privacy Email | info@jasontechnologies.net |
| DPO Email | info@jasontechnologies.net |
| AchiPay Support | help@achipay.com |
| PayYigi Support | support@payyigi.com |
| Website | jasontechnologies.net |
| Address | Jason Technologies, Lagos, Nigeria & JAFA Tech Limited, London, United Kingdom |
We will respond to your query within a reasonable timeframe.
15. ACKNOWLEDGEMENT
By using any Jason Technologies product or service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
Jason Technologies — Innovating with Purpose.
Building the future of technology, one solution at a time.
This document is the proprietary property of Jason Technologies. Unauthorised reproduction or distribution is prohibited.
Last Updated: August 2026