Privacy Policy | Paydeer

01Section 1 — Who Runs This Platform

Paydeer Financial Services Private Limited (“Paydeer”) is a company registered in India, with its registered office at 3rd floor, C-10, Sector-9, Chitrakoot Marg, Vaishali Nagar, Jaipur (RAJ.) - 302021 Throughout this document, “Paydeer”, “we”, “our”, and “us” refer to this entity.

Paydeer is a digital financial utility platform built to bring everyday banking and payment services within reach of every Indian citizen. Operating through our mobile application and our official web presence at https://www.paydeer.in, we bridge the gap between formal financial infrastructure and the people who need it most — whether that is a farmer in a rural district or a small shop owner in a tier-2 town.

Our platform is designed around five core service pillars: Aadhaar-enabled cash transactions (AePS), inter-bank fund movement (DMT), agent-based micro cash dispensing (M-ATM), telecom and DTH top-ups (Recharge), and centralised bill settlement (BBPS).

This document governs how Paydeer handles every piece of information that passes through our platform. It applies to retail agents, end customers, and casual visitors alike. This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, and disputes shall fall under the jurisdiction of courts located in 3rd floor, C-10, Sector-9, Chitrakoot Marg, Vaishali Nagar, Jaipur (RAJ.) - 302021. Paydeer Financial Services Private Limited acts as the “Data Fiduciary” under the Digital Personal Data Protection Act, 2023 and is responsible for determining the purpose and means of processing personal data.

02Section 2 — The Services Behind Your Data

Understanding what data we need starts with understanding what we do. Here is what each Paydeer service involves and why it requires personal information:

AePS — Aadhaar-Enabled Payment Service

Allows customers to withdraw cash, check balances, and view mini-statements from their Aadhaar-seeded bank accounts at agent counters. This service requires Aadhaar-based biometric authentication routed through UIDAI and NPCI infrastructure.

DMT — Domestic Money Transfer

Enables fund transfers to any bank account across India. The sender's identity and the recipient's bank details must be captured and transmitted to the banking network to complete the transfer.

M-ATM — Micro ATM Service

Allows registered agents to operate a handheld point-of-sale terminal through which customers can withdraw cash using their debit card and PIN. Transaction references and terminal data are recorded per RBI norms.

Recharge — Prepaid Top-Ups

Facilitates mobile, DTH, and data card recharges across all major Indian telecom operators. The subscriber number, operator selection, and recharge value are required to fulfil each order.

BBPS — Bharat Bill Payment System

A unified channel for paying recurring utility and service bills — electricity, piped gas, water supply, broadband, insurance, and more — through NPCI's centralised biller network.

Paydeer does not operate as a bank. All financial services are provided through partnerships with regulated banks and authorised financial institutions in compliance with RBI and NPCI guidelines. Paydeer acts as a service facilitator and does not hold customer funds. All financial transactions are processed through regulated banking partners.

03Section 3 — Information We Gather From You

3.1 What You Submit During Sign-Up

To open a Paydeer account, you will be asked to provide:

Your legal full name, date of birth, and gender
A working mobile number and an email address
Your current residential address and, for agents, your business address
A government-approved identity document — Aadhaar (masked), PAN, Voter ID, or Passport
A recent photograph or live selfie for KYC face-match verification
For agents: outlet name, bank details for commissions, and GST number

3.2 Data Produced by Your Transactions

Each time you initiate a transaction on Paydeer, a record is automatically generated. That record contains:

For DMT: Remitter details, beneficiary name, account number, IFSC, amount, and status.
For AePS: Reference number of Aadhaar-linked account. Paydeer does not store full Aadhaar numbers.
For M-ATM: Agent terminal ID, session reference, withdrawal amount, and card scheme.
For Recharge: Subscriber number, operator, plan, and transaction value.
For BBPS: Biller category, consumer reference, bill amount, due date, and confirmation number.
Across all services: Timestamp, transaction outcome, and provider reference ID.

3.3 Data Your Device Sends Automatically

When you open the Paydeer app or visit our website, our systems receive:

Device make, model and OS version
Unique installation identifier
IP address and network type
Approximate location (city/state level)
App session duration and interaction patterns
Diagnostic crash data

Permissions such as SMS (for OTP auto-read) and device information are used strictly for authentication and security. No data is accessed beyond the stated purpose.

3.4 Biometric Data — AePS Specific

Fingerprint and iris scans are captured solely through UIDAI-certified hardware and encrypted at the point of capture. Paydeer servers receive only a binary authentication outcome and never store raw biometric data or full Aadhaar numbers.

3.5 Support and Communication Records

Whenever you contact us, we keep a record of:

The content of your message or query
Date, time, and channel of communication
Our responses and the resolution steps taken
Call metadata (date, duration) for phone support

04Section 4 — Why We Hold and Use This Information

4.1 Fulfilling Your Requests

Processing transactions, verifying identity, producing receipts, and settling agent commissions accurately.

4.2 Meeting Our Regulatory Duties

Compliance with RBI KYC norms, PMLA 2002 requirements, and NPCI/UIDAI operational rules.

