Privacy Policy & Information Security Safeguards
Effective Date: October 22, 2026 | Last Updated: October 2026
1. Information We Collect
UtilityPay Technologies India Pvt. Ltd. ("UtilityPay") collects business and personal data strictly necessary to fulfill regulatory compliance, KYC verification, and transaction processing:
- Identity & KYC Details: Business Name, Authorized Signatory Name, Permanent Account Number (PAN), Registered Mobile Number, and Corporate GSTIN.
- Beneficiary Banking Details: Beneficiary Account Holder Name, Bank Account Number, IFSC Code, and designated payment category.
- Transaction Ledger Data: Transaction ID, Timestamp, Bank IMPS Unique Transaction Reference (UTR), Platform Convenience Fee calculation, and IP address.
2. Cardholder Data & RBI Tokenization Compliance
In strict adherence to the Reserve Bank of India (RBI) circular on Card-on-File Tokenization (CoFT):
- UtilityPay NEVER stores card numbers, CVVs, or card PINs on its internal servers.
- All card payment authorizations are tokenized and processed via PCI-DSS Level 1 certified Payment Gateway partners.
- All communication across our infrastructure is encrypted in transit using 256-bit Transport Layer Security (TLS 1.3).
3. Use of Information
We process collected information solely for:
- Facilitating the debit of approved payment cards and routing automated credit disbursements to designated vendors.
- Executing Penny-Drop validation to verify account holder identity and avoid misdirected transfers.
- Fulfilling statutory tax compliance by issuing computer-generated SAC 9971 GST Tax Invoices.
- Preventing financial fraud, detecting credit card cycling, and complying with FIU-IND reporting obligations.
4. Data Retention & Erasure
In accordance with the Prevention of Money Laundering (Maintenance of Records) Rules, transaction records, audit logs, and KYC verification artifacts must be retained for a statutory minimum duration of 5 years from the date of the transaction. Users may request access or updates to their registered account records by writing to our Grievance Officer.
5. Data Protection & Grievance Contact
For inquiries regarding our data handling practices or to report a privacy concern, please contact:
Grievance & Data Privacy Officer: Mr. Alok N. Sharma
Email: privacy@utilitypay.in
Address: Level 6, Cyber Crest Towers, Outer Ring Road, Bellandur, Bengaluru, Karnataka - 560103, India