Who we are
This Privacy Policy explains how the following company ("Paybuzz", "we", "us", "our") handles personal data when you use our website https://paybuzz.in, dashboard, APIs and services (together, the "Platform"):
Paybuzz is the data fiduciary for personal data processed under this Policy. This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023, as applicable.
Consent
By using the Platform or providing your information to us, you consent to the collection, use, storage and sharing of your personal data as described in this Policy. You may withdraw your consent at any time by writing to support@paybuzz.in. Withdrawal does not affect processing already carried out, and we may be unable to continue providing Services that depend on that data. We may still retain data where required by the laws of India.
Information we collect
The personal information you are asked to provide, and the reasons for it, will be made clear at the point we ask for it. Depending on how you use the Platform, we may collect:
- Identity and contact data — name, business name, email address, mobile number and address.
- KYC data — PAN, Aadhaar (masked or as permitted by law), GSTIN, business registration documents, photographs and other documents required under the Prevention of Money Laundering Act, 2002 and RBI / Partner requirements.
- Financial data — bank account details, wallet balance, fund requests, settlement details.
- Transaction data — biller, consumer number, amount, date, status and reference IDs of transactions processed through the Platform.
- Technical data — IP address, device and browser type, log files, API request logs and cookies.
- Communications — the contents of emails, messages, attachments and support tickets you send us.
We do not store full card numbers, CVV, PINs, passwords in readable form or OTPs.
How we use your information
We use the information we collect to:
- Provide, operate and maintain the Platform and process your transactions
- Verify your identity and complete KYC as required by law and our Partners
- Improve, personalise and expand the Platform, and develop new features and services
- Understand and analyse how you use the Platform
- Communicate with you, including for customer support, service updates, and — with your consent — marketing and promotional purposes
- Find and prevent fraud, money laundering and misuse
- Comply with legal, regulatory and audit obligations under the laws of India
Sharing of information
We do not sell your personal data. We share it only as needed to provide the Services or as required by law, with:
- Banking and payment partners — banks, payment aggregators, NPCI / Bharat Connect, NSDL, billers and operators, to process your transactions;
- Service providers — hosting, SMS, email, KYC verification and analytics providers bound by confidentiality obligations;
- Regulators and authorities — RBI, FIU-IND, law-enforcement agencies, courts or other government bodies, where required under the laws of India; and
- Successors — in connection with a merger, acquisition or sale of assets, subject to this Policy.
Data storage & security
Your data is stored on servers located in India. Payment-related data is stored in line with the RBI direction on Storage of Payment System Data. We follow reasonable security practices under the Information Technology Act, 2000, including 256-bit SSL/TLS encryption in transit, access controls, role-based permissions and activity logs. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of any personal data breach as required by law.
Data retention
We keep personal data only for as long as needed for the purposes described in this Policy, or as required by law:
| Data | Retention period |
|---|---|
| KYC and identity records | At least 5 years after the business relationship ends or the account is closed, as required under the Prevention of Money Laundering Act, 2002 and its rules |
| Transaction records | At least 5 years from the date of the transaction, as required under the Prevention of Money Laundering Act, 2002 and its rules |
| Accounting and tax records | As required under the Companies Act, 2013 and the GST laws |
| Support tickets and communications | For the duration of the relationship and up to 3 years after, unless needed for a dispute |
| Website logs and analytics | Up to 12 months |
Data needed for a pending dispute, investigation or legal proceeding is retained until it is resolved. When data is no longer required, we securely delete or anonymise it.
Log files
Paybuzz follows a standard procedure of using log files. These files log visitors when they visit websites, as a part of hosting services' analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
Cookies & advertising partners
Third-party ad servers or ad networks may use technologies like cookies, JavaScript or web beacons in their advertisements and links that appear on Paybuzz, which are sent directly to users' browsers. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalise the advertising content you see. Paybuzz has no access to or control over these cookies.
Paybuzz's Privacy Policy does not apply to other advertisers or websites. Please consult their respective privacy policies for more information, including how to opt out. You can choose to disable cookies through your individual browser options.
Your rights
Subject to the Digital Personal Data Protection Act, 2023 and other applicable laws of India, you have the following rights:
Users outside India may also have rights under their local laws (such as the GDPR or CCPA), including data portability and the right to object to or restrict processing. To exercise any right, email support@paybuzz.in from your registered email address. We respond within 30 days.
Children's information
The Platform is intended only for persons aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, please contact us immediately and we will promptly delete it.
Grievance
In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are:
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated Policy on this page, and where changes are significant we will notify you by email or through the dashboard. Changes are effective once posted.
Contact us
If you have any questions or suggestions about this Privacy Policy, contact us at: