Privacy Policy – RupeeZen

INTRODUCTION

Valuesurge Private Limited (“We”, “Our”, “RupeeZen” or the “Company”) is an entity registered as a private limited company under the Companies Act, 2013, having its registered office at NO.60, SKYLINE ESTATE, 3RD CROSS, 1ST MAIN ROAD, HORAMAVU, BENGALURU – 560043, engaged inter alia, in the business of enabling financial access to persons through technologically based innovative financial solutions. This Privacy Policy is with respect to the application www.rupeezen.com and RupeeZen’s mobile android application whereby the Company provides a platform for a User to interact with the company and technologically based innovative solutions (the “Services”). Any person who wishes to procure the Services (the “User”, “Your” or “You”) may access our platform, which includes our website www.rupeezen.com and RupeeZen’s mobile android application (collectively referred to as the “Platform”) and, subject to submission of the required documents, fulfilment of certain criteria and provision of information which may include Personal Information, the User can obtain use of the Services from the Platform.

The Company is committed to ensuring that the privacy of its clients, visitors, and Users of the Platform is always respected. This Privacy Policy serves as a testament to Our sincere efforts to uphold privacy laws. The User’s privacy and the protection of the User’s personally identifiable information (“Personal Information”) is one of our top priorities. We assure the User that we follow appropriate and necessary standards when it comes to protecting the User’s privacy. This Privacy Policy discloses and explains how we collect, use, share and protect Personal Information, Usage Information or any other information about the Users. In this Privacy Policy, We also provide information regarding how You can access and update Your Personal Information and make certain choices about how Your Personal Information is used by us.

This Privacy Policy explains what information will be collected by the Company when You access the Platform, how the information will be used, and how You can control the collection, correction and/or deletion of information. We will not use or share Your information with anyone except as described in this Privacy Policy. This Privacy Policy does not apply to information we collect by other means (including offline) or from other sources. The use of information collected through our Platform shall be limited to the purposes under this Privacy Policy and our Terms of Use to customers.

By using the Website/App and/ or by providing your information, you consent to the collection and use of the information you disclose on the Website in accordance with this Privacy Policy, including but not limited to Your consent for collecting, using, sharing and disclosing your information as per this privacy policy.

This Privacy Policy does not apply to any information other than information collected by us through the Platform including such information collected in accordance with the clause on “Types of Data Collected” below. This Privacy Policy will not apply to any unsolicited information provided by you through this Website, App or through any other means. This includes, but is not limited to, information posted on any public areas of the Website. All such unsolicited information shall be deemed to be non-confidential and we will be free to use, disclose such unsolicited information without limitation.

TYPES OF DATA COLLECTED

Among the types of Personal Data that RupeeZen collects, by itself or through third parties, there are: Cookies; Usage Data; email address; fathers name, mothers maiden name and city of birth first name; last name; date of birth; phone number; address; password; country; picture; User ID;; various types of Data including financial information including but not limited to savings and loan related transaction data, account numbers, credit/debit card details and UPI details. We may collect this information through various forms and in various places such as Our Platform, including when You access the Platform, when You first register with Us, when You create a transaction, when You contact Us, when You update Your information or when You otherwise interact with Us, by, for example, way of telephone, letter or in person.

Our Services are not directed to children, and we do not knowingly solicit or collect personal information from persons under the age of 18 (eighteen). If we find out that a child has given us personal information, we will take steps to delete that information.

Additionally, for quality and training purposes or for its own protection, RupeeZen may monitor or record its telephone conversations with you or anyone acting on your behalf. By communicating with RupeeZen, you acknowledge that your communication may be overheard, monitored, or recorded without further notice or warning.

Unless specified otherwise, all Data requested by RupeeZen is mandatory and failure to provide this Data may make it impossible for RupeeZen to provide its services. In cases where RupeeZen specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Company.

