The payoflex mobile application and digital platform are owned and operated by payoflex Private Limited, a company incorporated under the applicable provisions of the Companies Act, having its registered office at Unit No. 201, Second Floor, NDM-1, Netaji Subhash Place, Pitampura, Delhi – 110034, India. This Privacy Policy explains how payoflex Private Limited, along with its affiliates, subsidiaries, associates, business partners, and authorized service providers (collectively referred to as "payoflex", "we", "our", or "us"), collects, uses, stores, processes, shares, and protects your personal information when you access or use our website, mobile application, APIs, chatbot, notifications, or any other digital platform or communication channel through which we provide our products and services (collectively referred to as the "Platform").
By downloading, installing, registering on, accessing, or using the payoflex Platform, or by providing your personal information to us or availing any of our products or services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy, as well as our applicable Terms and Conditions. If you do not agree with the terms of this Privacy Policy, you should discontinue the use of our Platform and services.
At payoflex, we value the trust you place in us and are committed to protecting your privacy. We adopt industry-standard security measures and follow reasonable security practices to ensure that your personal information remains secure and is processed responsibly.
This Privacy Policy has been prepared in accordance with the applicable laws of India, including but not limited to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Aadhaar Act, 2016 and the regulations issued thereunder, the Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable laws, guidelines, and regulatory directions issued by the Reserve Bank of India (RBI), the National Payments Corporation of India (NPCI), the Unique Identification Authority of India (UIDAI), and other competent authorities. This Privacy Policy governs the collection, use, storage, processing, transfer, and disclosure of your Personal Information through the payoflex Platform.
For the purpose of this Privacy Policy, "Personal Information" means any information relating to an identified or identifiable individual and includes Sensitive Personal Data or Information, such as financial information, identity documents, biometric information, and any other information that requires a higher level of protection under applicable law. Information that is freely available in the public domain or disclosed under any applicable law shall not be considered Personal Information for the purposes of this Policy.
The services offered through the payoflex Platform are intended only for users located within India. We do not offer products or services outside the territory of India. By using our Platform, you represent and warrant that you are legally competent to enter into a binding agreement under the applicable laws of India.
We collect personal information only when it is necessary to provide our products and services, comply with legal and regulatory obligations, verify your identity, improve user experience, prevent fraud, and ensure the security of our Platform. The information collected by us is relevant, limited to what is necessary, and processed only for legitimate business purposes.
The personal information we may collect includes your name, mobile number, email address, residential or business address, date of birth, profile photograph, occupation, business details, and other contact information that you voluntarily provide while registering or using our services.
To comply with Know Your Customer (KYC) requirements and other regulatory obligations, we may collect identity verification documents such as your PAN Card, Aadhaar Number or Virtual ID (VID), Passport, Driving Licence, Voter ID, GST Registration details, business registration documents, and other information prescribed by law or required by our banking and financial partners. Where applicable, we may also collect Video KYC recordings, live selfies, digital signatures, or other verification documents as mandated by regulatory authorities.
Where Aadhaar-based e-KYC is used, we may collect your Aadhaar Number or Virtual ID solely for authentication through the Unique Identification Authority of India (UIDAI). Submission of Aadhaar details is voluntary wherever permitted under applicable law, and alternative identity documents such as PAN or GST details may be accepted depending on the regulatory requirements of the respective service.
We may also collect scanned copies or photographs of documents submitted by you while availing our services. These documents are used only for identity verification, regulatory compliance, fraud prevention, and processing your requests.
For authentication and transaction verification, we may collect and process One-Time Passwords (OTPs) generated by your bank or sent through the payoflex Platform. Such OTPs are used exclusively for verification purposes and are not permanently stored after successful authentication.
When you use our financial services, we may collect information relating to your bank account, beneficiary details, wallet balance, transaction history, transaction value, payment references, settlement details, and limited masked card information required for processing transactions securely. We do not store your complete debit card number, credit card number, ATM PIN, CVV, or internet banking credentials.
In addition, we may automatically collect technical information about your device and usage of the Platform, including your device identifier, mobile device model, operating system, browser type, IP address, internet protocol information, location data (where permission is granted), cookies, session logs, application usage statistics, and other technical information that helps us improve our services and protect against unauthorized access or fraudulent activities.
Depending on the services you choose to use, the payoflex application may request access to certain features of your mobile device. For example, access to your camera may be required for scanning QR codes, capturing documents, completing Video KYC, performing face authentication, or uploading profile photographs. Such permissions are requested only when necessary for providing the relevant service.
