img

Privacy Policy

Welcome to Zepay Money, a brand of Evyaparpay Financial Technologies Private Limited. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial services platform at zepay.money. Please read this policy carefully to understand our practices regarding your personal data.

1. Information We Collect

We collect information to provide you with secure and efficient financial services. The types of information we collect include:

Personal Information:
  • Full name, date of birth, and contact details
  • Email address and mobile number
  • Residential and business addresses
  • Identity verification documents (Aadhaar, PAN, etc.)
  • Bank account details and financial information
  • Biometric data for AEPS transactions
Transaction Information:
  • Payment and transfer history
  • Bill payment records
  • Recharge and top-up details
  • AEPS and mATM transaction logs
  • UPI transaction details
Technical Information:
  • Device information and identifiers
  • IP address and location data
  • Browser type and operating system
  • App usage patterns and preferences
  • Cookies and tracking technologies

2. How We Use Your Information

We use your information for the following purposes:

Service Provision:
  • Processing AEPS, UPI, and other financial transactions
  • Facilitating bill payments through BBPS
  • Enabling mobile and DTH recharge services
  • Operating Mini ATM (mATM) services
Security and Compliance:
  • Fraud detection and prevention
  • Identity verification and KYC compliance
  • Anti-money laundering (AML) monitoring
  • Regulatory reporting and compliance
  • Risk assessment and management
Service Improvement:
  • Analyzing usage patterns to enhance services
  • Developing new features and products
  • Personalizing user experience
  • Customer support and assistance

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: To perform our financial services contract with you
  • Legal Obligation: To comply with RBI, SEBI, and other regulatory requirements
  • Legitimate Interest: For fraud prevention, security, and service improvement
  • Consent: For marketing communications and optional features
  • Vital Interest: To protect your and others' safety and security

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

Service Partners:
  • Banks and financial institutions for transaction processing
  • Payment aggregators and gateways
  • Utility companies for bill payment services
  • Mobile and DTH service providers
  • Technology service providers (with strict data protection agreements)
Legal Requirements:
  • Regulatory authorities (RBI, SEBI, FIU-IND, etc.)
  • Law enforcement agencies when legally required
  • Courts and tribunals under legal proceedings
  • Government agencies for compliance purposes

Important: We never sell your personal information to third parties for marketing purposes.

5. Data Security Measures

We implement comprehensive security measures to protect your data:

Technical Safeguards:
  • 256-bit SSL encryption for all data transmission
  • Advanced firewall and intrusion detection systems
  • Multi-factor authentication for sensitive operations
  • Regular security audits and vulnerability assessments
  • Encrypted data storage in secure data centers
Operational Security:
  • Access controls and role-based permissions
  • Employee background checks and security training
  • 24/7 monitoring and incident response
  • Regular backup and disaster recovery procedures
  • Compliance with PCI-DSS and ISO 27001 standards

6. Your Privacy Rights

You have the following rights regarding your personal data:

  • Right to Access: Request information about data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete information
  • Right to Erasure: Request deletion of your data (subject to legal requirements)
  • Right to Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to certain types of data processing
  • Right to Restrict Processing: Limit how we use your data
  • Right to Withdraw Consent: Withdraw consent for voluntary data processing

To exercise these rights, contact us at risk@zepay.money

7. Data Retention

We retain your information for the following periods:

  • Transaction Records: 10 years as per RBI guidelines
  • KYC Documents: 5 years after account closure
  • Customer Communications: 3 years for support purposes
  • Marketing Data: Until you opt-out or withdraw consent
  • Technical Logs: 1 year for security and troubleshooting

Data is securely deleted or anonymized after the retention period expires.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your login session and preferences
  • Analyze website usage and performance
  • Prevent fraud and enhance security
  • Personalize your experience
  • Provide relevant content and offers

You can manage cookie preferences through your browser settings. Some features may not function properly if cookies are disabled.

9. International Data Transfers

Your data is primarily stored and processed in India. If we transfer data internationally, we ensure:

  • Adequate protection through appropriate safeguards
  • Compliance with applicable data protection laws
  • Contractual obligations with third-party processors
  • Regular monitoring of international processing activities

10. Children's Privacy

Zepay Money services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. Third-Party Links and Services

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

  • Email notifications to your registered email address
  • Prominent notices on our website
  • In-app notifications
  • SMS alerts for critical changes

Continued use of our services after updates constitutes acceptance of the revised policy.

13. Grievance Redressal

If you have concerns about how we handle your personal data:

  • Primary Contact: risk@zepay.money
  • Grievance Officer: Available through our customer support
  • Response Time: We aim to respond within 48 hours
  • Resolution Timeline: Most issues resolved within 7 business days

14. Contact Information

For privacy-related questions or concerns:

  • Email: risk@zepay.money
  • Company: Zepay.money [Evyaparpay Financial Technologies Private Limited]
  • Address: Lucknow, Uttar Pradesh, India
  • Website: zepay.money
  • Customer Support: Available 24/7 through our platform

By using Zepay Money services, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy.