Privacy, with clarity.

Who this Policy covers

This Policy applies to website visitors, prospective and existing business customers, authorised account users, support contacts and other individuals whose personal data is handled through ZytePe's Services.

Business-customer data

Where a Customer submits personal data about an End Customer, employee, vendor or beneficiary, that Customer is responsible for collecting it lawfully, providing required notices and giving ZytePe accurate instructions. We process such data to provide the requested Services and meet applicable security, legal and Partner requirements.

Partner-led services

For regulated payment, banking, verification or settlement services, a relevant Partner may independently determine why and how certain data is processed. Its own terms and privacy notice may therefore apply in addition to this Policy.

Consent and other permitted processing

Where consent is required, we will seek it through an appropriate notice or affirmative action. Withdrawing consent does not affect processing already carried out lawfully and may limit optional features that depend on that consent.

The information collected depends on your relationship with ZytePe, the selected product, your approved use case and applicable onboarding or risk requirements.

• 01
  Directly from you

  When you enquire, register, complete onboarding, configure the platform, submit a support request or otherwise communicate with us.

• 02
  From your business

  When an employer, Customer or authorised account administrator creates access for you or submits data required for a transaction or workflow.

• 03
  Automatically

  Through cookies, logs, APIs and security tools when you use our website, dashboard, integrations or developer services.

• 04
  From authorised Partners

  Such as banks, payment providers, verification services, fraud-prevention vendors and public or legally permitted business sources.

• Evaluate enquiries and onboard, verify, activate and administer business accounts.
• Provide dashboards, APIs, integrations, payment tools, support and account communications.
• Initiate, route, monitor, report on or reconcile transactions through relevant Partners.
• Verify businesses, authorised users, beneficiaries or submitted details where required.
• Prevent, detect and investigate fraud, misuse, security incidents and prohibited activity.
• Maintain platform performance, troubleshoot problems, analyse feature usage and improve Services.
• Meet contractual, tax, audit, legal, regulatory, network and Partner obligations.
• Send product or marketing communication where permitted, with available opt-out choices.

We do not sell personal data for money. We may share relevant data only where needed for a stated purpose, service delivery, security or legal requirement.

Where service providers process data outside India or use infrastructure in another permitted location, we take steps intended to comply with applicable transfer restrictions and contractual requirements.

You can control non-essential cookies through available consent controls or browser settings. Blocking essential cookies may prevent login, security or other platform functions from working correctly.

Service and security messages may be necessary for account operation. Marketing messages, where sent, will include an available unsubscribe or opt-out method.

We use reasonable technical and organisational measures designed for the nature of the data and Services, which may include:

• Access controlsRole-based access and credential-management practices.
• Data protectionEncryption in transit and at rest where appropriate.
• MonitoringLogging, alerting and security-event review.
• ResilienceBackup, recovery and availability controls appropriate to the service.

No internet transmission or storage system is completely secure. Customers must also use strong access controls, protect API credentials and promptly report suspected compromise.

We retain personal data only for as long as reasonably required for the purpose collected, to provide the Services, maintain transaction and audit records, resolve disputes, enforce agreements, prevent fraud and meet legal, regulatory, tax, network or Partner requirements.

Retention periods vary by data type, product, relationship and applicable requirement. When data is no longer required, we take reasonable steps to delete, anonymise or securely isolate it, subject to lawful retention, fraud-prevention, backup and legal-claim needs.

Closing an account does not always result in immediate deletion of transaction, onboarding or compliance records.

Subject to applicable law and verification of your request, you may have the right to:

We may ask for information to verify your identity and authority. If a business Customer or Partner controls the relevant data, we may direct your request to that entity or assist it in responding.

Children's data

The Services are designed for businesses and are not directed to children. Customers must not submit children's personal data unless it is lawful, necessary for the approved service and supported by any required consent or authorisation.

External links and Partner services

Our website or platform may link to third-party services. Their privacy practices are governed by their own notices, and this Policy does not control their independent processing.

Changes to this Policy

We may update this Policy for legal, product, security or operational changes. The current version and effective date will be posted here. Material changes will be communicated through a reasonable channel where required.