đź”’ Privacy Policy
1. Introduction
1.1. This Privacy Policy explains how EMDPay collects, uses, stores, protects, and discloses Your personal and financial information when You access or use Our Platform.
1.2. We are committed to safeguarding the privacy of our Users in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and guidelines issued by the Govt. of India.
1.3. By accessing or using the Platform, You consent to the terms of this Privacy Policy.
2. Information We Collect
We may collect the following categories of information:
2.1. Personal Identification Data
- Full Name
- Mobile Number
- Email Address
2.2. Identity Verification Data (KYC)
- PAN
- Aadhaar (only last 4 digits stored)
- Government-issued ID proofs
2.3. Financial & Transaction Data
- Bank account details (via secure integrations)
- UPI ID and transaction records
- Transaction metadata (time, amount, payment reference)
2.4. Credit-Related Information
- Soft credit reports from authorized credit bureaus (with consent)
- Credit score and repayment history (read-only)
2.5. Device & Technical Data
- Device type, operating system, app version
- IP address, geolocation, browser type
- Cookies & tracking pixels
3. Purpose of Data Collection
- To verify User identity (KYC compliance);
- To facilitate payments (Education Fees, Rent. etc.);
- To comply with reporting/audit requirements;
- To conduct fraud detection, risk assessment, credit evaluation;
- To improve app performance and security;
- To provide customer support and resolve disputes;
- To send legally mandated communications and receipts.
4. Legal Basis for Processing
- Consent (explicit for credit checks);
- Contractual necessity (to provide services);
- Legal obligation (compliance with regulatory bodies);
- Legitimate interest (fraud detection, service improvement).
5. Data Retention Policy
- Data retained only as long as necessary or legally required;
- Aadhaar stored only as last 4 digits;
- Soft credit data not permanently stored;
- Transactions retained up to 8 years (Audit compliance);
- Deleted upon account closure (unless legally required).
6. Data Sharing & Disclosure
- Banks, Regulatory body, UPI operators, payment aggregators;
- Credit bureaus (with consent);
- Regulators;
- Service providers (cloud, analytics, fraud tools).
We never sell or trade User data for marketing.
7. Security Measures
- Encryption (AES-256, SSL/TLS);
- Restricted access to authorized staff only;
- Regular VAPT (Vulnerability Testing);
- Data breach notification within 72 hours.
8. User Rights
- Access their personal data;
- Request corrections;
- Withdraw consent (may affect services);
- Request deletion (unless legally retained);
- Lodge complaints with the Grievance Officer.
9. Cookies & Tracking
We use cookies, SDKs, and tracking technologies for:
- Session management;
- User authentication;
- Fraud detection;
- Analytics & performance optimization.
10. Third-Party Links & Integrations
- Platform may link to payment gateways, UPI apps, banks;
- EMDPay not responsible for third-party privacy practices;
- Users must review external policies before use.
11. Limitation of Liability
- Unauthorized access due to weak/shared passwords;
- User negligence with Aadhaar/PAN/financial data;
- Loss/damage from third-party providers or beneficiaries;
- Indirect or consequential damages.
Liability limited to transaction fee for disputed service.
13. Changes to Privacy Policy
We may update this Policy at any time. Users will be notified via email/app notifications when material changes occur.
14. Governing Law & Jurisdiction
This Policy is governed by Indian law. Courts at New Delhi shall have exclusive jurisdiction.