Users are responsible for any third-party Personal Data obtained, published or shared through RupeeZen and confirm that they have the third party's consent to provide the Data to the Company.

In the event You provide Personal Data belonging to a third party, You shall ensure that due consent has been procured from such third party for providing their Personal Information for further sharing and processing by the Company. You shall ensure that such consent is documented and can be provided, if required by the Company. The Company disclaims all liability arising out of any unauthorized sharing or processing of any Personal Information belonging to a third party and You agree to indemnify and hold the User harmless against any third party claims which arise out of such unauthorized sharing and processing of Personal Information belonging to a third party.

We may, from time to time, supplement the information we collect about You through our Platform with outside records from third parties, obtained rightfully and legitimately in order to enhance our ability to serve You, to tailor our content to You and to offer You opportunities to use such of our Services that we believe may be of interest to You. We may combine the information received from such third party sources with information collected through the Platform or through independent research conducted by Us with Your consent. In these cases, we will apply this Privacy Policy to any Personal Information received, unless otherwise provided. We may process such information received from third parties for legitimate commercial purposes or to enter into contractual obligations with You or in order to fulfil certain contractual obligations or where You have requested third parties to provide information about Yourself to us

We collect, process and store such SMS from your inbox which are relevant communication from financial institutions which are sent through 6 digit alpha numeric senders. Only the SMS from your selected bank are collected and processed to calculate the numeric balance held by you in the selected bank. Please note that we do not read or store your personal SMSs, bank OTPs, passwords, account numbers or SMS from other financial institutions. Only financial transaction SMSs from selected bank are read to track your progress towards your goals and your account balance. Please note that this service shall be available only in case a particular bank sends such SMS i.e. SMS regarding the credit or debit from the particular account with the bank. The Company disclaims all liability and warranties with respect to the accuracy of the calculations derived from reading the aforementioned SMS since these are dependent on various factors such as deletion of the SMS, downloading the Platform and permitting it to read SMS etc.

MODE OF PROCESSING THE DATA

Methods of processing

The Company takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Company, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of RupeeZen (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Company. The updated list of these parties may be requested from the Company at any time. We aim to protect the Personal Information by i) only sharing and providing access to Personal Information to the minimum extent necessary, subject to appropriate contractual restrictions including confidentiality restrictions where appropriate, and on an anonymized basis wherever possible; (ii) using secure servers to store Personal Information; (iii) verifying the identity of any individual who requests access to Personal Information prior to granting them access to such information; and (iv) using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt any payment transactions You make on or via our Platform.

LEGAL BASIS OF PROCESSING

The legal basis for collection and processing of any information collected and processed by Us is (i) for the performance of the Services in accordance with Our Terms of Use; and (ii) where it is Our legitimate interests to do so and not overridden by Your rights (for example, in some cases for direct marketing, fraud prevention, network and information systems security, for responding to Your communications, the operation of networks of groups by the network administrators, and improving our Platform). In some cases, we may also have a legal obligation to collect information about You, or may otherwise need the information to protect Your vital interests or those of another person, or where we need to comply with a legal requirement.

The Company may process Personal Data relating to Users if one of the following applies:

Users have given their consent for one or more specific purposes;
provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
processing is necessary for compliance with a legal obligation to which the Company is subject;
processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company;
processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party.
In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

RETENTION TIME

Personal Data shall be processed and stored for as long as required by the purpose they have been collected for or to comply with applicable laws (“retention period”). Therefore:

Personal Data collected for purposes related to the performance of a contract between the Company and the User shall be retained until such contract has been fully performed.
Personal Data collected for the purposes of the Company’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Company within the relevant sections of this document or by contacting the Company.

The Company may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Company may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

THE PURPOSES OF PROCESSING

Other than as stated in the Privacy Policy, we do not share any Personal Information with any third party (not being an affiliate, third party service provider or a group company of Us) without Your consent, except when directed by law. The Company can use Personal Information and/or Usage Information to verify User identity the context of any engagement initiated by a User.

