Introduction
Paybazaar Technologies Private Limited ("PayBazaar", "we", "us", "our") operates the digital platform available at www.paybazaar.co.in and associated mobile applications. We provide digital financial services including AEPS banking, domestic money transfer, bill payments, mobile recharge and micro ATM services to registered merchants across India.
This Privacy Policy ("Policy") describes how we collect, use, store, share and protect the personal information of our users — including merchants, distributors, and visitors — in accordance with applicable Indian laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
By accessing or using our Platform, you consent to the collection and use of your information as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of our Platform.
This Policy applies to all personal data collected through our website, mobile app, merchant portal, customer support interactions and any other channels through which you engage with PayBazaar.
Data We Collect
We collect different categories of personal information depending on your relationship with PayBazaar. Below is a comprehensive overview of the data we may collect:
| Category | Data Points | Purpose |
|---|---|---|
| Identity Data | Full name, Aadhaar number, PAN number, date of birth, selfie/photo | KYC verification & regulatory compliance |
| Contact Data | Mobile number, email address, residential address, pin code | Account communication & transaction alerts |
| Financial Data | Bank account number, IFSC code, wallet balance, transaction history | Commission payments & transaction processing |
| Biometric Data | Fingerprint (used only for AEPS authentication via UIDAI) | Customer AEPS transaction verification only |
| Device Data | Device model, OS version, IP address, browser type, app version | Security, fraud detection & app performance |
| Usage Data | Login activity, transaction logs, feature usage, session duration | Platform improvement & customer support |
| Location Data | GPS location (only when using the app with permission) | Fraud prevention & merchant location verification |
We treat Aadhaar number, biometric data, and financial account details as Sensitive Personal Data or Information (SPDI) under Indian law and apply the highest level of protection to this data.
How We Collect Your Data
We collect personal information through various channels:
3.1 Directly from You
- During merchant registration and KYC submission on our website or app.
- When you contact our customer support team via phone, email or WhatsApp.
- When you complete forms, surveys or feedback on our Platform.
- When you load your wallet or process transactions.
3.2 Automatically
- Through cookies, web beacons, and tracking pixels when you visit our website.
- Through our mobile app when location, camera or device permissions are granted.
- Through server logs capturing IP addresses, browser types, and access times.
3.3 From Third Parties
- From UIDAI for Aadhaar-based authentication and AEPS transactions.
- From banking partners and NPCI for transaction verification and settlement.
- From KYC verification service providers for identity validation.
How We Use Your Data
We use your personal information for the following purposes:
- Account Creation & KYC: To verify your identity and onboard you as a PayBazaar merchant in compliance with RBI and UIDAI guidelines.
- Transaction Processing: To process AEPS, DMT, bill payment, recharge and other transactions on behalf of you and your customers.
- Commission Payments: To calculate, process and transfer your earned commissions to your registered bank account.
- Communication: To send transaction confirmations, OTPs, alerts, updates and important policy notifications via SMS or email.
- Fraud Prevention: To detect, investigate and prevent suspicious or fraudulent activity on our Platform.
- Regulatory Compliance: To comply with applicable laws, RBI directives, court orders, and government requests.
- Customer Support: To respond to your queries, resolve disputes and provide technical assistance.
- Platform Improvement: To analyse usage patterns, fix bugs, and improve our products and services.
- Marketing: To send promotional offers, new service announcements, and newsletters — only with your consent.
We never use your personal data for purposes beyond what is described in this Policy without obtaining your explicit prior consent.
Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to any third party for commercial purposes. However, we may share your data in the following limited circumstances:
5.1 With Regulated Partners
- Banking Partners (Axis Bank, IndusInd Bank, Yes Bank) — for AEPS and DMT transaction processing.
- UIDAI — for Aadhaar authentication during AEPS transactions.
- NPCI (Bharat Connect / BBPS) — for bill payment processing.
- KYC Verification Services (DataGen, SprintVerify) — for identity verification during onboarding.
