Privacy Policy

1. Introduction

This Privacy Policy governs how SHANVITH GAURAV SOFTWARE (OPC) PVT LTD ("we," "us," "our," or "Envelope Pay") collects, uses, processes, stores, and protects your personal information when you use our Envelope Pay mobile application and related services.

We are committed to protecting your privacy and ensuring the security of your personal data. This policy complies with applicable Indian laws, including the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using our mobile application, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

We collect information in the following ways:

• Account Information: Name, email address, phone number, business name, PAN, GST number, and bank account details provided during registration.
• KYC Data: Aadhaar number, PAN card, photograph, and other identity documents required for regulatory compliance.
• Transaction Data: Payment amounts, dates, merchant details, transaction IDs, and status of all financial transactions processed through our platform.
• Device & Usage Data: IP address, browser type, operating system, pages visited, time spent, and clickstream data collected automatically.
• Communication Data: Messages, support tickets, emails, and other communications you send us.

3. How We Use Your Information

We use the information we collect to:

• Process and facilitate payments, settlements, and reconciliations
• Verify your identity and comply with KYC/AML regulations as required by RBI
• Provide customer support and respond to your queries
• Send transactional notifications, receipts, and service updates
• Detect and prevent fraud, money laundering, and unauthorised access
• Improve our platform, fix bugs, and develop new features
• Generate anonymised analytics and business insights
• Comply with applicable laws, regulations, and court orders

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Banking Partners: With banks, payment networks (NPCI, Visa, Mastercard), and financial institutions necessary to process your transactions.
• Regulatory Authorities: With RBI, SEBI, Income Tax Department, GSTN, and other government bodies as required by law.
• Service Providers: With trusted vendors (cloud hosting, SMS, email) who process data on our behalf under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or to protect the rights and safety of EnvelopePay and its users.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

5. Data Storage & Security

Your data is stored on secure servers located in India in compliance with applicable data localisation requirements. We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• PCI-DSS compliance for all card data environments
• Multi-factor authentication for all admin access
• Regular security audits and penetration testing
• Role-based access controls and audit logs

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. We also retain data as required by law — for example, transaction records are retained for a minimum of 5 years as mandated by RBI guidelines. After the retention period, data is securely deleted or anonymised.

7. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data, subject to legal retention requirements
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for direct marketing purposes
• Withdraw Consent: Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at support@envelopepay.com. We will respond within 30 days.

8. Cookies & Tracking

We use cookies and similar tracking technologies to improve your experience on our platform. These include:

• Essential Cookies: Required for the platform to function (login sessions, security tokens)
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser. Disabling essential cookies may affect platform functionality.

9. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or requests related to this Privacy Policy, please contact our Data Protection Officer:

• Email: support@envelopepay.com
• Phone: +91 80155 57449
• Address: FORT.Hosur, Plot CP-3 & CP-4, near TVS Academy, Sipcot Phase II Industrial Complex, Hosur, Tamil Nadu 635130, India