KonnectPe Payments Technologies ("KonnectPe", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing services, website, and merchant portal.
By using our services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.
1. Information We Collect
1.1 Information You Provide
We collect information you provide directly to us, including:
- Account registration details (name, email, phone number, password)
- Business information (company name, GST number, PAN, business type)
- Bank account details for settlement purposes
- KYC documents (Aadhaar, PAN card, business registration certificates)
- Communication data (support tickets, emails, chat messages)
- Payment method details (processed through our PCI-DSS certified infrastructure — we do not store full card numbers)
1.2 Automatically Collected Information
When you access our platform, we automatically collect:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, features used, transaction logs)
- Cookies and similar tracking technologies (see our Cookie Policy)
- Location data (city and country level, based on IP address)
1.3 Transaction Data
As a payment processor, we collect and process transaction data including amount, currency, timestamp, payment method type, success/failure status, and associated merchant and customer identifiers. This data is essential for providing our services.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our payment processing services
- Process transactions and effect settlements to your bank account
- Verify your identity and conduct KYC/AML compliance checks
- Communicate with you about transactions, account status, and service updates
- Detect, investigate, and prevent fraudulent transactions and abuse
- Comply with legal and regulatory obligations under RBI guidelines and applicable Indian law
- Analyse usage patterns to improve product features and user experience
- Send promotional communications (with your consent, where required)
3. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contract performance: Processing necessary to provide our payment services
- Legal obligation: Compliance with RBI, PMLA, and other applicable regulations
- Legitimate interests: Fraud prevention, security, and service improvement
- Consent: Marketing communications and optional features
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Banking partners and acquiring banks: Required for transaction processing and settlement
- Payment networks: Visa, Mastercard, NPCI (UPI) for transaction routing
- KYC and compliance providers: For identity verification and AML screening
- Cloud service providers: For secure data storage and infrastructure
- Regulatory authorities: RBI, Financial Intelligence Unit, and law enforcement when legally required
- Fraud prevention partners: Anonymised or pseudonymised data for fraud network analysis
All third-party service providers are contractually bound to handle your data securely and only as directed by us.
5. Data Security
We implement industry-leading security measures including:
- 256-bit AES encryption for data at rest
- TLS 1.3 for all data in transit
- PCI-DSS Level 1 certification for cardholder data handling
- ISO 27001 certified information security management
- Regular penetration testing and vulnerability assessments
- Role-based access controls and multi-factor authentication for staff
- 24/7 security monitoring and incident response procedures
Despite these measures, no system is completely secure. You are responsible for maintaining the confidentiality of your merchant account credentials.
6. Data Retention
We retain your data for as long as your merchant account is active and for seven (7) years thereafter, as required by RBI and tax regulations. Transaction logs are retained for a minimum of ten (10) years for regulatory compliance. You may request deletion of personal data not subject to legal retention obligations by contacting our data protection officer.
7. Your Rights
Subject to applicable law, you have the right to:
- Access a copy of your personal data held by us
- Correct inaccurate or incomplete data
- Request deletion of data no longer required for our legal obligations
- Object to or restrict certain processing activities
- Data portability — receive your data in a machine-readable format
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@konnectpe.com. We will respond within 30 days.
8. Cookies
We use cookies and similar technologies. For detailed information, please see our Cookie Policy.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, contact us immediately and we will delete it.
10. International Transfers
Your data is primarily stored and processed within India. Where data is transferred internationally (e.g., to cloud providers with servers outside India), we ensure adequate protections are in place through standard contractual clauses or equivalent safeguards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our platform at least 30 days before taking effect. Your continued use of our services after changes constitutes acceptance of the revised policy.
12. Contact Us
For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer:
- Email: privacy@konnectpe.com
- Address: KonnectPe Payments Technologies, Mumbai, Maharashtra, India
- Response time: Within 30 business days