Privacy Policy

Last updated: 08 Sep 2026

This Privacy Policy explains how TezExchange ("we", "us", "the Platform") collects, uses, discloses, and protects your personal data when you use our peer-to-peer digital recharge and wallet exchange service. It is intended to reflect the principles of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable IT Act rules on Sensitive Personal Data or Information ("SPDI").

1. Data We Collect

Category	Examples
Account & contact data	Name, email, mobile number, password (hashed), profile photo
KYC / identity data	PAN, Aadhaar number, uploaded ID documents, selfie, bank account & IFSC details, GSTIN
Transaction data	Wallet balance, deposits, withdrawals, buy/sell orders, recharge numbers, settlement records
Device & usage data	IP address, device ID, login logs, browser/app version, FCM push token
Communications	Support tickets, dispute messages, WhatsApp/Telegram contact identifiers (if provided)

2. How We Use Your Data

• To create and administer your account, and verify your identity (KYC/AML compliance);
• To process recharge orders, wallet top-ups, withdrawals, and P2P settlements;
• To detect and prevent fraud, money laundering, and abuse of the Platform;
• To send transactional notifications (OTP, order status, settlement alerts) via SMS, email, WhatsApp, or push notification;
• To respond to support tickets and disputes;
• To comply with legal, regulatory, and law-enforcement requests.

3. Legal Basis for Processing

We process your personal data based on your consent (given at registration and reaffirmed when you agree to these policies), for the performance of our contract with you (processing orders and settlements), and to comply with our legal obligations (KYC/AML record-keeping, tax and audit requirements).

4. Sharing With Third Parties

We share the minimum necessary data with:

• Payment gateway providers — to process wallet top-ups and withdrawals (e.g. UPI/bank transfer processing);
• SMS / WhatsApp / push notification providers — to deliver OTPs and transactional alerts;
• Telecom / recharge API providers — to fulfil recharge orders (only the mobile number and amount required for the specific recharge is shared, not your full KYC profile);
• Regulators and law enforcement — where required by law, court order, or to investigate fraud;
• Professional advisors (auditors, legal counsel) under confidentiality obligations.

We do not sell your personal data to third parties for marketing purposes.

5. Data Retention

We retain account and transaction data for as long as your account is active, and thereafter for the period required by applicable law (typically financial and KYC records are retained for a minimum of 5–8 years under Indian AML/PMLA-aligned recordkeeping practices) or as needed to resolve disputes and enforce our agreements. Where you request deletion of your account, we deactivate the account and retain the underlying transaction/audit records only as required for legal and financial compliance — we do not continue to actively use that data for any other purpose.

6. Your Rights

Subject to applicable law (including the DPDP Act, 2023), you have the right to:

• Access a copy of the personal data we hold about you — use the "Download My Data" option in your Profile to get a machine-readable export;
• Correction of inaccurate or outdated data via your Profile page;
• Erasure / account closure — use "Delete My Account" in your Profile, subject to settling any wallet balance and pending orders first, and subject to our right to retain records required by law;
• Grievance redressal — raise a concern with our Grievance Officer (contact below) or via the in-app Support ticket system;
• Withdraw consent for non-essential communications (e.g. promotional notifications) at any time.

7. Data Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS/TLS), hashed passwords and PINs, restricted internal access to KYC documents, and audit logging of administrative actions. No system is 100% secure; please also protect your own password, transaction PIN, and OTPs, and never share them with anyone claiming to represent TezExchange.

8. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, you may contact our Grievance Officer for any complaints or concerns regarding your personal data:

Grievance Officer
Email: hello@example.com
Or raise a ticket via the in-app Support Center.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or email. Continued use after changes take effect constitutes acceptance of the revised policy.