We will communicate with You using the contact information provided in order to respond to any queries that You may have, to provide any information requested regarding the Services or to send marketing and promotional material on our Services. You can choose to opt out of receiving such promotional and marketing communications by explicitly making such a selection within the profile section of our mobile application or by clicking on the “unsubscribe” link from within any email communication sent to You . We may also use Your Personal Information to send You information in relation to our Services based on the analysis of the Usage Information collected. We may also send strictly service-related announcements, for instance, if our Services are temporarily suspended for maintenance, we may send You an email, text message, flash notification or telephone call. If You do not wish to receive such alerts, You have the option to unsubscribe from such emails or opt out by explicitly making such as selection within the profile section of our mobile application or clicking on the “unsubscribe” link from within any email communication sent to You. The Company shall unsubscribe you within 72 hours from the date on which you send the email to the Company

We, our business partners, affiliates or third party service providers may use Personal Information or Usage Information collected in the following ways:

to operate and improve the Platform and tools associated with the Platform;
to create aggregated and anonymized information to determine which Platform features are most popular and useful to Users, and for other statistical analyses;
to prevent, discover and investigate violations of this Privacy Policy or the Terms and Conditions, and to investigate fraud or other matters;
to customize the content or the Services on the Platform for You, or the communications sent to You through the Platform;
to provide You the Services;
to improve our ability to provide You the Services;
to observe, improve and administer the quality of Services;
to analyse how the Platform is used, diagnose technical problems;
to remember the basic information provided by You for effective access;
to confirm Your identity in order to determine Your eligibility to use the Platform and avail the Services;
to notify You about any changes to the Platform;
to transmit, share or transfer the data to a group company or affiliate of Us to enable such group company or Affiliate to provide You with the Services;
to enable Us to comply with Our legal and regulatory obligations;
for the purpose of sending administrative notices, Service related alerts and other similar communication with a view to optimizing the efficiency of the Platform;
to do market research, troubleshooting or project planning,
to comply with any direction of the law or a governmental, legal or quasi legal authority;
to protect against errors, fraud and other criminal activity; and
to reinforce the Terms of Use.

We may share non-Personal Information, such as aggregated User statistics and log data, with our business partners for the purposes of industry analysis, demographic profiling, to deliver targeted advertising about other products or services, or for other business purposes. This information is solely used to analyze the Platform and understand usage statistics, as mentioned above, and is anonymous. The Company may share this data with its business partners on an anonymous basis. We do not sell, share, rent or trade the information we have collected about You, including Personal Information, other than as disclosed within this Privacy Policy or at the time You provide Your information. We do not share Your Personal Information with third parties otherwise than as mentioned under this Privacy Policy for those third parties’ direct marketing purposes unless You consent to such sharing at the time You provide Your Personal Information.

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. Thus, we may access, use, store, transfer and disclose Your information (including Personal Information), including disclosure to third parties such as government or law enforcement officials or private parties as we reasonably determine is necessary and appropriate: (i) to satisfy any applicable law, regulation, governmental requests or legal process; (ii) to protect the safety, rights, property or security of the Company, our Services, the Platform or any third party; (iii) to protect the safety of the public for any reason; (iv) to detect, prevent or otherwise address fraud, security or technical issues; and /or (v) to prevent or stop any activity we consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity. Such disclosures may be carried out without notice to You.

We may share Your information, including Your Personal Information and Usage Information with our parent, subsidiaries and affiliates for internal reasons. We also reserve the right to disclose and transfer all such information: (i) to a subsequent Company, co-Company or operator of the Platform or applicable database; or (ii) in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our membership interests and/or assets or other corporate change, including, during the course of any due diligence process. You will be notified via email and/or through a prominent notice on the Platform of any change in Companyship or uses of Your Personal Information, as well as any choices You may have regarding Your Personal Information.