4.3 Guarding Against Misuse

Analyzing transaction behavior and device signals to identify anomalies and prevent fraud.

4.4 Resolving Problems

Investigating failed transactions, missing payments, or disputes using transaction logs and support records.

4.5 Making the Platform Better

Anonymised and aggregated usage data helps us understand feature performance and improve the app.

4.6 Keeping You Informed

Delivering OTPs, alerts, and service announcements. Promotional messages are opt-in only.

05Section 5 — The Legal Ground for Each Processing Activity

Processing Activity	Legal Basis
Account creation and KYC	Consent + Legal obligation (RBI KYC norms)
Transaction processing	Contract performance
AML record keeping	Legal obligation (PMLA 2002)
Fraud detection	Legitimate interest
Customer support	Contract performance
Product analytics	Legitimate interest
Marketing messages	Consent

Where consent is relied upon, it is obtained through clear affirmative action and can be withdrawn at any time.

06Section 6 — Who Else Sees Your Data

Paydeer operates a strict no-sale policy. Sharing happens only in these defined circumstances:

Financial Infrastructure Partners: Sponsor banks, payment aggregators, NPCI, operators, and billers for transaction completion.
Identity Verification Partners: UIDAI-licensed authentication service providers for eKYC (requires explicit consent).
Technology Service Providers: Cloud, messaging, and support software providers restricted to specific service delivery.
Authorities and Law Enforcement: Valid legal instruments or prevention of serious financial crime.
Successors: Transfer in case of acquisition/merger, with advance notification to users.

All data is stored and processed within India. Third-party SDKs (like Firebase) process limited technical data strictly for functionality and performance.

07Section 7 — How Long We Keep Everything

Category of Data	How Long We Keep It
Account and profile records	Duration of account plus 3 years
AePS and DMT transaction logs	7 years from transaction date
M-ATM terminal session records	7 years from session date
Recharge and BBPS payment history	5 years
KYC documents and identity records	Per PMLA 2002 and RBI KYC norms
Device logs and session data	12 months
Customer support interactions	3 years from final resolution

08Section 8 — How We Protect What You Share

TLS 1.2+ encryption for all data in transit
AES-256 encryption for data at rest
OTPs/PINs are validated transiently
Aadhaar numbers stored only in masked form
Regular independent penetration tests
2FA for all administrative accounts

Data Breach Notification: In the event of a breach, Paydeer will notify affected users and authorities as required by law.

09Section 9 — Rights That Belong to You

As a Data Principal (under DPDP Act 2023), you have the right to:

Inspect Your Data

Ask us what information we hold and with whom it has been shared.

Fix What Is Wrong

Correct inaccurate profile info directly in-app; KYC fields require fresh verification.

Ask for Deletion

Request account removal (regulatory retention for transaction logs may still apply).

Withdraw Consent

Pull back consent for activities like promotional offers at any time.

To exercise these rights, email privacy@paydeer.in with "Data Rights Request" in the subject.

10Section 10 — Eligibility and Age Requirements

To create and maintain a Paydeer account, you must be at least 18 years of age. Our services are not intended for individuals below this age. If we become aware that an account has been created by a minor, we will take immediate action to suspend the account and data will be deleted except where retention is required by law.

11Section 11 — Use of Location Information

We use your IP address to determine approximate location (city/state) for security purposes, such as detecting unusual login activity. We do not access GPS-based tracking or monitor real-time movements. Location data is not used for advertising.

12Section 12 — Cookies on https://www.paydeer.in

Functional

Essential for keeping you logged in and maintaining session continuity.

Analytical

Helps us understand user interaction (visitor numbers, page engagement).

Preference

Store selected settings like language preferences for future visits.

13Section 13 — Third-Party Links and Integrations

Our platform contains links to external sites (banks, billers). Once you navigate away, their privacy policies apply. We recommend reviewing their policies before sharing personal data.

14Section 14 — Updates to This Policy

We may revise this Policy periodically. Significant changes will be notified via in-app alerts (7 days before) and email/SMS. Your continued use after the effective date constitutes acceptance of the updated terms.

15Section 15 — Legal and Regulatory Compliance

This Policy is designed in accordance with:

Digital Personal Data Protection Act, 2023
Information Technology Act, 2000 & Rules, 2011
RBI Master Directions on KYC, 2016
RBI guidelines on data storage and localisation
PMLA 2002 and associated rules
NPCI guidelines for AePS, IMPS, and BBPS
UIDAI regulations for Aadhaar handling
Google/Apple App Store Privacy requirements

16Section 16 — Contact and Grievance Redressal

Support Channels

General Support: support@paydeer.in
Security: security@paydeer.in
Privacy: privacy@paydeer.in

Grievance Officer

Name: Sk Saif

Designation: Grievance Officer — Paydeer

Email: grievance@paydeer.in

Postal Address:

3rd floor, C-10, Sector-9, Chitrakoot Marg, Vaishali Nagar, Jaipur (RAJ.) - 302021