When you use our application, we collect and store your personal information provided by you from time to time. We do so to ensure that you are provided a safe, efficient, smooth and seamless experience. This also allows us to understand your needs and provide for services and features that best suit them. We strive to provide for services and features that best suit them. We strive to provide for customizations on our application to ensure that your experience is always safer and easier. This requires collection of personal information to the extent necessary for achieving this purpose and objective.

You may please note that it is mandatory to register yourself in order to use the app. And once you give us your personal information, you are not anonymous to us. We may automatically track certain information about you based upon your behaviour on our app to the extent permitted by law.

If you choose to transact on the app, we collect information about your transaction behaviour. We collect some additional information such as a billing address, details of recipient or payer of the transaction, location, etc. which may be used for providing better experience to you while using the App.

If you choose to provide information by way of leaving feedback, we will collect that information you provide to us. We retain this information as necessary to resolve disputes in terms of transactions and otherwise, where needed, provide customer support and troubleshoot problems as permitted by law. We collect personally identifiable information (email address, name, phone number etc.) from you when you register with us to create your unique identification in terms of Virtual Payment Address and/ or any other unique registration identification that is/ shall be made available to our merchants.

We use personal information to provide the services you request. We use personal information to resolve disputes; troubleshoot problems; collect money; measure consumer interest in our products and services and we may use the information to keep you apprised on any online and offline offers, products, services and updates that shall be made available for use of our merchants. We use the information thus obtained to Page 2 of 4 customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our terms and conditions which are an integral part of the use of this application; and as otherwise described to you at the time of such collection.

We identify and use your IP address to help diagnose problems with our server, and to administer our app. Your IP address is also used to help identify you and to gather broad demographic information.

We may disclose personal information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal processes. We may disclose personal information to law enforcement offices upon such requests, third party rights owners or others in the good faith belief that such disclosure is reasonable necessary to:

• Enforce our Terms or Privacy Policy
• Respond to claims that an advertisement, posting or other content violates the rights of a third party
• To protect the rights, property or personal safety of our users or the general public.

We will share some or all of your personal information with another business entity should we( or our assets) plan to merge with, or be acquired by that business entity, or reorganisation, amalgamation, restructuring of business. Should such a transaction occur that other business entity (or the new combined entity) will be required to follow this privacy policy with respect to your personal information.

Data is controlled and processed in house by the bank. The in house Data centre processes the data of Users in a proper manner and appropriate security measures are taken to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and / or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data centre, in some cases, the Data may be accessible to bank officials, involved with the operation of the service (administration, sales, marketing, legal, system administration) or external parties (such as vendors, third party technical service providers, mail & SMS carriers) appointed, if necessary, as Data Processors by the business Owner. The updated list of these parties may be requested from the business owner at any time.

The Data is processed at the bank’s Data centre and in any other places where the parties involved with the processing are located.

The Data is kept for the time necessary to provide the UPI services, and the extend permitted by law.

The User's Personal Data may be used for legal purposes by the bank, in Court or in the stages leading to possible legal action arising from improper use of this application or the related services. The User is aware of the fact that the Data Controller may be required to reveal personal data upon request of public authorities.

For operation and maintenance purposes, this Application and any third party services may collect files that record interaction with this Application (System Logs).Information not contained in this policy: More details concerning the collection or processing of Personal Data may be requested from the bank at any time.

Users have the right, at any time, to know whether their Personal Data has been stored and can consult the bank to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the bank at the contact information set out above. This Application does not support “Do Not Track” requests. To determine whether any of the third party services it uses honor the “Do Not Track” requests, please read their privacy policies.

The bank reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using this Application and can request that the bank to erase the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the bank has about Users.

Our app has stringent security measures in place to protect the loss, misuse, and alteration of the information under our control and follows the best practices in the industry in this regard. Whenever you change or access your account information, it is through secure channels. Once your information is in our possession we adhere to strict security guidelines, protecting it against unauthorized access.

By using the app and/ or by providing your information, you consent to the collection and use of the information you disclose on the app in accordance with this Privacy Policy, including but not limited to your consent for sharing your information as per this privacy policy.

Personal Data (or Data): Any information regarding a natural person, a legal person, an institution or an association, which is, or can be, identified, even indirectly, by reference to any other information, including a personal identification number.

Usage Data: Information collected automatically from this Application (or third party services employed in this Application), which can include: the mobile number and SIM serial number of the Users who use this Application, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User: The individual (registered merchant) using this Application, which must coincide with or be authorized by the bank Subject, to whom the Personal Data refer.

Data Subject: The legal or natural person to whom the Personal Data refers to Data Processor (or Data Supervisor) The natural person, legal person, public administration or any other body, association or organization authorized by the bank to process the Personal Data in compliance with this privacy policy.

Bank (or Owner): Bank of India is the Owner of this Application.

This Application: The hardware or software tool by which the Personal Data of the User is collected.

Cookie: Small piece of data stored in the User's device.