Privacy policy

Involink is a B2B invoicing platform operated from Amman, Jordan. We provide invoicing, e-invoicing (JoFotara) submission, and payment-collection tooling to small and medium-sized businesses (“merchants”) and process payments from their customers (“payers”).

This policy describes how Involink collects, uses, retains, and shares personal data. It is governed by the Personal Data Protection Law No. 24 of 2023 of the Hashemite Kingdom of Jordan and other applicable Jordanian law.

Merchant account data: business name, tax registration number, registration name, store address, contact email and phone, JoFotara device identifiers, and the merchant’s chosen payment-account credentials (e.g. UWallet merchant ID, Network International terminal ID).

Invoice and transaction data: invoice line items, totals, currency, due dates, payer name and contact details (when supplied by the merchant), payment-provider transaction identifiers, status, and timestamps.

Payer-supplied data on the hosted payment page: the CliQ alias the payer enters to authorise a Request-to-Pay. Involink never sees the payer’s bank login or card details — the payment is authorised inside the payer’s own bank or wallet app.

Device and usage data: IP address, browser or device type, locale, and product-usage events (e.g. invoice created, payment initiated) used to operate the service and detect abuse.

To operate the service: render invoices, send reminders, accept payments, submit e-invoices to the Jordan Income and Sales Tax Department via JoFotara, and produce receipts.

To comply with Jordanian tax law, which requires retention of accounting records for the legally prescribed period (typically five years).

To protect the service against fraud, abuse, and unauthorised access, including rate-limiting and security monitoring.

To improve the product through aggregated, first-party analytics. The hosted payment page does not load third-party trackers.

Payment providers (UWallet, Network International, and other future providers): Involink relays the data each provider needs to process a payment under the JoPACC CliQ scheme.

Jordan Income and Sales Tax Department (via JoFotara): invoice content and the merchant’s tax-registration information are submitted as required for compliant e-invoicing.

Authorities and courts: where Involink is required to disclose data by Jordanian law, a binding court order, or a regulatory directive.

Service providers acting on Involink’s instructions: hosting, email delivery, error monitoring, and similar processors are bound by contract to handle personal data only as Involink directs.

Involink never sells personal data and does not share it with third-party advertisers.

Invoice and transaction records are retained for the period required by Jordanian tax law (typically five years from the relevant tax year).

Account credentials and contact records are retained for as long as the merchant maintains an account, plus the period needed to settle disputes or meet a legal obligation.

Aggregated analytics may be retained beyond these periods in a form that cannot be linked back to an identifiable person.

Subject to the conditions and exceptions in the Personal Data Protection Law, you may request access to the personal data Involink holds about you, request correction of inaccurate data, request deletion where Involink is not otherwise required to retain the data, and object to certain uses.

To exercise a right, write to privacy@involink.jo. Involink will respond within the timeframe set by the law.

If you are a payer and your concern is about a specific payment, please contact the merchant first — they are the controller of the underlying invoice relationship.

Personal data is transmitted over TLS, payment-provider credentials are stored encrypted at rest, and access to production systems is limited to authorised personnel. No service can guarantee absolute security; we work continuously to reduce risk and respond to incidents promptly.

Involink primarily processes data inside Jordan. Limited categories of operational data (for example error reports) may be processed by service providers in other jurisdictions under contractual safeguards equivalent to the protection required by Jordanian law.

Material changes will be announced inside the Involink app and via email to the merchant’s primary contact. The effective date at the top of this page indicates the latest revision.

For privacy questions or to exercise a right under the law, email privacy@involink.jo. For payment-specific refund or dispute questions, contact the merchant who issued the invoice first.