During the KYC process, third-party verification agencies, banks, financial institutions, or authorized KYC service providers may require your identity documents, photographs, or video recordings to complete the verification process in accordance with applicable regulatory guidelines.
The Platform may also capture a live selfie or profile photograph of the user for identity verification, fraud prevention, account authentication, and display within the user's dashboard. Where required by applicable law or regulatory requirements, such photographs or verification data may be securely shared with authorized government agencies, UIDAI, NSDL, UTIITSL, regulated financial institutions, licensed KYC service providers, and other competent authorities solely for the purpose of identity verification and compliance with legal obligations.
All information collected through the Platform is processed securely and only for the purposes described in this Privacy Policy. We implement appropriate administrative, technical, and organizational safeguards to protect your personal information against unauthorized access, misuse, alteration, disclosure, or destruction. While we strive to maintain the highest standards of information security, no electronic storage system or method of transmission over the internet can be guaranteed to be completely secure.
By continuing to access or use the payoflex Platform, you expressly consent to the collection, storage, processing, use, and disclosure of your personal information in accordance with this Privacy Policy and the applicable laws of India.
We may collect your Personal Information whenever you interact with the payoflex Platform. This includes, but is not limited to, visiting our website or mobile application, registering as a user, merchant, partner, distributor, or any other category of account available on the Platform, accessing or using our products and services, initiating or completing transactions, or attempting to perform any transaction through the Platform. Personal Information may also be collected when you communicate with us through emails, customer support, chat services, feedback forms, notifications, surveys, promotional campaigns, or any other communication channels provided by payoflex.
If you apply for employment opportunities with payoflex, we may collect information submitted as part of the recruitment process, including your resume, educational qualifications, employment history, professional certifications, references, and any other information necessary to assess your application and conduct background verification.
In certain cases, we may receive Personal Information from trusted third-party sources, business partners, financial institutions, regulatory authorities, government agencies, or publicly available databases where permitted by applicable law. Such information may include financial history, credit-related information, fraud prevention records, court judgments, insolvency or bankruptcy information, vehicle-related details for insurance products, and demographic information required for regulatory compliance. Where Aadhaar-based authentication is used, we may receive identity information such as your name, address, gender, date of birth, photograph, or other details directly from the Unique Identification Authority of India (UIDAI) upon your consent and successful authentication, in accordance with the Aadhaar Act and applicable regulations.
The Personal Information collected by payoflex is processed solely for legitimate business purposes and in compliance with applicable laws. We use your information to create and manage your account, verify your identity, authenticate your login credentials, and determine your eligibility to access various products and services available on the Platform.
Your information is also used to comply with Know Your Customer (KYC), Anti-Money Laundering (AML), Counter Financing of Terrorism (CFT), and other regulatory obligations prescribed by applicable authorities, including the Reserve Bank of India (RBI), National Payments Corporation of India (NPCI), Unique Identification Authority of India (UIDAI), Financial Intelligence Unit – India (FIU-IND), and other government or regulatory bodies. Where required, we may validate, process, verify, or securely share your KYC information, nominee details, and related records with regulated entities, banks, non-banking financial companies (NBFCs), asset management companies (AMCs), payment partners, service providers, and other authorized institutions for the purpose of delivering the services requested by you.
We may use your Personal Information to process financial transactions, authenticate transaction requests, validate recurring payment instructions such as Systematic Investment Plans (SIPs), execute money transfers, process bill payments, facilitate merchant settlements, and provide other financial or payment services available through the Platform. We may also communicate with you regarding your account, transactions, customer support requests, regulatory notices, security alerts, service updates, or any other information necessary for the provision of our services.
To improve the quality of our products and services, we may analyse user behaviour, transaction patterns, and Platform usage on an aggregated and anonymized basis. Such analysis enables us to enhance user experience, improve Platform functionality, develop new features, personalize services, and ensure the stability and security of our systems.
Your information may also be used to conduct internal audits, compliance reviews, operational monitoring, quality assurance, risk management, fraud detection, identity verification, due diligence, and investigations relating to suspicious, fraudulent, illegal, or unauthorized activities. Where required by applicable law, we may disclose information to law enforcement agencies, courts, regulators, government authorities, or other competent authorities in India or overseas.
From time to time, payoflex may use your contact information to inform you about new products, service enhancements, promotional campaigns, offers, rewards, surveys, educational content, or updates that may be relevant to your relationship with us. Wherever required by law, such communications will be sent only after obtaining your consent, and you may opt out of promotional communications at any time.
