Privacy Policy

Scope and who we are

This website and the RupeeBiz platform are operated by TRUEHOST IT SERVICES PVT LTD. ("RupeeBiz", "we", "us"), a company incorporated in India with its office at Office No. 1007A, Newa Bhakti Knowledge City, IT-06, Airoli Knowledge City, TTC Industrial Area, Airoli, Navi Mumbai, Maharashtra 400708, India.

This policy applies to:

• visitors to www.rupeebiz.com and anyone who submits an enquiry or registration form on it;
• business partners and their authorised users who access the RupeeBiz partner dashboard or APIs;
• end customers of a partner, only to the extent that transaction data reaches RupeeBiz through the partner's platform.

Where an end customer transacts through a partner's app or website, the partner is generally the entity that determines the purpose of processing that customer's data, and RupeeBiz processes it on the partner's instructions in order to deliver the requested Recharge or Bill Payment service. The partner's own privacy notice governs its relationship with its customers.

Data we collect

Business enquiry data

When you complete a form on this website or contact us, we collect the details you provide, typically:

• name, work email address and mobile number;
• company name, website, industry, role and approximate size of your user base;
• the services you are interested in and any message you write to us.

Transaction metadata

When a partner integrates our services, we receive the data required to process and settle a transaction and to respond to disputes. This typically includes the recipient identifier submitted for the transaction (for example a mobile number, consumer number or account reference), the operator or biller selected, the amount, the partner's own reference identifiers, timestamps, transaction status and the response returned by the operator or biller.

We ask partners not to send us personal data that is not required to complete a transaction. We do not ask for, and partners should not transmit to us, payment card numbers, banking credentials, passwords or one-time passwords.

Technical and usage data

Our servers and this website record ordinary technical information such as IP address, device and browser type, referring page, pages viewed and time of access. Partner dashboard and API activity is logged for security, troubleshooting and audit purposes.

Recruitment and vendor data

If you apply for a role or supply services to us, we process the contact and background information you or your organisation provides for that purpose.

Why we use your data

• To respond to enquiries — to contact you about a request, arrange a discovery conversation and prepare a proposal.
• To provide the services — to onboard a partner, process Recharge and Bill Payment transactions, return status information and support reconciliation.
• To support and resolve disputes — to investigate failed, pending or disputed transactions and to co-ordinate with the relevant operator or biller.
• To keep the platform secure — to detect and prevent fraud, abuse, unauthorised access and misuse of our APIs.
• To meet legal obligations — to comply with applicable law and with lawful requests from courts, regulators and law-enforcement authorities.
• To improve the service — to analyse aggregated usage patterns, diagnose faults and plan capacity.

We do not sell personal data. We do not use transaction data received from partners to market to their end customers.

Lawful basis for processing

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. Depending on the activity, our basis is:

• Consent — where you voluntarily submit an enquiry or registration form, or agree to receive communications from us. You may withdraw consent at any time, as described below.
• Performance of a contract — where processing is necessary to deliver services under a partner agreement.
• Legitimate uses recognised by law — including compliance with legal obligations and responding to lawful requests from authorities.

Referring to this legislation describes the framework we work within. It is not a claim of certification or of any regulatory approval.

Who we share data with

We share personal data only where it is necessary, and only with:

• Operators, billers and aggregators — the recipient identifier and amount must be passed to the telecom operator, utility or biller (or an intermediary aggregator) to complete the transaction you or your customer has requested.
• Service providers — hosting, communications, ticketing and analytics providers engaged by us under written terms that limit their use of the data to the services they provide to us.
• Partners — where a transaction originates from a partner platform, transaction records are made available to that partner for reconciliation and support.
• Professional advisers — auditors, lawyers and insurers, where required.
• Authorities — where disclosure is required by law, court order or a valid regulatory or law-enforcement request.
• Successors — in connection with a merger, acquisition or reorganisation, subject to equivalent protection of the data.

We do not name individual processors in this document. A current list of the categories of processors we use can be requested at sales@rupeebiz.com.

How long we keep data

We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as the law requires us to keep it. In broad terms:

• enquiry and registration data is kept while a commercial discussion is live and for a reasonable period afterwards;
• transaction records and related logs are kept for the period required to support reconciliation, dispute resolution, audit and statutory record-keeping;
• security and access logs are kept for a limited period appropriate to investigation and monitoring.

When a retention period ends, data is deleted or irreversibly anonymised.

How we protect data

We apply organisational and technical measures intended to protect personal data against unauthorised access, alteration, disclosure and loss. These include role-based access control, encryption of data in transit, credential management, logging and monitoring, and periodic review of access rights. Our approach is described more fully in our Information Security Statement.

No method of transmission or storage is completely secure. We do not claim any specific certification in this policy; where a certification is obtained and verified, it will be published separately.

Your rights

Subject to applicable law, you may:

• ask for a summary of the personal data we hold about you and how it is processed;
• ask us to correct data that is inaccurate, incomplete or out of date;
• ask us to erase data where it is no longer needed and we are not required to retain it;
• withdraw a consent you have given, without affecting processing already carried out;
• nominate another person to exercise these rights on your behalf in the event of your death or incapacity;
• raise a grievance with us and, if unsatisfied, with the competent authority.

Write to sales@rupeebiz.com to exercise any of these rights. We may need to verify your identity before we act on a request. If your data reached us through a partner platform, please raise the request with that partner first — we will support them in responding.

Children

This website and the RupeeBiz platform are intended for businesses and are not directed at children. We do not knowingly collect personal data of a child except through a partner platform where the partner is responsible for obtaining verifiable consent of a parent or lawful guardian as required by law. If you believe a child's data has been provided to us in error, contact us and we will delete it.

Cookies

This website uses a small number of cookies and similar technologies. What they are used for, the categories involved and how to control them are set out in our Cookie Policy.

Grievance redressal

If you are concerned about how we have handled your personal data, you may write to us at sales@rupeebiz.com with the subject line "Privacy grievance". We will acknowledge the complaint and work towards a resolution. The full escalation route is described in our Grievance Redressal Policy.

Changes to this policy

We may update this policy as our services, our systems or the law change. The revised version will be posted on this page with a new "last updated" date. Where a change materially affects how we handle personal data, we will take reasonable steps to notify affected partners in advance.