Privacy Policy

1. Who is responsible

ePake Express Inc. ("JiBeJib", "we") decides how your personal data is used on JiBeJib. You can reach us through the contact form; a dedicated privacy address is to be confirmed before launch.

2. What we collect

• Account: your email address, name and handle, language, your password (stored only as a one-way hash), the Google account identifier if you sign in with Google, and the LinkedIn or website links you add to your profile.
• Identity verification: your identity document, a live selfie and the result of the review.
• Trading: your orders, bids and deals, the payment methods you choose, and when you take each step.
• Settlement: the bank or payment details you enter for a deal and the receipts you upload.
• Messages: deal chats, support tickets and the files you attach, and the questions you ask the support assistant.
• Forms: what you send through the contact and partnership forms.
• Security and use: a hashed form of your IP address, a shortened description of your browser, your sign-ins and sessions, and a record of security-relevant actions.

We do not sell personal data, and JiBeJib uses no advertising or analytics trackers.

3. Why we use it

• To run your account and the marketplace, as our agreement with you requires.
• To verify identity, prevent fraud and meet anti-money-laundering and sanctions duties, as the law requires and to protect our users.
• To keep the service secure and to find and fix problems.
• To send the notifications and emails you choose, and the security emails we must send (codes and password resets).
• To answer your support requests.

4. Who else sees it

• Your counterparty in a deal sees what the deal needs: your handle and trust figures, the payment details you enter, your receipts and the chat.
• Other users see your public profile. They never see your identity documents.
• JiBeJib staff see what their role needs. Sensitive fields are hidden by default, and opening one asks for a reason and is recorded.
• Service providers process data for us under contract: our hosting provider (name and country to be confirmed before launch), Cloudflare (network delivery and security), Resend (email delivery), Google (only if you sign in with Google) and OpenAI (questions you ask the support assistant, and deal chat messages for the safety check).
• Authorities, when the law requires it.

5. The support assistant

What you type to the assistant is sent to OpenAI to write an answer, together with the earlier messages of that chat and the matching help articles. We ask OpenAI not to store the response for later use, and the assistant never sees your account. We keep the chat only if you open a ticket with it. Do not type passwords, codes, card or account numbers into the chat.

Deal chat safety check. Each text message in a deal chat is checked automatically for contact details, payments outside the deal's terms, scams and abuse, so both sides can be warned. The message and the few before it are sent to OpenAI for this check, without your name, email or account. We ask OpenAI not to store them for later use. We keep only the result, and the team can see flagged messages if a deal is reviewed.

6. Friends and invitations

• Your friends see your public profile, as everyone does, and that you are friends. A friend request shows the other person your public profile.
• Your invite link carries a code, not your name. When someone joins with it and verifies their email, you become friends and you earn invitation points.
• Finding friends by email. When you search for an email address, or pick contacts from your phone, the addresses you choose are compared with JiBeJib accounts and then discarded. We never store or log them, and we never write to the people you pick. You only see accounts that let others find them by email; you can turn that off on your Friends page.

7. Data outside your country

Our providers may process data outside your country, including in Canada, the European Union and the United States. We work only with providers that protect it under contract.

8. How long we keep it

• Account, verification and trading records: while your account is open, and afterwards for as long as anti-money-laundering and tax law requires (the period is to be confirmed before launch).
• Contact and partnership messages: two years.
• Notifications: 180 days.
• Sessions: a session ends after 30 minutes without activity, and after 7 days at most.
• Consent and audit records: as long as the account records they belong to.

9. Your rights

You can ask to see, correct or delete your data, to receive a copy of it, or to object to or limit how we use it. Some records have to be kept by law even after you ask. You can turn notification emails on or off in your settings at any time. If you are not satisfied with our answer, you can complain to your data protection authority.

10. How we protect it

Every connection is encrypted. Passwords are stored as one-way hashes, and two-step verification is available to everyone. Uploaded files are checked for malware and stored privately, and staff access is limited by role and recorded.

11. Children

JiBeJib is not for anyone under 18, and we do not knowingly collect their data.

12. Changes to this policy

Each new version is published on this page with its date, and you are asked to accept it before you trade again.