✦Overview
ZuelPay (ZuelPay Services Pvt. Ltd., 77 Rabindra Nagar, Laskarpur, Garia, Kolkata, West Bengal 700153) is committed to respecting the privacy and choice of its Users and business associates while using our website, mobile applications and API services.
This Privacy Policy highlights our privacy practices regarding Personal Information that we hold about our Users and business associates. By using ZuelPay's services, you agree to the collection and use of information in accordance with this policy.
1Definitions
- Personal Information — Any information that can identify a natural person, including name, mobile number, email address, Aadhaar number, PAN card number, bank account details, transaction history and device identifiers.
- User — Any individual or entity who registers on the ZuelPay platform, uses our API services, mobile applications or visits our website.
- Business Associate — Distributors, retailers, sub-agents, API partners and enterprise customers using ZuelPay's platform or APIs.
- Services — All products and services offered by ZuelPay including mobile recharge, bill payments, money transfer, payment gateway, KYC verification, white-label solutions and all API services.
- Sensitive Personal Data (SPDI) — Passwords, financial information (bank account, credit/debit card, UPI details), biometric data (fingerprints, Aadhaar), health information and other data classified as sensitive under applicable law.
2Data We Collect
ZuelPay collects the following categories of information when you use our services:
- Identity Information: Full name, date of birth, gender and profile photograph.
- Contact Information: Mobile number, email address and postal address.
- KYC & Financial Information: Aadhaar number (last 4 digits), PAN card number, bank account number, IFSC code, UPI ID and GST number (for business accounts).
- Transaction Data: Recharge history, bill payment records, money transfer history, wallet balance and all financial transaction logs.
- Device & Technical Information: IP address, device type, operating system, browser type, app version, IMEI (for mobile apps), device ID and location data.
- Usage Data: Pages visited, features used, time spent, click patterns and navigation within our platform.
- Communications: Customer support interactions, feedback, complaints and correspondence with ZuelPay.
3Use of Personal Information
ZuelPay uses your Personal Information for the following purposes:
- Providing services explicitly requested by you — recharge, bill payments, money transfers, KYC verification and all API operations
- Resolving disputes, troubleshooting concerns and providing customer support
- Promoting safe services, detecting and preventing fraud and other criminal activity
- Collecting amounts owed, including recovery of outstanding balances
- Assessing your interest in our products and informing you about offers, service updates and new features
- Customising your experience based on usage patterns and preferences
- Enforcing our Terms and Conditions, User Agreement and applicable policies
- Complying with regulatory requirements, legal obligations and reporting mandated by RBI, NPCI, UIDAI and other authorities
- Risk assessment and credit evaluation for lending or credit-based services (where applicable)
- Training our team and improving our platform using anonymised, aggregated data
4Non-Personal Information
ZuelPay also collects non-personal information — data that cannot identify an individual — such as aggregated usage statistics, anonymised transaction trends and demographic information at a population level.
This aggregated information is used to help ZuelPay provide more useful services, understand which features are most used and improve our platform. If ZuelPay combines non-personal information with Personal Information, the combined dataset will be treated as Personal Information for as long as it remains combined.
6Advertising
Advertisements appearing on ZuelPay services may be delivered by advertising partners who may set cookies on your device. These cookies allow ad servers to recognise your device and compile non-personal information about browsing behaviour to deliver targeted advertisements.
This Privacy Policy does not cover the use of cookies or tracking technologies by third-party advertisers. ZuelPay is not responsible for the privacy practices of advertising partners. Users are encouraged to review the privacy policies of any third-party sites they visit.
7Disclosure of Personal Information
ZuelPay will not share any personal or sensitive data with any external organisation unless:
- It is necessary to provide the requested service — for example, sharing mobile number with telecom operator to process recharge
- It is required to complete a legitimate financial transaction
- It is required pursuant to applicable law, court order or regulatory directive
- The User or business associate has given explicit consent
- It is shared with our trusted service providers under strict confidentiality agreements (payment processors, cloud providers, KYC partners)
ZuelPay shall take your consent and provide sufficient details of any court order or regulatory process before disclosing your information in legal proceedings.
8Legal Access & Government Requests
ZuelPay may access, preserve and share your information with regulators, law enforcement or courts in the following circumstances:
- In response to a valid legal request — search warrant, court order or subpoena — where we have a good-faith belief the law requires disclosure
- When necessary to detect, prevent and address fraud, unauthorized use, violation of our Terms and Policies or other harmful or illegal activity
- To protect ZuelPay, our Users or others, including as part of a regulatory enquiry
- To prevent death or imminent bodily harm to any person
9Security Practices
ZuelPay takes reasonable and appropriate precautions to maintain the confidentiality and security of your Personal Information:
- All data transmitted between your device and ZuelPay servers is encrypted using TLS 1.3 with AES-256 encryption
- Sensitive financial data is encrypted at rest using industry-standard encryption
- Access to Personal Information is restricted on a strict need-to-know basis
- All employees handling personal data receive regular data protection and security training
- Our platform is PCI DSS Level 1 certified — the highest standard for payment card data security
- Two-factor authentication is available and recommended for all accounts
- Regular security audits, penetration testing and vulnerability assessments are conducted
- Incident response procedures are in place for any data breach scenarios
10Third-Party Links
The ZuelPay website and app may contain links to third-party websites, partner portals or external services. When you click on these links, you leave the ZuelPay environment and enter another website for which ZuelPay takes no responsibility.
ZuelPay encourages you to read the privacy statements and terms and conditions of all such external websites, as their policies may differ materially from this Privacy Policy. You are solely responsible for maintaining the secrecy of your passwords and account credentials on external platforms.
11Change of Ownership
If the ownership or control of ZuelPay or all or part of our products, services or assets changes — including through merger, acquisition, corporate restructuring or sale — we may transfer your personal information to the new owner as part of the transaction.
We will notify Users of any such change of ownership via email or prominent notice on our website prior to the transfer, and provide options to delete or request export of your data where applicable under law.
12Your Rights Under DPDP Act 2023
Under India's Digital Personal Data Protection Act 2023 and applicable privacy laws, you have the following rights:
- Right to Access: Request a copy of the personal data ZuelPay holds about you
- Right to Correction: Request correction of inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data subject to legal obligations and retention requirements
- Right to Grievance: Lodge a complaint with ZuelPay's Data Protection Officer regarding data handling
- Right to Withdraw Consent: Withdraw consent for non-essential data processing (note: withdrawal may affect service availability)
- Right to Data Portability: Request your data in a structured, machine-readable format where technically feasible
To exercise any of these rights, please contact our Data Protection Officer at help@zuelpay.com or write to us at the address below.
13User Acceptance
By using ZuelPay's services, you signify your acceptance of this Privacy Policy. If you do not agree to this Policy, please do not use our services. Your continued use of ZuelPay services following the posting of changes to this Policy will be deemed your acceptance of those changes.
14Updates to This Privacy Policy
ZuelPay may change its data privacy practices and update this Privacy Policy as and when the need arises — for example, due to changes in applicable law, new services, regulatory guidelines or business practices. Updated policies will be made available on this page with the effective date.
Users and business associates are requested to review this page periodically. We will notify you of material changes via email or through a prominent notice on our website prior to the change taking effect where required by law.
15Contact Us
For any questions, grievances or requests related to this Privacy Policy or the handling of your personal data, please contact: