Jarawave operates under a strict principle of data minimization: we only collect the minimum telemetry necessary to authenticate your account, maintain your prepaid ledger, and route your requested telecom services. We never sell, rent, monetize, or harvest user data.
1. Core Privacy Commitment
Jarawave ("we," "our," or "the Platform") takes the privacy and confidentiality of your digital footprint with the highest gravity. This Privacy Policy details our operational protocols, explaining what data is recorded, how it is safeguarded, and the rigorous safeguards protecting your identity.
2. Information We Collect
We classify collected information into three discrete categories:
A. Account Identification Data
- Email Address & Username: Provided by you upon registration for account security, password recovery, and transaction alerts.
- Password Security: Stored securely using industry-standard one-way cryptographic encryption; we never store or have access to plain-text passwords.
- Security PINs: Encrypted secondary security PINs if configured for wallet transaction verification.
B. Financial Ledger & Wallet Telemetry
- Prepaid Transactions: Record of deposit amounts, currency codes, gateway payment identifiers, and service purchase deductions to ensure accurate double-entry account balancing.
- Payment Details: Sensitive credit card numbers, CVVs, and banking credentials are submitted directly to PCI-DSS certified payment processors (e.g. Paystack, Monnify, Flutterwave) and never touch or reside on our servers.
C. Technical & Operational Telemetry
- Session & Security Logs: IP address, browser user-agent, operating system, and login timestamps retained temporarily for brute-force prevention, fraud mitigation, and account security notifications.
3. Zero-Storage SMS Guarantee
- When an SMS arrives from an authentic carrier SIM line, the verification code digits are held in secure temporary server memory strictly for the active session window to be displayed to you.
- Once the code is retrieved or the verification session expires (10 to 20 minutes), the incoming message content is permanently scrubbed from memory.
- We maintain zero historical database archives of private SMS message contents, sender identifiers, or personal communications.
4. How We Use Your Data
We use collected data solely for the following explicit purposes:
- Service Fulfillment: Provisioning carrier phone lines, delivering real-time verification codes, provisioning eSIM QR profiles, and executing SMM growth orders.
- Accounting & Ledger Integrity: Managing your prepaid balance, processing automated refunds for non-delivered codes, and maintaining transaction audit trails.
- Account Security & Fraud Prevention: Identifying suspicious login attempts, preventing unauthorized credential abuse, and protecting our carrier gateway routing.
- System Notifications: Transmitting essential security alerts, password resets, and critical system configuration changes.
5. Data Security & Protection
Your information is defended with robust technical and organizational safeguards:
- Transport Layer Encryption: All communications between your browser, our API endpoints, and our infrastructure are encrypted in-transit using modern TLS/HTTPS encryption with HTTP Strict Transport Security (HSTS).
- Access Controls & Network Defense: Access to user account records is restricted strictly to authorized operational systems protected by hardened infrastructure firewalls.
- Ledger & Balance Protection: Wallet transactions and balances are protected by strict transactional integrity safeguards to prevent unauthorized modifications or balance discrepancies.
6. Processors & Gateways
To deliver global services, we interface with trusted enterprise service providers:
- Telecommunication & Cellular Network Providers: Transmitting automated line provisioning requests without transmitting your personal profile or financial credentials.
- PCI-DSS Certified Payment Gateways: Processing debit cards, bank transfers, and automated balance top-ups under international banking security standards.
- eSIM Global Roaming Clearinghouses: Transmitting device ICCID activations across international telecommunications towers.
We do not sell, rent, or share personal data with external advertising networks or behavioral tracking brokers.
8. Your Data Protection Rights
In compliance with GDPR, NDPR, CCPA, and global data privacy frameworks, you retain full sovereignty over your information:
- Right of Access: Request a full export of your personal profile and transaction history ledger.
- Right to Rectification: Update or correct your email address, username, or authentication credentials at any time via your user dashboard.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and associated personal data, subject only to mandatory legal bookkeeping requirements.
- Right to Restrict Processing: Opt out of non-essential communications or withdraw consent at any time.
9. Data Retention & Erasure
Account profile data is retained for as long as your account remains active. If an account is closed or deleted, personal identifiers are anonymized or permanently purged from active systems within thirty (30) days. Financial transaction logs are retained strictly for the statutory period mandated by corporate tax and financial auditing regulations.
10. Contacting Our Privacy Desk
If you have questions regarding this Privacy Policy, wish to exercise your data rights, or suspect any privacy concern, please reach out directly to our Data Protection Officer:
Email: privacy@jarawave.com
Support Portal: Customer Support Desk
Physical Jurisdiction: Telecommunications & Electronic Commerce Regulatory Authority
Jarawave