The short version: we collect what we need to run your wallet — your mobile number, the details you enter for a payment, and technical information about your device. We use it to complete your transactions, keep your account secure and meet legal obligations. We do not sell your personal data. You can ask us to correct or delete your information at any time.
1. Introduction
This Privacy Policy describes how YouPay Wallet ("Company", "we", "us", "our") collects, uses, discloses, stores and protects your personal data when you use YouPay Wallet — our website youpaywallet.com, our web application at app.youpaywallet.com, and our mobile applications (together, the "Service").
We are the data fiduciary in respect of the personal data described here. By using the Service you consent to the practices set out in this policy. It should be read together with our Terms & Conditions and Cookie Policy.
2. Data we collect
2.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Account details | Name, mobile number, email address, date of birth, profile picture | Registration and profile updates |
| Address details | Address, city, state, PIN code | Where a service or verification requires it |
| Transaction details | Recipient mobile number, consumer or subscriber ID, bank account number, IFSC, amount, biller selected | Each time you make a payment |
| KYC information | Officially valid identity documents and verification data, where regulations require it | Only when verification is triggered |
| Support correspondence | Messages, complaint details, attachments you send us | When you contact support |
2.2 Information collected automatically
- Usage data — pages and screens visited, features used, time and date of access, duration of visit and referring pages.
- Device and technical data — IP address, device type and model, unique device identifiers, operating system, browser type and version, language and network information.
- Diagnostic data — crash reports and performance logs that help us find and fix problems.
- Cookies and similar technologies — see section 6 and our Cookie Policy.
2.3 Information from third parties
We may receive information about you from Payment Partners, banks, Billers, KYC verification agencies and fraud-prevention providers — for example, the status of a transaction, or the result of a verification check.
3. How we use your data
We use your personal data to:
- Provide the Service — create and maintain your account, process recharges, bill payments, transfers and wallet top-ups, and show your transaction history.
- Authenticate you — send OTPs, verify your identity and protect your account from unauthorised access.
- Communicate with you — send transaction confirmations, service updates, security alerts and responses to your support requests.
- Prevent fraud and abuse — monitor for unusual patterns, investigate suspicious activity and enforce our Terms.
- Comply with the law — meet KYC, anti-money-laundering, tax, accounting and record-keeping obligations, and respond to lawful requests from authorities.
- Improve the Service — understand which features are used, diagnose technical issues and develop new functionality.
- Offer rewards and promotions — administer cashback, referral and promotional programmes, and (with your consent, where required) tell you about offers.
We do not sell your personal data to anyone. We do not share it with third parties for their own independent marketing.
4. Why we are allowed to process your data
We process personal data on one or more of the following bases:
- Performance of a contract — processing necessary to deliver the services you have asked for under our Terms.
- Your consent — for example, for optional marketing communications or non-essential cookies. You may withdraw consent at any time.
- Legal obligation — where a law, regulation or regulator requires us to collect, verify, retain or disclose information.
- Legitimate interests — such as securing the platform, preventing fraud and improving our services, provided those interests are not overridden by your rights.
7. How long we keep it
We retain personal data only for as long as necessary for the purposes set out in this policy, and thereafter for as long as required to:
- comply with legal, tax, accounting and regulatory record-keeping obligations — financial and KYC records are typically retained for a minimum of five to eight years as required under Indian law;
- resolve disputes and enforce our agreements; and
- protect against fraud and abuse.
Usage data is generally retained for a shorter period, except where it is used to strengthen security or improve functionality, or where we are legally required to keep it longer. When data is no longer needed, we delete it or irreversibly anonymise it.
8. How we protect it
- All traffic between your device and our servers is encrypted using TLS.
- Sensitive fields are encrypted at rest, and transaction PINs are stored as irreversible hashes.
- Access to personal data inside the Company is restricted on a need-to-know basis and is logged.
- High-value actions require OTP verification on your registered mobile number in addition to your PIN.
- We monitor systems for anomalies and maintain audit trails of every credit and debit.
9. Your rights & choices
Subject to applicable law, you may:
- Access the personal data we hold about you;
- Correct information that is inaccurate or out of date — much of this you can do yourself in your account settings;
- Delete your account and request erasure of your personal data;
- Withdraw consent you previously gave, without affecting processing already carried out;
- Opt out of marketing at any time using the unsubscribe link in our emails or by writing to us; and
- Complain to us, or to the relevant supervisory authority, about how we handle your data.
To exercise any of these rights, write to support@youpaywallet.com from your registered email address. We may need to verify your identity before we act, and we will respond within the timelines required by applicable law.
Please note that we may be unable to delete information we are legally required to retain — for example, records of completed financial transactions.
10. Children's privacy
The Service is not directed at children and we do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to remove that information and close the account.
11. International transfers
Your information is processed at our operating offices in India and at the locations of the service providers involved in processing it. Some of these providers may be located outside India, where data-protection laws may differ.
Where personal data is transferred outside India, we take reasonable steps to ensure it remains protected in accordance with this policy, including through contractual safeguards with the recipient. By submitting your information, you consent to such transfers.
12. Third-party links
The Service may contain links to websites and applications we do not operate. This policy does not apply to them. We have no control over, and accept no responsibility for, the content, privacy policies or practices of any third-party site. We encourage you to read the privacy policy of every site you visit.
13. Changes to this policy
We may update this Privacy Policy from time to time. The revised policy takes effect when published on this page, and the "Last updated" date will change. For significant changes we will provide a prominent notice in the Service or send you an email before the change takes effect. Please review this page periodically.
14. Grievance officer
In accordance with the Information Technology Act, 2000 and the rules made under it, you may contact our Grievance Officer with any complaint about the processing of your personal data. Complaints are acknowledged within 48 hours and resolved within 30 days of receipt.
Grievance Officer — YouPay Wallet
- Email: support@youpaywallet.com
- Escalation process: Grievance Redressal Policy