Privacy Policy

NaxonPay Technologies Private Limited ("NaxonPay", "we", "our", or "us") operates the NaxonPay mobile application, website and related digital financial services (collectively, the "Service").

This Privacy Policy explains how we collect, access, use, store, protect and share information when you use NaxonPay services.

By using NaxonPay, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on the services you use, NaxonPay may collect the following categories of information:

1.1 Personal Information

• Name
• Mobile number
• Email address, where provided
• Login credentials and authentication information
• Merchant or retailer identification information

1.2 OTP and Authentication Information

We may use OTPs and other authentication information to verify your identity, secure your account and prevent unauthorized access.

OTP information is used for authentication and security purposes and is not used for unrelated marketing purposes.

1.3 KYC and Identity Information

Where required for merchant onboarding, identity verification, financial services or regulatory compliance, we may collect information such as:

• PAN information
• Aadhaar-related information
• Bank account information
• IFSC information
• KYC documents
• Merchant photographs
• Business/shop information
• Other documents required for onboarding or regulatory verification

2. Camera, Photos and Documents

NaxonPay may request access to the device camera or photo/document selection functionality when required for merchant onboarding, KYC, identity verification, document submission or other user-initiated features.

Examples may include:

• Shop or business photographs
• Merchant photographs
• PAN documents
• Aadhaar documents
• Cancelled cheque or bank documents
• Other documents specifically selected or captured by the user for a NaxonPay service

Photos and documents are used for the specific transaction, onboarding, KYC, verification or compliance purpose for which they are submitted.

NaxonPay does not use uploaded documents or photographs for unrelated purposes.

3. Location Information

Certain NaxonPay services, including AEPS and security-related functionality, may require device location information.

Where location permission is required, the application requests permission from the user and uses location information for purposes such as:

• AEPS transaction processing and service requirements
• Transaction security
• Fraud prevention and detection
• Risk monitoring
• Regulatory or compliance requirements
• Service verification

Location information is not used for advertising or unrelated marketing purposes.

4. Financial and Transaction Information

When you use NaxonPay financial services, we may process transaction-related information required to complete and record the requested transaction.

Depending on the service, this may include:

• Wallet recharge information
• AEPS transaction information
• Domestic Money Transfer (DMT) information
• BBPS and bill-payment information
• Recharge transaction information
• Payout information
• Beneficiary information
• Bank account and IFSC information
• Transaction amount and reference number
• Transaction status and settlement information

5. Device and Technical Information

We may automatically receive limited technical information required to operate, secure and improve the Service.

• Device model
• Android operating system version
• Application version
• IP address
• Network information
• Application crash and diagnostic information
• Security and fraud-related technical information

6. How We Use Your Information

We use information collected through NaxonPay for legitimate business, service, security and compliance purposes, including:

• Creating and managing user or merchant accounts
• Authentication and OTP verification
• Processing AEPS transactions
• Processing DMT transactions
• Processing BBPS and bill payments
• Processing recharge and payout transactions
• Merchant onboarding and KYC verification
• Transaction settlement and reconciliation
• Fraud detection and prevention
• Information security
• Customer support
• Troubleshooting and service improvement
• Legal and regulatory compliance

7. Sharing of Information

NaxonPay does not sell or rent personal information to third parties.

We may share limited information where necessary to provide the requested service or meet legal and regulatory requirements.

Such parties may include:

• Banking and payment partners
• AEPS service providers
• BBPS service providers
• Money transfer and payout partners
• KYC and identity verification providers
• Technology and hosting service providers
• Security and fraud-prevention service providers
• Regulatory authorities, government agencies or law-enforcement agencies where legally required

8. User-Initiated Data Submission

Information such as photographs, KYC documents, beneficiary information and transaction information may be submitted by the user when the user chooses to use a particular NaxonPay feature.

We process such information for the purpose associated with the feature and applicable legal, regulatory and security requirements.

9. Data Security

We use reasonable technical and organizational safeguards designed to protect personal, financial and sensitive information against unauthorized access, alteration, disclosure or destruction.

These measures may include:

• HTTPS/TLS encryption for data transmitted between the application and our servers
• Authentication and access controls
• Server-side security controls
• Transaction monitoring
• Fraud and risk monitoring
• Logging and security auditing

10. Data Retention

We retain information for as long as reasonably necessary to provide our services, maintain business records, resolve disputes, prevent fraud, comply with contractual obligations and satisfy applicable legal, financial, tax, regulatory and compliance requirements.

Certain transaction, financial and KYC information may therefore need to be retained even after an account deletion request where retention is required by law or legitimate regulatory obligations.

11. Account and Data Deletion

Users may request deletion of their NaxonPay account and associated personal information through our account deletion request facility.

Account deletion request:

https://b2b.naxonpay.com/deleteuserrequest.aspx

Upon receiving a valid deletion request, we will process the request in accordance with applicable requirements.

Information that we are legally required to retain, including certain transaction, financial, fraud, security, tax or regulatory records, may be retained for the applicable retention period.

12. Children's Privacy

NaxonPay financial and merchant services are intended for adults and business users and are not directed to children under 18 years of age.

We do not knowingly provide financial services to children where prohibited by applicable law.

13. Third-Party Services

NaxonPay may integrate with third-party service providers, including banking, payment, KYC, AEPS, BBPS, DMT, payout, hosting, security and technology providers.

These providers may process information only as necessary to provide their contracted services or meet applicable legal and regulatory requirements.

14. Cookies and Website Technologies

Our website may use cookies or similar technologies where necessary for authentication, security, functionality, session management and service improvement.

You may control cookies through your browser settings, although disabling certain cookies may affect website functionality.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or privacy practices.

The updated version will be published on this page with a revised "Last Updated" date.

16. Contact Us

17. Your Privacy Rights

Subject to applicable law, users may have rights regarding access, correction and deletion of their personal information and may contact us regarding questions or requests concerning their information.

NaxonPay will handle such requests in accordance with applicable legal and regulatory requirements.