Privacy Policy

Welcome to NedPay (nedpay.in). This Privacy Policy explains how NedPay collects, uses, stores and discloses your personal information when you use our website and dashboards for Simplified Bill Payments, Seamless Recharge Services, Automated Wage Settlements, Secure E-commerce Payment Settlements, Reliable Transaction Processing and Financial Efficiency at Scale.

By accessing or using NedPay — even by visiting a single page — you expressly consent to the collection, use and disclosure of your information in accordance with this Policy, our Terms and Conditions and our Refunds and Cancellations Policy. If you do not agree, please do not use NedPay.

This Policy is published in accordance with the Information Technology Act, 2000, the rules made thereunder, and the Digital Personal Data Protection Act, 2023 of India.

1. Information We Collect

We collect only such information as is necessary to provide our payment and settlement services, comply with KYC / AML obligations, and keep the platform secure:

• Registration and Account Data: full name, email address, mobile number, password (stored in hashed form), business / role details where applicable.
• KYC and Compliance Details: PAN, Aadhaar number (12-digit), GSTIN (where provided), full postal address with city, state and pincode, and any additional ID / address proof, verification results and admin approval records required under the Prevention of Money Laundering Act, 2002 and RBI guidelines.
• Transaction and Financial Data: bill-payment, recharge, wage-settlement and e-commerce settlement amounts, transaction references, charges, commissions, cashbacks and transaction logs and reports generated through real-time monitoring and transaction management.
• Authentication and Security Data: login history, 2FA usage, OTP records, device IDs, allowed-device lists, IP addresses, IP-whitelist settings, browser type and session information used for device validation and fraud prevention.
• Support and Contact Data: name, email, subject and message submitted through our Contact Us form, tickets raised from your dashboard, and call / email correspondence.
• Tracking and Technical Information: IP address, device identifiers, URLs visited, pages viewed, time spent, browser and operating-system information, and other interaction details — including for visitors who have not registered.

2. How We Use Your Information

We use your personal information to:

• Create, verify and administer your account, including KYC verification and admin approval.
• Process and settle bill payments, recharges, wage settlements and e-commerce settlements, and to display real-time dashboards, reports and downloadable receipts.
• Calculate and apply charges, commissions and cashbacks, manage balance debits / credits and refunds.
• Authenticate you via password, OTP and 2FA, enforce device validation and IP whitelisting, and detect and prevent fraud, money laundering and unauthorized access.
• Communicate account, transaction, security and service-related information, and provide customer care and ticket support.
• Comply with applicable laws, RBI / bank directions, tax obligations, and orders of courts, regulators and law-enforcement agencies.
• Improve our platform, measure promotional effectiveness, and ensure trust and safety.

We do not sell, rent, trade or exchange your personal information. We share it only as described in Section 3.

3. Sharing and Disclosure of Information

• Banks and Payment Partners: transaction and KYC data is shared with our banking partners, payment partners, card networks and other service providers strictly to process, verify and settle your bill payments, recharges, wage settlements and e-commerce settlements.
• Service Providers under Contract: IT infrastructure, SMS / OTP, email, analytics and customer-support vendors who assist in operating NedPay and are bound by confidentiality obligations.
• Affiliates: our group entities for operational, compliance and support purposes.
• Legal and Regulatory Authorities: courts, RBI, tax authorities, law-enforcement agencies and regulators where required by law, to investigate complaints or reported violations, or to report suspected unlawful activity including fraud and money laundering.

We do not allow third parties to use your personal data for their own marketing without your consent.

4. Cookies

We use cookies and similar technologies to keep you logged in, remember device and session preferences, analyze page flow, measure effectiveness, and promote trust and safety. Most cookies are "session cookies" that are deleted when your session ends. You may decline or clear cookies through your browser settings, but some features — including login, dashboard, and transaction flows — may not function correctly without them.

5. Security Measures

We take reasonable technical and organizational measures to protect your information, including encrypted transmission, hashed passwords, OTP and 2FA authentication, device validation, session controls, IP whitelisting where enabled, and role-based access for our staff. However, no method of transmission or storage is 100% secure.

You must protect your password, OTPs and 2FA codes, access NedPay only from trusted devices and networks, and notify us immediately of any unauthorized use of your account at info@nedpay.in. We are not responsible for losses arising from compromised credentials shared or exposed by you, or from activity on your account through unauthorized credential use until you notify us.

6. Data Retention

We retain your personal data only for as long as necessary — see our full Data Retention Policy for category-wise periods and legal bases under the DPDP Act, 2023, PMLA, RBI KYC Directions, Companies Act, Income-tax and GST laws. Summary:

• Provide our services and support your account,
• Meet legal, regulatory, tax and compliance requirements,
• Prevent fraud, resolve disputes, and enforce our policies.

Account & Personal Information: Retained for the duration of your account and up to 5 years after account closure, unless a longer retention period is required by applicable law.

KYC-related Information (PAN, Aadhaar, GSTIN, address proof): Retained for a minimum of 8 years or for the duration mandated by applicable laws, regulatory authorities, and anti-money laundering (AML) requirements.

Transaction Records (bill payments, recharges, wage settlements, e-commerce settlements): Retained for a minimum of 10 years or as required under the Prevention of Money Laundering Act, 2002 and RBI / tax record-keeping directions.

Usage, Log & Technical Data: Retained for up to 12 months for security monitoring, analytics, and fraud prevention.

After the applicable retention period expires, your data will be securely deleted, anonymized, or irreversibly masked, unless retention is required to comply with legal obligations or to resolve disputes.

7. Your Rights: Consent Withdrawal, Access, Correction, Download and Deletion

In accordance with the Digital Personal Data Protection Act, 2023, you have the right to access, correct, update and erase your personal data, to nominate another person in case of incapacity, and to withdraw consent where processing is based on consent — subject to our legal and regulatory retention obligations (in particular KYC, transaction and AML records which cannot be deleted while retention is mandated by law).

To exercise these rights — including consent withdrawal, data download, or data removal requests — please email us at info@nedpay.in from your registered email address with your registered mobile number and a copy of a valid ID proof. We will verify your identity and respond within the timelines prescribed by law. Withdrawal of consent for essential KYC / transaction data may require closure of your account since we cannot provide regulated payment services without it.

8. Children's Privacy

NedPay is intended solely for users aged 18 years and above and for authorized business entities. We do not knowingly collect personal data of children. If you believe a child has provided us data, please contact us so we can delete it.

9. Unlawful Use and Enforcement

We reserve the right to investigate complaints or reported violations of this Policy and our Terms, and to take appropriate action — including suspension of accounts, balance holds, and reporting suspected unlawful activity to law-enforcement officials, regulators, banks or card networks.

10. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our services, data practices or legal requirements. The updated version will be posted at https://www.nedpay.in/privacy_policy with a revised "Last updated" date. We encourage you to review this Policy periodically. Your continued use of NedPay after posting constitutes acceptance of the changes.

11. Contact Us and Grievance Redressal

If you have any questions, concerns, complaints or grievances about this Privacy Policy or our data practices, please contact our Grievance Officer:

• Email: info@nedpay.in
• Phone: 9807593999
• Address: No 6/50, R.N Puram, Tirupur, Karukkampalayam, Avanashi, Coimbatore - 641654

We aim to acknowledge your complaint within 48 hours and resolve it within 30 days, subject to verification and bank / partner dependencies.