While processing your Personal Information, payoflex follows the principles of purpose limitation, data minimization, and lawful processing. We collect and use only such information as is reasonably necessary to provide our services, comply with legal obligations, and protect our legitimate business interests while respecting your privacy.
Certain services available on the payoflex Platform require access to your real-time geographic location. With your explicit permission, we may collect your device's GPS or network-based location information for the purpose of facilitating banking and financial services such as Aadhaar Enabled Payment System (AEPS), Domestic Money Transfer (DMT), Bharat Bill Payment System (BBPS), Micro ATM transactions, merchant verification, fraud prevention, risk management, regulatory compliance, and service authentication.
Location information may also be collected for employee attendance management, field force monitoring, sales visit reporting, distributor engagement, merchant onboarding, and operational activities where such tracking is necessary for legitimate business purposes. Your location data is collected only while using the relevant services or where required by applicable law or contractual obligations, and it is processed in accordance with this Privacy Policy.
The payoflex Platform uses cookies, web beacons, pixels, and similar technologies to improve the performance, security, and functionality of our website and mobile application. Cookies are small text files stored on your device that enable us to recognize your browser, remember your preferences, maintain your login session, analyze website traffic, improve user experience, and deliver personalized content and services.
Cookies do not generally contain information that directly identifies you. However, they may be linked with other information collected through the Platform to provide a more personalized experience. We use both session cookies, which are automatically deleted when you close your browser, and persistent cookies, which remain on your device until they expire or are deleted.
You may choose to manage, disable, or delete cookies through your browser or device settings. Please note that disabling cookies may affect the functionality of certain features of the Platform, and some services may not operate as intended.
The Platform may also contain cookies or similar technologies placed by third-party service providers, analytics providers, payment partners, or advertising partners. Such third parties are governed by their respective privacy policies, and payoflex does not control or assume responsibility for their cookie practices or data collection activities.
payoflex respects the confidentiality of your Personal Information and shares it only where necessary, lawful, and for the purposes described in this Privacy Policy. Any sharing of Personal Information is carried out in accordance with applicable laws and only after appropriate due diligence.
We may share your Personal Information with our affiliates, subsidiaries, associates, business partners, merchants, financial institutions, payment service providers, technology partners, regulatory authorities, government agencies, law enforcement authorities, and other authorized entities involved in delivering our products and services. Personal Information may also be accessed by our internal departments, including customer support, compliance, legal, risk management, fraud prevention, information security, finance, audit, and marketing teams, strictly on a need-to-know basis.
Your Personal Information may be shared to facilitate the products or services requested by you, enable the completion of financial transactions, process merchant payments, authenticate Aadhaar-based e-KYC through the Central Identities Data Repository (CIDR), NSDL, UIDAI, or other authorized KYC agencies, and comply with Know Your Customer (KYC), Anti-Money Laundering (AML), Counter Financing of Terrorism (CFT), and other regulatory obligations prescribed by applicable laws.
Where necessary, we may share your information with banks, Non-Banking Financial Companies (NBFCs), Asset Management Companies (AMCs), payment aggregators, insurance partners, or other regulated entities for processing financial product applications, executing transactions, verifying identity, preventing fraud, managing operational risks, recovering funds, or complying with legal and regulatory requirements.
We may also disclose your Personal Information where such disclosure is required by law, court order, regulatory direction, subpoena, governmental request, or any other legal process. Such disclosures may also be made to protect the rights, property, or safety of payoflex, its users, business partners, or the general public, or to investigate suspected fraud, cybercrime, money laundering, or other unlawful activities.
In the event of a merger, acquisition, business restructuring, reorganization, amalgamation, sale of assets, or similar corporate transaction involving payoflex, your Personal Information may be transferred to the successor entity, subject to applicable legal and contractual safeguards.
Whenever your Personal Information is shared with third-party service providers, payoflex ensures, to the extent reasonably possible, that such parties maintain confidentiality and implement security standards that are comparable to or no less stringent than those adopted by us. However, where information is shared with government authorities, regulators, financial institutions, or other entities as required by law, the processing of such information shall be governed by their respective privacy practices and legal obligations. payoflex shall not be responsible for the privacy practices or policies of such third parties.
Your Personal Information is primarily stored on secure servers located within India and is retained only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, complying with contractual obligations, satisfying legal and regulatory requirements, resolving disputes, preventing fraud, and enforcing our legal rights.
