Privacy Policy

1. Introduction & Commitment to Privacy

RupiyaX ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your operational and financial data. As a B2B payout technology provider, we process sensitive data strictly to facilitate your programmatic financial instructions.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, utilize our routing APIs, or interact with our dashboard applications (collectively, the "Platform"). Please read this Privacy Policy carefully to understand our strict data governance standards.

2. Information We Collect

To provide our specialized technology services, we collect various classes of information, which may include:

• Business & KYC Identity Data: Corporate entity names, registration documents, tax identification numbers, and authorized director details required for legally mandated Know Your Business (KYB) and Anti-Money Laundering (AML) compliance.
• Financial & Transactional Data: Banking details, routing numbers, beneficiary account information, virtual account ledger balances, and individual transaction metadata (amounts, timestamps, payment states) necessary to execute API instructions.
• Technical & Usage Data: IP addresses, browser types, API payload headers, webhook delivery metrics, and dashboard interaction logs. We use this data to prevent DDoS attacks, monitor platform health, and optimize routing latency.
• Communication Data: Records of your interactions with our enterprise support team, including emails, technical support tickets, and Slack channel logs.

3. How We Use Your Information

We operate on the principle of data minimization. Your information is processed exclusively for the following transparent purposes:

• Core Service Delivery: To automatically parse, validate, and route your payout instructions to our underlying banking partners.
• Security & Fraud Prevention: To monitor transactions for anomalous behaviors, prevent account takeovers, and dynamically block suspicious API payloads.
• Legal & Regulatory Compliance: To satisfy mandatory statutory reporting, record-keeping requirements, and systemic AML checks enforced by government bodies and financial regulators.
• Platform Analytics: To anonymize and aggregate routing success rates to improve our collective banking network efficiencies.

4. Data Sharing & Disclosure

RupiyaX never sells, rents, or monetizes your data. We strictly share data only under the following necessary circumstances:

• Authorized Banking Partners: We transmit exact transactional payload data to the specific partner banks required to physically execute your payout instructions.
• Verified Service Providers: We utilize enterprise-grade cloud infrastructure (e.g., AWS, GCP) and secure identity verification vendors. These providers are legally bound by strict data processing agreements matching our confidentiality standards.
• Legal Obligations: We will disclose information if compelled by a court order, subpoena, or active investigation by law enforcement or financial regulatory authorities regarding money laundering, fraud, or illicit activities.

5. Security Standards & Data Encryption

Protecting your pipeline is our highest priority. We deploy structural and systematic security measures including:

• End-to-end TLS 1.3 encryption for all data in transit.
• AES-256 military-grade encryption for all personally identifiable information (PII) and banking data at rest.
• Strict Role-Based Access Control (RBAC) isolating production transactional databases from our internal network.
• Continuous automated vulnerability scanning and third-party penetration testing.

6. Data Retention Period

We retain your personal and transactional information only for as long as is necessary to fulfill the operational purposes outlined in this Privacy Policy, unless a longer retention period is mandated by financial compliance laws (typically 5-7 years for transactional settlement ledgers and KYC verification documents to satisfy statutory audits).

7. Your Privacy Rights

Depending on your jurisdiction, you possess specific operational rights regarding your data:

• Right to Access: You may request a copy of the metadata we hold regarding your corporate entity.
• Right to Rectification: You may request corrections to inaccurate or incomplete business profile data.
• Right to Erasure (The Right to be Forgotten): You may request deletion of your data, provided your account is closed and this request does not conflict with mandatory financial record-keeping laws.

8. Use of Cookies

Our dashboard utilizes essential, session-based cookies strictly necessary for authenticating your secure login state and preventing Cross-Site Request Forgery (CSRF). We do not deploy third-party tracking pixels or marketing cookies that aggregate your behavior across other web properties.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in global compliance standards or technological upgrades. Material changes will be communicated via your registered administrative email and a persistent notification within your dashboard.

10. Contact Information

If you have questions, concerns, or requests relating to your data privacy, our Data Protection Officer (DPO) can be reached at: