Privacy Policy

We ("we", "us", "our", "the Platform") respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws of India. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over your data.

1 Personal Data We Collect

When you register on or use this Platform, we may collect the following categories of personal data ("Personal Data") directly from you:

• Identity information: Full name, outlet/business name
• Contact information: Mobile number, email address, city/address
• Account credentials: Password (stored in encrypted/hashed form)
• Government-issued identifiers (where applicable to a specific service): Aadhaar number, PAN number
• Financial information (where applicable): Wallet balance, transaction history, bank account details for payouts
• Technical information: IP address, device/browser information, login timestamps

2 Purpose of Processing (Why We Collect Your Data)

We process your Personal Data only for the following specified and lawful purposes:

• To create and manage your account and verify your identity
• To provide the services you request (e.g. PAN card services, recharge, bill payment, insurance, fund transfer)
• To process payments, maintain your wallet balance, and generate transaction records
• To communicate with you regarding your account, transactions, OTPs, and support requests (via SMS, WhatsApp, and email)
• To comply with legal, regulatory, and government requirements (including KYC/AML norms)
• To detect and prevent fraud, unauthorized access, and misuse of the Platform

3 Your Consent

By registering on the Platform and checking the consent box on our registration form, you provide your free, specific, informed, and unambiguous consent for us to collect and process your Personal Data for the purposes described in this Policy, as required under Section 6 of the DPDP Act, 2023.

You may withdraw your consent at any time by writing to our Grievance Officer at the contact details below. Please note that withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal, and may result in us being unable to continue providing certain services to you.

4 Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law (including financial and KYC record-keeping requirements under RBI/NPCI guidelines, typically up to 8 years for transaction records). Once the purpose is served and no legal obligation requires retention, we will delete or anonymise your Personal Data.

5 Data Sharing & Disclosure

We do not sell your Personal Data. We may share limited Personal Data only with:

• Payment gateway and banking partners, strictly to process your transactions
• Government/regulatory authorities (e.g. UTIITSL, NSDL) where required to deliver the specific service you requested (e.g. PAN application processing)
• SMS/WhatsApp/Email service providers, solely to deliver account notifications and OTPs to you
• Law enforcement or regulatory bodies, where legally required to do so

6 Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights regarding your Personal Data:

• Right to Access: Request a summary of the Personal Data we hold about you and how it is being processed
• Right to Correction: Request correction of inaccurate or incomplete Personal Data
• Right to Erasure: Request deletion of your Personal Data once it is no longer needed for the purpose it was collected, subject to legal retention requirements — you can submit this request directly via our Delete My Account page
• Right to Withdraw Consent: Withdraw your consent at any time, as described in Section 3 above
• Right to Grievance Redressal: Raise a complaint about how your data is handled and receive a response within a reasonable time
• Right to Nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

7 Data Security

We implement reasonable security safeguards, including encryption of passwords, restricted access controls, and secure server infrastructure, to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. In the event of a personal data breach that is likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

8 Children's Data

Our services are intended only for individuals who are 18 years of age or older. We do not knowingly collect Personal Data from children. If we become aware that we have inadvertently collected Personal Data from a child without verifiable parental/guardian consent, we will delete it promptly.

9 Grievance Officer & Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your Personal Data, please contact:

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Policy on this page with a revised "Last updated" date.