We may partner with another party to provide the Services including specific services if required. When You sign-up for the Services, We may share names, other Personal Information including details of any documentation provided by You that is necessary for the Company to provide the Services. We may specifically share Your Personal Information with our business partners who we are required to contractually provide data in order to provide the Services.. Our contractual arrangements with such third parties restrict these parties from using Personal Information except for the explicit purpose of assisting in the provision of these Services. We also protect Your Personal Information off-line other than as specifically mentioned in this Privacy Policy. Access to Your Personal Information is limited to employees, agents or partners and third parties, who We reasonably believe will need that information to enable Us to provide Services to You. However, We are not responsible for the confidentiality, security or distribution of Your own Personal Information by our partners and third parties outside the scope of our agreement with such partners and third parties.

The Platform may contain content that is supplied by a third party, and those third parties may collect Platform usage information and other information when web pages from any online or mobile services are provided to Your browser. In addition, when You are using the Platform, You may be directed to other Platforms that are operated and controlled by third parties that we do not control. We are not responsible for the privacy practices employed by any of these third parties. These other Platforms may send their own cookies to You, independently collect data or solicit Personal Information and may or may not have their own published privacy policies. When You leave the Platform, we encourage You to read the privacy statements of all third party Platforms before submitting any information to third parties.

Should you require detailed information on the nature of data processed for a particular purpose, please reach out to us at help@rupeezen.com.

OPT OUT
- If You wish to specifically opt out of receiving communication from the Company on the Services provided including but not limited to reminders and updates relating to your activity on the Platform , you can do so by selecting the opt out option on the profile section of our mobile application or click on the “unsubscribe” link from within any email communication sent to You.

THE RIGHTS OF USERS

Users may exercise certain rights regarding their Data processed by the Company. In particular, Users have the right to do the following:

Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
Access their Data. Users have the right to learn if Data is being processed by the Company, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Company will not process their Data for any purpose other than storing it.
Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Company.
Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
opt out of receiving any promotional or marketing material by explicitly making a selection on the profile section of the mobile application or by clicking the “unsubscribe” link from within any email communication sent to You. Please note that if You withdraw Your consent, this will not affect the lawfulness of our use and processing of Your information if such processing is based on another lawful basis other than consent;
Details about the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Company or for the purposes of the legitimate interests pursued by the Company, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
If the users exercise any of the rights listed above, the company reserves the right to and might choose to terminate its services to the user or provide services in a limited manner.

Generally, we do not rely on consent as a legal basis for processing Your Personal Information other than in relation to sending third party direct marketing communications to You via email or text message. You have the right to withdraw Your consent to marketing by opting out of such communication via the profile section of the mobile application or by clicking the “unsubscribe” link from within any email communication sent to You.

Any requests to exercise User rights can be directed to the Company through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Company as early as possible and always within one month.

9.LEGAL ACTION

The User's Personal Data may be used for legal purposes by the Company in court or in the stages leading to possible legal action arising from improper use of RupeeZen or the related Services. The User declares to be aware that the Company may be required to reveal personal data upon request of public authorities.

10.ADDITIONAL INFORMATION ABOUT USER'S PERSONAL DATA

In addition to the information contained in this privacy policy, RupeeZen may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

11.INFORMATION NOT CONTAINED IN THIS POLICY

More details concerning the collection or processing of Personal Data may be requested from the Company at any time. Please see the contact information at the beginning of this document.

12.HOW “DO NOT TRACK” REQUESTS ARE HANDLED

RupeeZen does not support “Do Not Track” requests.

To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

13.CHANGES TO THIS PRIVACY POLICY

The Company reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page and possibly within RupeeZen and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Company. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Company shall collect new consent from the User, where required.

14.GRIEVANCE OFFICER

If you have any grievances with respect to the provision of the Services or any portion of this Privacy Policy, please contact us on ravindra.mukund@rupeezen.com.