Privacy Policy

1. INTRODUCTION

PaisaWapas.com is owned & operated by Nxtify Technologies Private Limited, an entity incorporated under the Companies Act, 2013, having its registered address at 1034-A, 3rd Floor, Sri Sri Sai Arcade, 24th Main Rd, 9th Cross Rd, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, India (hereinafter “PaisaWapas,” “we,” “our,” or “us”).

We know that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. Nxtify Technologies is committed to safeguard any information submitted to us on our website and/or services made available through the website or mobile applications (collectively as the “Platform”) of Paisawapas.com (“Services”). This Policy provides a summary of the type of information collected and processed by us. Further, this Policy highlights the measures adopted by the company to safeguard the same.

We might authorize our affiliated group companies, subsidiaries, and third parties to utilize our Platform for presenting their products and services to you, in accordance with the relevant Terms of Use outlined on our Platform periodically.

2. DEFINITIONS

  • “Data Breach” means any unauthorized individuals breach the security measures and unlawfully exploit sensitive or personal data that compromises the confidentiality, integrity or availability of personal data;

  • “Data Fiduciary” refers to Nxtify Technologies Private Limited.

  • “Data Processing” in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction;

  • "Internet Protocol (IP)" refers to the fundamental system or protocol governing the digital formats and regulations for communication between computers within a network or interconnected networks. This is executed through the Internet Protocol Suite, commonly known as TCP/IP. Communication occurs in the form of datagrams, which are also referred to as data packets or simply packets.

  • “Personal Information” means any data about an individual who is identifiable by or in relation to such data.

  • “Sensitive Personal Data” includes financial information (bank account number, IFSC, PAN, Aadhaar, etc.) and any other data notified as sensitive under applicable law.

  • “Specified Purpose” means the purpose mentioned in the notice given by the company to the user but not limited to use as enumerated in this policy for lawful purpose and enhancing the overall administration of our Platform and Services.

  • “Third-Party Processor” refers to any external service provider engaged to process data on our behalf.

3. USER CONSENT

By creating an account on PaisaWapas.com, accessing our Platform, or providing your personal information voluntarily, you consent to the collection, processing, storage, and use of your personal data as described in this Privacy Policy. Your consent is obtained for specific, lawful purposes only. In respect of third-party software development kits (“SDKs”), advertising partners, or other similar services, we will obtain your separate explicit consent before enabling any such data collection. You may withdraw your consent at any time by writing to cs@paisawapas.com; however, such withdrawal may affect our ability to provide you with certain services.

4. INFORMATION COLLECTED BY US

We collect personal data in various ways, including when you register on our Platform, interact with our services, or participate in promotions and surveys. The information we collect includes mandatory details such as your name, gender, email address, and IP address, which are required for account creation, communication, and fraud prevention. We may also collect your location information to validate cashback eligibility with retailers.

Additional optional information, including your date of birth, phone number, and personal preferences, may be provided voluntarily by you to enhance the personalization of offers and services. To process cashback withdrawals, we collect sensitive financial information such as bank account numbers, IFSC codes, PAN, and Aadhaar details. For purchases through PW Bazaar, we collect shipping and billing addresses, as well as contact details, solely for delivery and invoicing purposes.

We also collect data on your interactions with our Platform, including clickstream information, referral sources, purchase history, and browsing behavior to track cashback earnings and improve the user experience. We may collect limited device and engagement data through authorized third-party SDKs, such as those provided by Red Brick Lane Marketing Solutions Pvt. Ltd. (RBL) and Xiaomi Push Services, subject to your explicit consent.

5. INFORMATION COLLECTION PROCESS

Information is collected directly from you when you provide it while signing up or interacting with our services and indirectly through cookies, log files, and other tracking technologies. We also engage authorized third-party service providers for analytics and payment processing. All financial transactions are processed through PCI-DSS-compliant payment gateways, and we do not store or retain any payment card details provided by you while transacting on retailer websites.

