Privacy Policy

1. Who we are (data controller)

The data controller is Polele SAS, Kinshasa, Democratic Republic of the Congo. Registered office: [Registered address — Kinshasa, DRC].

Privacy contact: privacy@jaza.dev.

2. What we collect

• Waitlist: email address and primary platform (e.g. React Native, Node) when you join early access.
• Developer accounts: email address, authentication identifiers, and session data via Auth.js (email OTP via Resend; optional GitHub OAuth).
• Product / billing data: app configuration, API keys (secrets stored hashed/prefixed), wallets, ledger entries, payment and settlement metadata processed through our API and database.
• End-user data (on behalf of merchants): customer identifiers, phone/email where provided, Mobile Money / card top-up details needed to process payments via providers such as PawaPay (and Stripe where enabled). Merchants are typically the controller for their end users; we act as a processor for that data.
• Usage & device: IP address, browser type, pages viewed, and similar analytics — only if you accept analytics cookies (see our Cookie Policy).
• Communications: messages you send us (support, product feedback).

3. Purposes and legal bases (GDPR)

• Provide the service (accounts, APIs, dashboards, billing) — performance of a contract (Art. 6(1)(b)).
• Waitlist / product updates — consent or legitimate interests in growing early access (Art. 6(1)(a) or (f)).
• Security, fraud prevention, debugging — legitimate interests (Art. 6(1)(f)).
• Analytics (Google Analytics) — consent only (Art. 6(1)(a)). We do not load analytics scripts until you accept.
• Legal compliance — legal obligation where applicable (Art. 6(1)(c)).

4. Cookies

We use necessary cookies for authentication and product preferences, and optional analytics cookies only with your consent. Details are in the Cookie Policy.

5. Processors and international transfers

We use service providers that may process data in the EU, US, Africa, or other regions, including hosting (e.g. Vercel, cloud Postgres/Neon), email delivery (Resend), payment partners (PawaPay, Stripe where enabled), and Google Analytics (if consented). Where data leaves the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s comparable transfer mechanisms, where required.

6. Retention

We keep personal data only as long as needed for the purposes above: waitlist data until you ask to be removed or we close the waitlist; account data for the life of the account plus a reasonable period for disputes and legal requirements; payment and ledger records as required for financial integrity and compliance; analytics according to Google’s retention settings when enabled.

7. Your rights (EU / EEA / UK)

Subject to applicable law, you may have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority in your country of residence

To exercise these rights, email privacy@jaza.dev. We will respond within the timeframes required by law.

8. US residents (including CCPA / CPRA-style disclosures)

We do not sell personal information and do not share it for cross-context behavioral advertising in the sense of “sale”/“share” under California law. Categories of data we collect are described above. You may request access or deletion by contacting privacy@jaza.dev. We will not discriminate against you for exercising privacy rights.

9. Children

Jaza is directed at developers and businesses. We do not knowingly collect personal data from children under 16 (or the age required in your jurisdiction). If you believe we have, contact us and we will delete it.

10. Changes

We may update this Policy from time to time. The “Last updated” date at the top will change. Material changes may also be communicated via the site or email where appropriate.

11. Related documents

Terms of Service · Cookie Policy