5.2 With Service Providers
- SMS and email service providers for sending alerts and OTPs.
- Cloud infrastructure and hosting providers for Platform operations.
- Analytics providers for improving Platform performance (anonymised data only).
5.3 For Legal Requirements
- When required by law, regulation, legal process, or enforceable government request.
- To protect the rights, property, or safety of PayBazaar, its users, or the public.
- To detect and prevent fraud, financial crime, or security threats.
All third-party partners and service providers who receive your data are bound by strict data protection agreements and are permitted to use your data only for the specific purpose for which it was shared.
Data Security
PayBazaar implements robust technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- 256-bit SSL/TLS Encryption — All data transmitted between your device and our servers is fully encrypted.
- Data Encryption at Rest — Sensitive data stored on our servers is encrypted using AES-256 standard.
- Multi-Factor Authentication (MFA) — OTP-based login verification for all merchant accounts.
- Firewall & Intrusion Detection — Active monitoring for suspicious access patterns and threats.
- Regular Security Audits — Periodic vulnerability assessments and penetration testing.
- Access Controls — Strict role-based access to personal data within PayBazaar.
- ISO Certification — Our information security practices are certified under ISO standards.
While we take every reasonable precaution to protect your data, no method of internet transmission or electronic storage is 100% secure. We encourage you to protect your account credentials and report any suspicious activity immediately.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements:
| Data Category | Retention Period | Reason |
|---|---|---|
| KYC Documents | 5 years after account closure | RBI / PMLA compliance |
| Transaction Records | 7 years from transaction date | Regulatory & audit requirements |
| Account Information | Duration of account + 2 years | Customer support & disputes |
| Communication Logs | 2 years | Dispute resolution |
| Device & Usage Data | 12 months | Security & analytics |
| Marketing Preferences | Until you opt out | Consent-based communication |
After the applicable retention period, your data is securely deleted or anonymised so that it can no longer be associated with you.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use
- Essential Cookies — Required for the website to function (login sessions, security tokens). Cannot be disabled.
- Analytics Cookies — Help us understand how visitors use our website (page views, session duration). Anonymised data only.
- Preference Cookies — Remember your settings and preferences for a better experience on return visits.
- Marketing Cookies — Used to show relevant promotions (only with your consent). You can opt out at any time.
You can manage or disable cookies through your browser settings at any time. Note that disabling essential cookies may affect the functionality of our website and merchant portal.
Your Rights & Choices
As a user of PayBazaar, you have the following rights with respect to your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Correct
Request correction of any inaccurate or outdated data.
Right to Delete
Request deletion of your data (subject to legal retention obligations).
Right to Object
Object to processing of your data for marketing purposes.
Right to Portability
Request your data in a structured, machine-readable format.
Opt-Out of Marketing
Unsubscribe from promotional messages at any time.
To exercise any of these rights, please email us at support@paybazaar.co.in with your registered mobile number and the specific request. We will respond within 30 days of receipt.
Deletion of certain data may affect your ability to continue using PayBazaar services, particularly where the data is required for regulatory compliance or transaction processing.
Third-Party Links & Services
Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by PayBazaar. This Privacy Policy applies only to the PayBazaar Platform and not to any third-party services.
- We are not responsible for the privacy practices of third-party websites or services.
- We recommend reading the privacy policy of every third-party website you visit.
- Our Platform integrates with banking and government systems (UIDAI, NPCI) that have their own privacy practices governed by their respective policies.
Children's Privacy
PayBazaar's services are intended exclusively for adults aged 18 years and above. We do not knowingly collect personal information from individuals under the age of 18.
- If we discover that personal data of a minor has been collected without parental consent, we will delete it promptly.
- Parents or guardians who believe their child has provided data to us should contact us immediately at support@paybazaar.co.in.
Grievance Officer
In accordance with the Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address your data privacy concerns:
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or business operations. When we make material changes:
- The updated Policy will be posted on our website with a revised "Last Updated" date.
- Registered merchants will be notified via SMS or email for significant changes.
- Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please reach out to us: