1. Who we are
This Privacy Policy applies to Swipepy Technologies Pvt. Ltd. ("Swipepy", "we", "us"), operator of the Swipepy website and transfer service (the "Service"). By using the Service, you agree to the collection and use of information as described here.
2. Information we collect
We collect information you provide directly, and some information automatically:
- Account & contact details — name, mobile number, email address, and billing address, when you create an account or start a transfer.
- Transaction details — recipient bank name, account number, IFSC/routing code, transfer amount, and card details (card number, expiry, CVV, cardholder name), tokenised and processed via our banking and payment partners.
- Verification data — one-time passcodes (OTP) sent to your mobile number for login and transaction authorisation.
- Device & usage data — IP address, browser type, device type, operating system, approximate location (city/region), and pages visited, collected automatically for fraud prevention and analytics.
- Session data — stored locally in your browser (localStorage) to keep you signed in and remember an in-progress transfer.
3. How we use your information
- To create and authenticate your account, and to process transfers you initiate.
- To send OTPs and transactional notifications via SMS and email.
- To detect and prevent fraud, and to comply with RBI and other applicable regulatory requirements.
- To provide customer support and respond to your requests.
- To improve the Service through aggregated, non-identifying analytics.
4. How your information is shared
We do not sell your personal data. We share it only with:
- Banking & payment partners — RBI-regulated banks and payment processors, to settle your transfer.
- Service providers — infrastructure, database, authentication, and SMS-delivery providers who process data on our behalf under contract, strictly to operate the Service.
- Legal & compliance — when required by law, court order, or regulatory request.
5. Data security
We use 256-bit TLS encryption in transit, tokenise card details, and operate within PCI-DSS scope for payment data. No method of transmission or storage is 100% secure, and we continually work to improve our safeguards.
6. Data retention
We retain transaction records for as long as required under applicable financial regulations, and account data for as long as your account remains active plus a reasonable period afterward, unless a longer period is required by law.
7. Your rights
You may request access to, correction of, or deletion of your personal data, subject to our regulatory record-keeping obligations, by contacting us at . You may also close your account at any time by contacting support.
8. Cookies & local storage
We use browser localStorage to keep you signed in and to remember in-progress transfers on your device. We do not use third-party advertising cookies.
9. Children's privacy
The Service is not directed at individuals under 18. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
11. Contact us
Questions about this policy? Email or write to us at .