Privacy Policy

1. Information we collect

• Account data: name, mobile number, email address and password hash created at registration.
• KYC data: government identity documents and the document number you submit for verification, used only to enable wallet-funded payments.
• Transaction data: biller, consumer number, amount, payment method, cashback and receipt records.
• Technical data: device type, IP address and activity logs used for fraud prevention and security auditing.

2. How we use your information

We use your data to process bill payments, verify identity as required by payment regulations, credit cashback and rewards, send transaction and reminder notifications, provide customer support, and detect fraudulent or unauthorised activity. We do not sell personal data to third parties.

3. Payment and card data

Card, UPI and netbanking credentials are collected and processed by our PCI-DSS compliant payment gateway partner. UBT Pay never stores full card numbers, CVV values or UPI PINs on its servers.

4. Sharing and disclosure

• Billers and aggregators, to route your payment and confirm settlement.
• Payment gateway and banking partners, to process wallet top-ups and refunds.
• Cloud infrastructure providers who host the platform under contractual safeguards.
• Law enforcement or regulators, where disclosure is legally required.

5. Data security

Data is transmitted over TLS and stored with encryption at rest. Account records are isolated per user with row-level security, KYC documents are held in a private storage bucket accessible only through short-lived signed links, and administrative access is role-gated and logged.

6. Data retention

Transaction and receipt records are retained for the period required by tax and payment regulations. KYC documents are retained while your account is active and for the statutory period thereafter. Marketing preferences are retained until you withdraw consent.

7. Your rights

• Access and correct your profile information from the app at any time.
• Withdraw marketing consent in notification settings without affecting service alerts.
• Request deletion of your account, subject to statutory record-keeping obligations.
• Request a copy of the personal data we hold about you.

8. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, remember theme preferences and secure sessions. Analytics, where used, is limited to aggregate product usage. See our cookie policy for details.

9. Children

UBT Pay is not intended for users under 18 years of age, and we do not knowingly collect data from minors.

10. Changes and contact

We may update this policy as our services or the law change; material changes are notified in the app. For privacy questions or data requests, contact our support desk through the contact page.