Privacy Policy

Personal Information: When you register for our services, we collect your name, email address, phone number, business name, PAN number, and bank account details as required for KYC verification.

Transaction Data: We process and store transaction details including amounts, timestamps, payment methods, and merchant/customer identifiers necessary to provide our payment services.

Technical Data: We automatically collect IP addresses, browser type, device information, and usage patterns through cookies and similar technologies to improve our services.

Communication Data: We retain records of your correspondence with us, including support tickets, emails, and chat messages.

To provide, maintain, and improve our payment processing services.

To verify your identity and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.

To detect and prevent fraud, unauthorized transactions, and other illegal activities.

To send service-related communications, including transaction confirmations, security alerts, and support messages.

To analyze usage patterns and improve our platform's performance, features, and user experience.

To comply with legal obligations, regulatory requirements, and law enforcement requests.

Payment Partners: We share necessary transaction data with payment processors, banks, and card networks to facilitate payment processing.

Regulatory Bodies: We may disclose information to regulatory authorities including the Reserve Bank of India (RBI), as required by applicable laws.

Service Providers: We engage third-party service providers for hosting, analytics, and customer support who process data on our behalf under strict confidentiality agreements.

Legal Requirements: We may disclose information when required by law, court order, or to protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 encryption in transit, and tokenization of sensitive card data.

Our infrastructure is PCI DSS Level 1 certified and undergoes regular security audits, penetration testing, and vulnerability assessments.

Access to personal data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication and role-based access controls.

We retain your personal information for as long as your account is active or as needed to provide our services.

Transaction records are retained for a minimum of 10 years as required by financial regulations and tax laws.

Upon account closure, we retain necessary records as required by law and delete remaining data within 90 days.

Access: You may request a copy of the personal data we hold about you.

Correction: You may request correction of inaccurate or incomplete personal data.

Deletion: You may request deletion of your personal data, subject to legal retention requirements.

Portability: You may request your data in a structured, machine-readable format.

Objection: You may object to processing of your personal data for specific purposes.

To exercise these rights, contact us at privacy@payomatix.com.

We use essential cookies for platform functionality, analytics cookies to understand usage patterns, and performance cookies to optimize page load times.

You can manage cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

We will notify you of material changes via email or through a prominent notice on our platform.

Continued use of our services after changes constitutes acceptance of the updated policy.

For privacy-related questions or concerns, contact our Data Protection Officer at privacy@payomatix.com.

Payomatix Technologies Private Limited, registered office in India.

Last updated: April 2026.