1. About this policy
PayKaasu is a vendor payment platform owned and operated by ForLoopTech Solutions Private Limited, a company incorporated in India with its registered office at 8th Floor, Naman Chambers, G-Block, Bandra-Kurla Complex, Bandra East, Mumbai, Maharashtra 400051, India ("PayKaasu", "we", "us" or "our").
PayKaasu lets businesses pay their vendors, suppliers and service providers using a credit card, with the payment settled to the vendor's bank account through our regulated payment partners (the "Services"). The Services are available through our website www.paykaasu.com (the "Platform").
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how we protect it, and the choices and rights you have. It applies to everyone who visits the Platform or uses the Services ("you" or "User"), and to the information you give us about your vendors ("Payees").
This policy should be read together with our Terms of Use. Capitalised terms not defined here have the meaning given in the Terms of Use.
2. Laws we follow
We process personal information in line with applicable Indian law, including:
- the Digital Personal Data Protection Act, 2023 and the rules made under it, as and when they apply;
- the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- directions of the Reserve Bank of India ("RBI") applicable to payment data, card data and KYC, as they apply to us and our payment partners.
3. Your consent and eligibility
By creating an account or using the Services, you consent to us collecting and using your information as described in this policy. If you do not agree, please do not use the Platform.
You must be at least 18 years old and legally able to enter into a contract to use the Services. If you use the Platform on behalf of a company, partnership, LLP, proprietorship or other entity, you confirm that you are authorised to act for it and to share its information with us.
You can withdraw your consent at any time (see Section 12). Withdrawing consent does not affect processing already carried out, and we may not be able to continue providing the Services without certain information.
4. Information we collect
| Category | What it includes | Why we need it |
|---|---|---|
| Account information | Name, mobile number, email address, login credentials | To create and secure your account |
| Business and KYC information | Business name and type, PAN, GSTIN, business address, identity and address proof, authorised signatory details | To verify you as required by law and set your profile-based limits |
| Card information | Card network, last four digits, issuing bank, card token | To process payments. Cards are tokenised; we do not store your full card number or CVV |
| Payee (vendor) information | Vendor name, bank account number, IFSC, mobile number, email, GSTIN | To verify the Payee and send the payment |
| Transaction information | Amount, date, invoice number, purpose, invoice attachments, settlement mode, status, UTR number, fees paid | To process, record and support each payment |
| Device and usage information | Device type, operating system, browser type, IP address, pages and features used, crash logs | To keep the Platform secure, prevent fraud and improve the Services |
| Location information | Approximate location from your IP address or device, where permitted | To detect fraud and meet regulatory requirements |
| Communications | Messages, support tickets, call recordings and feedback you send us | To respond to you and improve support |
We collect this information directly from you, automatically when you use the Platform, and from third parties such as KYC verification providers, credit bureaus, banks, card networks and payment partners.
5. Information about your vendors
When you add a Payee, you give us information about another business or person. You confirm that you have the right to share it with us for the purpose of making payments to them. We use Payee information only to verify the account, process your payments, send payment alerts to the Payee, and meet legal requirements.
6. How we use your information
We use your information to:
- create, verify and manage your account;
- carry out KYC, anti-money-laundering and fraud checks;
- set and review your profile-based transaction limits;
- process your payments, verify Payees and settle funds to Payees;
- send confirmations, receipts, invoices, security alerts and service messages;
- provide customer support and handle complaints, disputes and chargebacks;
- detect, investigate and prevent fraud, misuse and unauthorised transactions;
- analyse usage to fix problems and improve the Platform;
- send you updates and offers about PayKaasu, where you have not opted out;
- comply with law, regulatory directions, court orders and requests from authorities; and
- protect the rights, property and safety of PayKaasu, our Users and others.
We may use information in aggregated or anonymised form, which does not identify you, for research, reporting and product improvement.
7. How we share your information
We do not sell your personal information. We share it only where needed to provide the Services or where the law requires, with:
- Payment partners: payment aggregators, payment gateways, banks, card networks and card issuers that process and settle your payments.
- Verification providers: KYC, bank account verification and fraud-prevention service providers.
- Technology providers: cloud hosting, data storage, analytics, communication (SMS, email, WhatsApp) and customer-support tools that work on our behalf under contract.
- Your Payees: limited payment details, such as your business name, amount and UTR, so they know a payment has been made.
- Regulators and authorities: RBI, tax authorities, law enforcement, courts and other government bodies when required by law or to prevent fraud.
- Professional advisers: auditors, lawyers and consultants under a duty of confidentiality.
- Business transfers: a buyer or successor in a merger, acquisition or restructuring, who must protect your information in line with this policy.
Our partners handle your information under their own privacy terms and their contracts with us.
8. Cookies and similar technologies
We use cookies, pixels and similar tools on our website to keep you signed in, remember preferences, understand how the site is used and measure the performance of our communications. You can manage cookies through your browser settings. Blocking some cookies may affect how the Platform works.
9. Where your information is stored
Your information is stored on secure servers located in India. Payment data is stored in India as required by RBI directions on storage of payment system data.
If any information is ever processed outside India, we will do so only as permitted by Indian law and with safeguards equivalent to those described in this policy.
10. How we protect your information
We use reasonable security practices appropriate to the nature of our business and the information we handle, including:
- tokenisation of card data through our payment partners;
- encryption of data in transit (TLS 1.2 or higher) and at rest;
- OTP-based login;
- role-based access controls and access logging for our staff;
- regular security reviews and vulnerability testing.
No system is completely secure. Please keep your login details, OTPs and devices safe, and never share them with anyone, including people who claim to be from PayKaasu. Tell us immediately at info@paykaasu.com if you suspect unauthorised access to your account.
If a personal data breach occurs, we will notify affected Users and the relevant authorities as required by law.
11. How long we keep your information
We keep your information for as long as your account is active and as long as needed to provide the Services. After your account is closed, we keep certain records for the period required by law, including anti-money-laundering, tax and payment regulations, and to handle disputes or legal claims.
When information is no longer needed, we delete it or anonymise it so it no longer identifies you.
12. Your rights and choices
Subject to applicable law, you can:
- Access a summary of the personal information we hold about you and how we use it;
- Correct or update inaccurate or incomplete information;
- Erase information we no longer need, unless we must keep it by law;
- Withdraw consent for processing based on consent;
- Opt out of marketing messages at any time using the unsubscribe link, your account settings or by writing to us;
- Nominate another person to exercise your rights in case of death or incapacity; and
- Raise a grievance with our Grievance Officer (Section 16), and escalate to the relevant authority if you are not satisfied.
To make a request, write to info@paykaasu.com. We may need to verify your identity first. We will respond within the time required by applicable law.
You cannot opt out of essential service messages such as OTPs, payment confirmations and security alerts while your account is active.
13. Communications
When you create an account, you agree that we and our service providers may contact you by SMS, email, phone call, WhatsApp or notifications on the Platform about your account and transactions. We may also send you information about PayKaasu features and offers, which you can opt out of at any time.
14. Third-party links
The Platform may link to websites or services run by others, such as your card issuer or a partner bank. We are not responsible for their privacy practices. Please read their privacy policies before sharing information with them.
15. Changes to this policy
We may update this policy from time to time. We will post the updated version on the Platform with a new "Last updated" date and, for significant changes, notify you by email or a message on the Platform. Continued use of the Services after the update means you accept the revised policy.