Privacy Policy
Last updated: 9 October 2026
JBAH EXNG ("we", "us"), runs jbahexng.online. This policy explains what we collect when you use the site or request a transfer, and what we do with it.
What we collect
- Account details when you sign in with Google: your name and email address (we never see your Google password).
- Transfer request details you enter: your name, WhatsApp number, the country you send from, currency and amount, recipient country, payout method, and the recipient's bank or mobile money details.
- Payment notifications: your order reference and any payment reference or sender name you add.
- WhatsApp data: your phone number and messages when you contact us on WhatsApp.
- Verification information we may ask for on some routes or amounts, such as proof of payment or identity details, to protect you and us.
We do not collect card numbers, PINs or passwords. Please never send them.
How the online request works
When you place an order on this site, the details you enter are stored in a database hosted by Supabase so we can process the order and show it on your "My transfers" page. Only you (while signed in) and our authorised admin accounts can read your orders. If you prefer not to create an account, you can request a transfer directly on WhatsApp instead. Your browser also keeps a normal sign-in session so you stay signed in; signing out removes it.
Why we use it
To quote, arrange and complete your transfer; to match your payment to your order; to prevent fraud and meet legal or compliance obligations; and to answer your questions. We do not sell your data.
Who else sees it
- WhatsApp (Meta) handles messages sent through WhatsApp under its own policies.
- Supabase hosts the database where transfer requests are stored on our behalf.
- Google provides the sign-in service, and our website host (for example Netlify) serves the site files.
- open.er-api.com receives your browser's request when the page fetches indicative exchange rates. We do not send it your personal details.
- Google Fonts serves the site's typefaces to your browser.
- Banks, mobile money and payment providers receive the recipient details needed to complete your transfer.
- Authorities, where we are legally required to disclose information.
Keeping and deleting data
Stored orders are kept as long as needed to complete your transfer, resolve disputes and meet legal or record-keeping duties. We keep transaction records for as long as needed to complete your transfer, resolve disputes and meet legal or record-keeping duties, then delete or anonymise them. You can ask us to access, correct or delete your information, subject to those duties, by messaging us on WhatsApp.
Security
We limit who can see your details and share only what is needed to complete a transfer. No online service is perfectly secure, so share only what the transfer requires.
Children
The service is for adults. We do not knowingly collect data from children.
Changes and contact
We may update this policy and will change the date above when we do. Questions: WhatsApp +62 856 4206 2883.