1. Introduction & Commitment

At FizPays Technologies Private Limited ("FizPays", "we", "our", "us"), your privacy is our priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (FizPays.in), mobile application, and credit card to bank transfer services (collectively, "Services").

We are committed to protecting your data in compliance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (DPDP Act), and RBI guidelines for payment intermediaries.

2. Information We Collect

We collect information necessary to provide, maintain, and improve our Services:

• Identity Data: Full name, date of birth, gender, PAN card number (for KYC), Aadhaar number (for e-KYC verification).
• Contact Data: Mobile number, email address, billing address, residential address.
• Financial Data: Bank account details (account number, IFSC code, beneficiary name), partial credit card information (last 4 digits, card network, expiry). Note: We NEVER store full credit card numbers, CVV, or 3D Secure passwords on our servers.
• Transaction Data: Transaction amount, date, time, status, payment method, beneficiary details, transaction ID.
• Technical Data: IP address, device type, browser type, operating system, access times, pages viewed.
• KYC Documents: PAN card image, Aadhaar XML/e-KYC data, selfie/live photo for liveness check.

3. How We Collect Information

We collect information through:

• Direct Interactions: When you register, initiate a transfer, complete KYC, or contact support.
• Automated Technologies: Cookies, server logs, and analytics tools to understand usage patterns.
• Third Parties: Payment gateways, credit bureaus (for verification), KYC service providers, and banking partners.

4. How We Use Your Information

We use your data strictly for:

• Service Delivery: Processing your credit card to bank transfers, sending confirmations, maintaining transaction records.
• Verification & Compliance: KYC verification as per RBI mandates, fraud prevention, anti-money laundering checks.
• Customer Support: Responding to queries, resolving disputes, providing assistance.
• Security: Monitoring for suspicious activity, preventing unauthorized access, protecting against fraud.
• Legal Obligations: Complying with applicable laws, regulations, legal processes, or government requests.
• Improvement: Analyzing usage to enhance user experience and develop new features.

We DO NOT sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Security Measures

We implement bank-grade security protocols:

• Encryption: 256-bit SSL/TLS encryption for all data in transit. AES-256 encryption for data at rest.
• Tokenization: Credit card details are tokenized through our PCI DSS compliant payment gateway partners.
• Access Control: Strict role-based access controls. Only authorized personnel can access sensitive data.
• Multi-Factor Authentication (MFA): Required for account access and high-value transactions.
• Regular Audits: Annual PCI DSS audits, quarterly vulnerability scans, penetration testing.
• Physical Security: Servers located in ISO 27001 certified data centers with biometric access.

6. Data Retention

We retain your data only as long as necessary:

• Transaction Records: 10 years as per RBI payment system data storage requirements.
• KYC Documents: 5 years after account closure as per PMLA guidelines.
• Account Information: Until account deletion request (subject to legal retention requirements).
• Technical Logs: 1 year for security monitoring.

7. Data Sharing & Disclosure

We may share your information with:

• Payment Gateways & Banks: To process your transactions (Razorpay, Cashfree, partner banks).
• KYC Service Providers: For identity verification and compliance checks.
• Regulatory Authorities: RBI, FIU-IND, Income Tax Department, or other government agencies as required by law.
• Service Providers: Cloud hosting, email services, SMS providers, customer support tools (bound by confidentiality agreements).

All third parties are contractually obligated to protect your data and comply with applicable privacy laws.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and login sessions.
• Analyze site traffic and usage patterns.
• Prevent fraud and enhance security.
• Improve website performance and user experience.

You can control cookies through your browser settings. However, disabling cookies may limit certain functionalities.

9. Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access: Request a copy of your personal data we hold.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Withdraw Consent: Withdraw consent for data processing (may affect service availability).
• Grievance: File a complaint with our Grievance Officer.

To exercise these rights, contact us at privacy@FizPays.in.

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

11. International Data Transfers

All your data is stored on servers located within India. We do not transfer personal data outside India except as permitted under Indian law with appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date indicates when changes were made. Significant changes will be notified via email or website announcement.

13. Grievance Officer

For any privacy-related concerns or to exercise your data rights, contact our designated Grievance Officer:

Name: Vikram Mehta
Designation: Data Protection Officer & CTO
Email: privacy@FizPays.in | dpo@FizPays.in
Phone: +91 81417 90779
Address: Plot No. 17, Gate No. 5, Software Units Layout, Madhapur, Hyderabad, Telangana 500081

We aim to acknowledge privacy requests within 24 hours and resolve them within 7 business days.

14. Contact Us

For general inquiries:

+91 81417 90779 (24/7 Support)
info@FizPays.in | support@FizPays.in
Plot No. 17, Gate No. 5, Software Units Layout, Madhapur, Hyderabad, Telangana 500081, India

If you believe your data has been compromised or misused, please contact us immediately.