In certain circumstances, we may retain your Personal Information for a longer period where required by applicable law, regulatory directions, ongoing investigations, court proceedings, audit requirements, or legitimate business purposes. Once the applicable retention period expires and the information is no longer required, it will be securely deleted, anonymized, or disposed of in accordance with applicable laws and our data retention policies.
payoflex implements appropriate administrative, technical, organizational, and physical safeguards to protect your Personal Information against unauthorized access, disclosure, misuse, alteration, loss, or destruction. Our security framework includes industry-standard encryption, secure communication protocols, firewalls, access control mechanisms, password protection, intrusion detection systems, continuous monitoring, and periodic internal and external security assessments.
For Aadhaar-related information and e-KYC processes, payoflex follows the security standards and controls prescribed under the Aadhaar Act, 2016, UIDAI Regulations, and other applicable regulatory guidelines.
Although we maintain robust security measures, no electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, while we strive to protect your Personal Information using commercially reasonable practices, we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials, including your login ID, password, MPIN, and One-Time Password (OTP). You should never share these credentials with anyone. If you suspect any unauthorized access or compromise of your account, you must notify payoflex immediately so that appropriate security measures can be taken.
To enhance account security, the payoflex application provides multiple authentication mechanisms, including secure login, logout functionality, device verification, and optional application lock features such as screen lock or biometric authentication. Additional verification may be required if you attempt to access your account from a new or unrecognized device.
The payoflex Platform may enable you to access products and services offered by banks, financial institutions, insurance companies, payment partners, merchants, or other third-party service providers. Such services may require you to share Personal Information directly with the respective service provider.
Any Personal Information collected by these third parties shall be governed by their respective privacy policies and terms of service. We encourage you to review those policies before using any third-party products or services.
Our Platform may also contain links to external websites, applications, or online services that are not owned or controlled by payoflex. Once you leave the payoflex Platform, any information you provide will be governed solely by the privacy policy of the respective website or application. payoflex does not control and is not responsible for the privacy practices, content, or security of such third-party platforms.
By accessing or using the payoflex Platform, creating an account, or providing your Personal Information, you expressly consent to the collection, storage, processing, use, disclosure, and transfer of your Personal Information in accordance with this Privacy Policy and applicable laws.
Where you provide Personal Information relating to another individual, you represent and warrant that you have obtained the necessary authority and consent to disclose such information to payoflex and permit its processing in accordance with this Privacy Policy.
You may choose to opt out of receiving promotional, marketing, or other non-essential communications from payoflex at any time by using the unsubscribe option available in our emails, updating your communication preferences within the Platform, or contacting our customer support team.
Please note that even if you opt out of promotional communications, we may continue to send you important transactional, security, regulatory, or service-related communications necessary for the operation of your account or compliance with legal obligations.
You have the right to request access to the Personal Information held by payoflex and to seek correction or updating of any inaccurate or incomplete information, subject to applicable legal requirements.
Where your consent has been obtained for Aadhaar-based e-KYC or any other data processing activity, you may withdraw such consent at any time by contacting us. Withdrawal of consent may affect your ability to continue using certain services that rely on such information.
You may also request deletion of your account or Personal Information through the Help section of the payoflex Platform or by contacting us. However, certain information may continue to be retained where required under applicable laws, regulatory requirements, dispute resolution processes, fraud prevention obligations, or legitimate business purposes.
Before processing any request relating to your Personal Information, payoflex may require you to verify your identity to protect your information against unauthorized access, modification, or deletion.
The payoflex Platform is intended only for individuals who are legally competent to enter into binding contracts under the Indian Contract Act, 1872. We do not knowingly collect or solicit Personal Information from individuals below the age of eighteen (18) years.
If you are under the age of 18 years, you may access or use the Platform only under the supervision of your parent, legal guardian, or another responsible adult.
payoflex may revise or update this Privacy Policy from time to time to reflect changes in our business operations, legal requirements, technological developments, or regulatory obligations. Any revised version of this Privacy Policy will be published on the Platform along with the updated "Last Updated" date.
Where required by law, we may notify you of material changes through appropriate communication channels. Your continued use of the Platform after such updates constitutes your acceptance of the revised Privacy Policy.
We remain committed to ensuring that any future modifications to this Privacy Policy do not reduce the level of protection provided to your Personal Information without a lawful basis.
If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or the processing of your Personal Information, you may contact our Privacy Officer using the details below:
payoflex Private Limited
Registered Office:
Unit No. 201, Second Floor,
NDM-1, Netaji Subhash Place,
Pitampura, Delhi – 110034, India.
Website: www.payoflex.com
Email: support@payoflex.in
© 2026 All rights reserved by PayoFlex