Trust Center

Trust, Security & Privacy

This page is maintained by the JiksPay team to answer common security and privacy questions about JiksPay. It is not an independent certification and does not replace any contract or formal policy.

What JiksPay does

JiksPay helps Persian-speaking students pay international fees for German university applications and studies — including Uni-Assist application fees, university tuition, APS, TestAS, and SEPA/SWIFT transfers. We act as a payment facilitator between the customer in Iran and the destination institution abroad.

Account access

The customer-facing site at jikspay.online is publicly accessible — no end-user account is required to view deadlines, search universities, or contact us. Administrative areas of the application are gated behind authentication and an administrator role check enforced server-side.

Data we collect

  • Page-view events (page path, referrer, timestamp, anonymous session id) used only for product analytics.
  • Email addresses you submit voluntarily to subscribe to deadline reminders.
  • Telegram chat id and username when you start the JiksPay bot, used to deliver requested notifications.
  • Messages you send to our chat or AI assistant, kept only to provide and improve the answer.
  • Payment details you provide are handled out-of-band by an administrator and are not retained on this site.

We do not knowingly collect government identifiers, payment-card numbers, or other sensitive personal data on this website.

Payments & receipts

Each payment request is handled manually by a JiksPay administrator using regulated banking and remittance partners abroad. Receipts issued by the destination institution (e.g. Uni-Assist, the university, Fintiba) are forwarded to the customer over the same channel they contacted us on.

Subprocessors & integrations

  • Lovable Cloud (managed Postgres + auth) — application database and authentication.
  • Lovable AI Gateway — the model that powers the in-bot assistant.
  • Telegram — delivery of the JiksPay bot and notifications.
  • SendGrid — transactional email delivery for deadline reminders.

These providers process data only on our behalf to deliver the features described on this site.

Cookies & analytics

We use a small number of first-party cookies and local-storage entries that are strictly necessary for sign-in and to remember UI preferences. Page-view analytics rely on an anonymous session id stored in your browser and are not shared with third-party ad networks.

Retention & deletion

Subscription records are kept while the subscription is active. Anonymised analytics events are retained for product improvement. On request to jikspay@gmail.com, we will delete your email subscription, Telegram link, and stored AI chat history.

Privacy requests

To access, correct, or delete data we hold about you, email jikspay@gmail.com from the address (or with the Telegram username) you used with us. We aim to respond within a reasonable timeframe.

Telegram bot behaviour

  • In private chats the bot answers commands you send.
  • In groups the bot only replies to /euro, /ask, and /deadline, plus at most one helpful auto-reply per group every 10 minutes when a message is clearly about student-payment topics.
  • It never replies to other bots, forwarded messages, very short messages, or duplicates, and never more than once per person per 24 hours in the same group.
  • An AI confidence check is used before any auto-reply — low-confidence messages are ignored.

Security contact

Report suspected vulnerabilities or security incidents to jikspay@gmail.com. Please include reproduction steps and avoid testing against real customer data.

Shared responsibility

JiksPay is responsible for how we configure the application, who on our team can access data, and the operational practices above. Our cloud platform is responsible for the underlying infrastructure it provides. Customers are responsible for keeping their own credentials, devices, and forwarded receipts safe.

Looking for the product? Back to JiksPay.