Privacy Policy

2.1 Personal Information

We collect the following personal information:

• Full name, date of birth, gender

• Email address and phone number

• Residential and business addresses

• Government-issued identification documents (PAN card, Aadhaar, Passport, Voter ID, Driving License)

• Photographs and biometric information (with consent)

• Employment details, occupation, annual income

• Bank account details, UPI IDs, payment card information

• GST registration number and business registration documents (for merchants)

2.2 Transaction Information

• Payment transaction details including amount, currency, date, time

• Merchant details, invoice information, purchase descriptions

• Cross-border transaction data including foreign exchange rates

• Carbon footprint calculations and eco-rewards data

• Provident fund contributions and billing records (for gig workers)

• Wallet balance, transaction history, and fund transfers

2.3 Technical Information

• Device information (model, operating system, unique device identifiers)

• IP address, browser type, language preferences

• GPS location data (with permission) for fraud prevention and service optimization

• Cookies, web beacons, and similar tracking technologies

• Log files including access times, pages viewed, and app usage patterns

• Network information and connectivity status (for offline payments)

2.4 Information from Third Parties

• Credit bureau reports and credit scores (with consent)

• Bank account verification data from NPCI and banking partners

• Social media profile information (if you connect accounts)

• Merchant transaction data and customer reviews

• Fraud detection data from security partners

3.1 Service Delivery

• Processing payment transactions and fund transfers

• Enabling cross-border payments and currency conversion

• Facilitating offline UPI payments via SMS, NFC, and Bluetooth

• Managing Smart Wallet balances and generating invoices

• Tracking carbon footprint and awarding eco-rewards

• Auto-generating PFRC documentation for gig workers

3.2 Compliance and Security

• Verifying your identity through KYC procedures

• Preventing fraud, money laundering, and unauthorized transactions

• Complying with RBI regulations, PMLA, FEMA, and tax laws

• Conducting risk assessments and transaction monitoring

• Responding to legal requests from law enforcement and regulatory authorities

3.3 Customer Support

• Resolving technical issues and transaction disputes

• Responding to inquiries and providing customer assistance

• Investigating complaints and fraudulent activities

• Sending service-related communications and updates

3.4 Product Improvement

• Analyzing usage patterns to enhance user experience

• Developing new features and payment solutions

• Conducting research and data analytics

• Testing system performance and reliability

3.5 Marketing and Communications

• Sending promotional offers, newsletters, and product updates (with opt-in consent)

• Personalizing recommendations based on transaction history

• Conducting surveys and gathering feedback

• Informing you about new partnerships and sustainability initiatives

4.1 Service Providers and Partners

• Banking partners and payment networks (NPCI, Visa, Mastercard, SWIFT)

• Cloud service providers and data hosting platforms

• Payment gateways and card processors

• Customer support and call center services

• Fraud detection and cybersecurity firms

• Environmental organizations for tree planting initiatives

4.2 Regulatory and Legal Authorities

• Reserve Bank of India (RBI)

• Financial Intelligence Unit (FIU-IND)

• Income Tax Department and GST authorities

• Law enforcement agencies upon valid legal requests

• Courts and arbitration tribunals in legal proceedings

4.3 Business Transfers

• In case of merger, acquisition, sale of assets, or corporate restructuring, your information may be transferred to the successor entity with proper notice

4.4 With Your Consent

• With third parties for specific purposes when you provide explicit consent

• With merchants for transaction processing and order fulfillment

6.1 Technical Safeguards

• 256-bit SSL/TLS encryption for data transmission

• AES-256 encryption for data storage

• Tokenization of sensitive payment information

• Multi-factor authentication (MFA) for account access

• Secure APIs with OAuth 2.0 authentication

• Regular security audits and penetration testing

• Intrusion detection and prevention systems

6.2 Organizational Safeguards

• Access controls and role-based permissions

• Employee training on data protection and confidentiality

• Background verification of employees handling sensitive data

• Non-disclosure agreements with vendors and partners

• Incident response and data breach notification procedures

• Annual third-party security certifications (ISO 27001, PCI-DSS)

6.3 Physical Safeguards

• Secure data centers with 24/7 monitoring

• Biometric access controls and CCTV surveillance

• Disaster recovery and business continuity plans

• Redundant backups in geographically distributed locations

7.1 Access and Correction

• Request access to your personal information we hold

• Update or correct inaccurate information through your account settings or by contacting us

7.2 Data Portability

• Request a copy of your information in a structured, machine-readable format

• Transfer your data to another service provider (subject to technical feasibility)

7.3 Deletion and Erasure

• Request deletion of your information after account closure (subject to legal retention requirements)

• Right to be forgotten once regulatory obligations are fulfilled

7.4 Withdrawal of Consent

• Withdraw consent for marketing communications at any time

• Unsubscribe from promotional emails via the unsubscribe link

• Disable location access, cookies, and tracking through device settings

7.5 Objection and Restriction

• Object to processing of your information for certain purposes

• Request restriction on processing during dispute resolution

To exercise these rights, contact our Data Protection Officer at privacy@rupeeflow.in