6. USE OF INFORMATION PROVIDED TO US

Your personal data is used strictly for lawful and legitimate purposes. We process your information to register your account, track and validate cashback transactions, process withdrawal requests, and comply with applicable legal and tax requirements. It is also used to provide customer support, respond to your queries, improve the overall functionality of our Platform, detect and prevent fraud, and analyze user behavior to enhance our services. Where you have expressly consented, we may also use your information to send promotional offers, newsletters, and updates, which you may opt out of at any time.

7. DISCLOSURE TO THIRD PARTIES

We do not sell or rent your personal data to third parties. However, we may share your information with specific parties for legitimate purposes. This includes sharing necessary details with retailers and merchants for cashback validation and with sellers under PW Bazaar for invoicing and delivery. We may also share information with authorized third-party processors, such as analytics providers, cloud hosting partners, and payment processors, who are bound by strict confidentiality and data protection obligations. We may be required to disclose personal data to governmental or regulatory authorities if mandated by law. In the event of a merger, acquisition, or sale of PaisaWapas.com, we will notify you of any changes in ownership or control of your data.

8. THIRD-PARTY LINKS AND WEBSITES

Our Platform may contain links to third-party websites. Once you click on such links and leave our Platform, you will be governed by the privacy policies of the respective third parties, and we disclaim any responsibility for their practices.

9.USE OF THIRD-PARTY ADVERTISING AND SDK SERVICES

We may allow third-party advertising partners to deliver personalized advertisements on our Platform. These partners may use anonymized identifiers such as cookies or hashed device IDs to display relevant ads and measure performance. In addition, SDKs such as RBL and Xiaomi may collect limited data related to device engagement and ad interactions. We will only enable such SDKs after obtaining your explicit opt-in consent.

10. COOKIES

Cookies are small text files stored on your device that help us recognize you, track your cashback activity, personalize offers, and improve our services. You may choose to disable cookies through your browser settings, although this may restrict certain features on our Platform.

11.SECURITY MEASURES

We employ industry-standard security practices, including encryption, firewalls, and secure servers, to protect your personal data from unauthorized access, alteration, or disclosure. Access to your personal data is restricted to authorized personnel only, and periodic audits are conducted to ensure compliance with security protocols. However, while we take all reasonable precautions, we cannot guarantee absolute security against breaches.

12. RETENTION OF DATA

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Account-related information is retained until you delete your account or withdraw consent. Transactional and tax-related data is retained for a period of seven (7) years to comply with legal obligations. Marketing-related data is retained until you opt out, and anonymized analytics data may be retained indefinitely for research and statistical purposes. Upon the expiry of the retention period, personal data is securely deleted or anonymized.

13. USER RIGHTS UNDER DPDP ACT

As a Data Principal, you have the right to access and obtain a summary of your personal data processed by us, to correct or update inaccurate or outdated information, and to request the deletion of data no longer required for lawful purposes. You may also withdraw consent for data processing, subject to legal and contractual requirements. If you are dissatisfied with our response to your grievance, you may escalate the matter to the Data Protection Board of India as per the DPDP Act.

14.CHILDREN’S DATA POLICY

Our services are intended exclusively for individuals eighteen (18) years and older. We do not knowingly collect personal data from children. If we become aware that such data has been inadvertently collected, we will promptly delete it.

15. CROSS-BORDER DATA TRANSFER

Where your data is transferred or processed outside India, we ensure that such transfer is compliant with applicable Indian law and that appropriate contractual safeguards or government-approved mechanisms are in place to protect your personal data.

16. DATA BREACH NOTIFICATION

In the event of a data breach likely to cause significant harm to you, we will notify you promptly via email or Platform notifications and report the breach to the Data Protection Board of India in accordance with applicable law.

17. AMENDMENTS / REVISIONS

We reserve the right to revise this Privacy Policy at any time. Any material changes will be notified to you via email or platform notifications. Your continued use of our services after such changes constitutes acceptance of the revised Policy.

18. GRIEVANCE REDRESSAL AND CONTACT DETAILS

For any complaints, queries, or to exercise your rights under this Privacy Policy, you may contact our designated Grievance Officer.

Grievance Officer:

Name: Lableena Chowdhury
Email: cs@paisawapas.com
Response Timeline: Within seven (7) working days, as mandated under the DPDP Act.

For general queries, you may also contact us at cs@paisawapas.com.

Fields marked with * are compulsory