Privacy Policy

A. INTRODUCTION

Swacpay Solutions Private Limited ("Bank-Pay", "we", "us", "our") recognizes the importance of privacy and the need to protect personal information of users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Information when you access any of our customer interfaces (collectively, "Sales Channels"), including our website, mobile site, mobile applications, and offline touchpoints such as call centers (together, the "Website").

This Privacy Policy is an integral part of your User Agreement with us. By using or accessing our Website or Sales Channels, you consent to the practices described here. If you do not agree, please do not use our Website or Sales Channels.

For this Privacy Policy:

• (a) "Data Protection Officer (DPO)" means our designated officer responsible for managing privacy and data protection compliance.
• (b) "Personal Information" has the meaning given in Section D below, read with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") and, to the extent notified and applicable, the Digital Personal Data Protection Act, 2023 ("DPDP Act").
• (c) "Website" includes our website(s), mobile site(s), and mobile app(s).

C. TYPES OF PERSONAL INFORMATION WE COLLECT

Depending on your interactions with us, we may collect the following categories of Personal Information:

1. Identification & Contact Data: Name, gender, date of birth/age, email, mobile number, postal address, country/state, government-issued IDs where required by law (e.g., for KYC, BBPS, rail/air travel).
2. Booking & Travel Data: Passenger details of co-travellers, preferences, itinerary, travel history, invoice and ticket details, GST information.
3. Payment & Billing Data: Limited payment instrument details (masked card details/UPI VPA), transaction amount, status, refunds, wallet balance/ledger, and billing history. We do not store full card numbers, CVV, or sensitive authentication data on our servers.
4. Account & Security Data: Username, hashed password, authentication tokens/OTP logs (not the OTP content), device identifiers, and fraud-risk signals.
5. Communications & Support: Queries, claims, feedback, recordings (where call recording is enabled and announced), and correspondence with customer support.
6. Social & Public Data: Information available in public domain or that you share with us via linked social media accounts (as per your settings).
7. Device/Usage & Cookies Data: IP address, device info, OS/browser, app version, crash logs, pages/screens viewed, time spent, referral URLs, and cookie identifiers. See Section G for details.
8. Content You Provide: Files uploaded (e.g., images/docs for KYC, GST), reviews/ratings, answers to surveys, UGC (see Section E).

E. USER-GENERATED CONTENT (UGC) & FEEDBACK

You may post reviews, ratings, Q&A, polls, images, or videos ("UGC"). UGC may be displayed on our Website and on partner or travel-related platforms. Please ensure UGC is accurate, lawful, and non-infringing. We may moderate UGC as per our policies. Participation in feedback requests is optional; you may still receive requests to share feedback after a booking.

G. COOKIES, SDKs & SESSION DATA

We use cookies/SDKs and similar technologies to authenticate users, remember preferences, analyze traffic, and personalize content/ads. Third-party ad/analytics partners may place cookies or pixels to measure campaign effectiveness; data is typically aggregated or pseudonymized. You may control cookies via browser settings; blocking some cookies may impact Website functionality.

Session data (e.g., IP, device, browser, pages visited, timestamps) helps diagnose issues and administer systems and cannot typically identify you directly without additional data.

I. YOUR RIGHTS: ACCESS & PORTABILITY

You may request access to Personal Information we hold about you and information on how it has been used/disclosed in the preceding year, where applicable. Write to our DPO at support@bank-pay.in. A reasonable fee may apply where permitted.

J. CORRECTION & DELETION

You may request correction of inaccurate Personal Information or deletion (subject to legal/regulatory retention). Some fields may be mandatory for active services. Submit requests to support@bank-pay.in from your registered email/number for verification.

K. OPT-OUT OF MARKETING COMMUNICATIONS

You can opt-out of marketing emails/SMS/WhatsApp by using the unsubscribe options in the message or by writing to support@bank-pay.in. Transactional communications (e.g., booking confirmations, refunds) will continue as they are necessary to provide services.

M. SECURITY PRACTICES

We implement reasonable security practices and procedures, including TLS encryption in transit, restricted access, and periodic reviews. Payments are processed via PCI-DSS compliant gateways; we do not store full card details or sensitive authentication data. Despite safeguards, no method of transmission/storage is fully secure; use the Website at your own risk.

O. WITHDRAWAL OF CONSENT

You may withdraw consent by writing to support@bank-pay.in. We will acknowledge within 7 days and act within 30 days, informing you of likely consequences. Withdrawal may impact our ability to provide or continue services (including cancellations). We may continue processing where required or permitted by law (e.g., tax, fraud prevention, legal claims).

Q. JURISDICTION, QUESTIONS & CONTACT

This Privacy Policy is governed by the laws of India. Disputes are subject to the exclusive jurisdiction of courts at Hyderabad, Telangana.

For questions, rights requests, or complaints, contact our Data Protection Officer/Grievance Officer: