Privacy Policy

1Introduction

Transacto Payment Solutions Pvt. Ltd. ("Company", "we", "us", or "our") operates the website transactopaymentsolutions.com and provides a suite of fintech and business software products including BBPS Bill Payment, Recharges & Utility, Flight Booking Software, School Management ERP, and Employee Royalty Programme.

This Privacy Policy applies to all individuals who interact with our services — including visitors, registered users, business clients, and their employees or agents. By using our platform, you consent to the collection and use of your information as described herein.

2Information We Collect

We collect different types of information depending on how you interact with our services:

Personal Identification Information:

• Full name, email address, phone number, and designation
• Business name, GSTIN, PAN, and registered address
• Government-issued ID details where required for KYC compliance
• Bank account or UPI details for payment processing (stored in encrypted form)

Usage & Technical Data:

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, and clickstream data
• Log data, error reports, and session activity
• Location data (city/state level, not precise GPS unless explicitly permitted)

Transactional Data:

• Bill payment records, recharge history, and booking details
• Transaction IDs, amounts, timestamps, and status
• Operator/biller reference numbers and confirmation codes

3How We Use Your Data

The information we collect is used for the following purposes:

• Service Delivery: To process transactions, activate services, and provide ongoing platform access.
• Account Management: To create and manage your account, verify your identity, and maintain security.
• Communication: To send service updates, transaction alerts, invoices, and support responses.
• Compliance: To meet our obligations under RBI, NPCI, BBPS, and other regulatory frameworks applicable to fintech services.
• Fraud Prevention: To detect, investigate, and prevent fraudulent or unauthorised activity on our platform.
• Product Improvement: To analyse usage patterns and improve our platform features and user experience.
• Marketing: To send relevant product updates and offers (only with your consent; you may opt out at any time).

We process your personal data only where we have a lawful basis to do so — including performance of a contract, compliance with a legal obligation, legitimate business interest, or your explicit consent.

4Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in delivering our services — such as payment gateways, telecom operators, GDS flight systems, cloud hosting providers, and SMS/email service providers. These parties are bound by confidentiality agreements.
• Regulatory Authorities: With RBI, NPCI, government bodies, or law enforcement agencies when required by law, court order, or regulatory obligation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.
• Aggregated Data: We may share anonymised, aggregated data that does not identify any individual for research, analytics, or marketing purposes.

5Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage analytics.

• Essential Cookies: Required for core website functionality such as session management and security. These cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). Data is anonymised and aggregated.
• Preference Cookies: Remember your settings and preferences for a better experience on future visits.
• Marketing Cookies: Used to show relevant advertisements on third-party platforms (only if you have provided consent).

You may control or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of our website.

6Data Security

We implement industry-standard technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted to and from our platform is encrypted using TLS (Transport Layer Security).
• Sensitive data such as passwords and financial information is stored using strong encryption algorithms.
• Our servers are hosted on secure, ISO 27001-compliant cloud infrastructure with access controls and firewalls.
• We conduct regular security audits, vulnerability assessments, and penetration testing.
• Access to personal data within our organisation is restricted on a need-to-know basis and is subject to strict internal policies.

7Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law.

• Account Data: Retained for the duration of your active account plus 3 years after account closure.
• Transaction Records: Retained for a minimum of 7 years in compliance with financial record-keeping regulations under the Income Tax Act and PMLA.
• KYC Documents: Retained for the period required by RBI and other regulatory guidelines.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.
• Log Data: Typically retained for 90 days for security and debugging purposes.

Upon expiry of the applicable retention period, we securely delete or anonymise your personal data.

8Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal and regulatory retention obligations.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time (where processing is based on consent). This will not affect the lawfulness of processing before withdrawal.
• Right to Grievance Redressal: Lodge a complaint with our designated Data Protection Officer (DPO) or with the Data Protection Board of India.
• Right to Nominate: Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of the above rights, please contact us at info@transactopaymentsolutions.com. We will respond to your request within 30 days.

9Third-Party Links

Our website and platform may contain links to third-party websites, payment gateways, operator portals, or partner platforms. These third-party sites have their own privacy policies, and we do not accept any responsibility or liability for their practices.

• We encourage you to review the privacy policies of any third-party site you visit through links on our platform.
• Our platform may integrate with GDS providers (for flight booking), telecom operators (for recharges), BBPS billers, and other partners — each governed by their own data policies.
• We are not responsible for any data shared by you directly with these third parties through their own interfaces.

10Children's Privacy

Our services are intended for use by adults and registered business entities. We do not knowingly collect, use, or store personal data from individuals under the age of 18.

If you believe that a minor has provided us with personal information without parental consent, please contact us immediately at info@transactopaymentsolutions.com. We will take prompt steps to delete such information from our records.

11Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable laws, or platform features. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email or an in-platform notification for material changes.
• Where required by law, seek fresh consent for new types of data processing.

Your continued use of our services after the effective date of any changes constitutes your acknowledgement and acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12Contact Us

For any privacy-related queries, data requests, or grievances, please contact our Data Protection Officer:

• Email: info@transactopaymentsolutions.com
• Phone: +91 92721 02655
• WhatsApp: wa.me/919272102655
• Head Office: 5th Floor, BPK Titanium, Vijay Nagar, Indore, Madhya Pradesh — 452010
• Branch Office: Logix Park, Sector 16, Noida, Uttar Pradesh — 201301

We aim to acknowledge all privacy-related requests within 48 hours and resolve them within 30 days. For unresolved grievances, you may approach the Data Protection Board of India once operational.