This Privacy Policy explains how PINTOOF LEGAL AND TECHNOLOGICAL PRIVATE LIMITED ("Pintoofpay", "we", "us") — operator of the Pintoofpay closed-wallet utility platform, registered office Bhopal, Madhya Pradesh - 462038, India — handles your information. We follow a data-minimisation approach and process personal data only as required to deliver services and to comply with applicable law.
1. Information We Collect
We collect information that you provide directly and information generated through your use of the platform:
- Identity & KYC data: full name, date of birth, mobile number, email address, address, and KYC document details as required under RBI prepaid payment instrument guidelines.
- Wallet & transaction data: wallet ID, balance, payee identifiers, QR scans, bill payments, and passbook records maintained as a double-entry ledger.
- Device & technical data: device model, operating system, app version, IP address, and coarse location used for fraud detection and session security.
- Support data: messages you send through the contact form or support mailbox.
2. How We Use Your Information
- To create, verify, and maintain your account and wallet.
- To process transfers, QR payments, BBPS bill payments, and settlements with MPIN authorisation.
- To generate digital passbook statements and transaction receipts.
- To detect, prevent, and investigate fraud, abuse, and money-laundering activity.
- To respond to enquiries and resolve grievances within 24-48 hours.
- To meet legal, regulatory, and audit obligations.
3. Sharing & Disclosure
We do not sell your personal data. We share limited data only with: (a) RBI-authorized payment aggregators and banking partners that process your transactions; (b) BBPS billers and operators required to complete a payment you initiate; (c) KYC verification agencies and regulators such as the Reserve Bank of India where required by law; (d) law enforcement agencies under a lawful written request; and (e) FormSubmit, which transmits contact-form fields to our support email so we can respond to your enquiry. FormSubmit processes those fields under its privacy terms. Do not send passwords, OTPs, or full payment credentials in the form.
4. Data Security
All data in transit and at rest is protected using 256-bit bank-grade encryption. Access to production systems is restricted by role-based controls and multi-factor authentication, and every transfer is protected by MPIN verification and idempotent, atomic ledger writes. Our Pintoof Shield monitoring layer continuously scans for anomalous behaviour and blocks suspicious payment attempts in real time.
5. Data Retention
We retain KYC and transaction records for the period mandated by applicable RBI and Prevention of Money Laundering Act rules, and no longer than necessary for the purposes described here. When data is no longer required, it is securely deleted or irreversibly anonymised.
6. Your Rights
You may at any time: access and review your personal data through the digital passbook and profile screens; request correction of inaccurate details; withdraw consent for optional communications; request account deletion subject to statutory record-keeping requirements; and export your transaction ledger as a PDF statement. To exercise any right, write to support@pintoofpay.in.
7. Cookies & Similar Technologies
Our website uses strictly necessary cookies to maintain session integrity and remember basic preferences. We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings; disabling them may affect certain interactive features such as the fee savings calculator session state.
8. Children's Privacy
Pintoofpay is intended for adults aged 18 years and above. We do not knowingly collect data from minors. If we learn that a minor has provided personal data, we will take prompt steps to delete it.
9. Third-Party Links
The platform may contain links to the Google Play Store or partner websites. Their privacy practices are governed by their own policies, and we encourage you to review them before sharing any information.
10. Support & Data Protection Contact
For questions or complaints about this Privacy Policy or the processing of your personal data, contact our Support Head (Grievance Officer) at support@pintoofpay.in. Grievances are resolved within 24-48 hours, and in all cases within the timelines prescribed by the Information Technology Act, 2000 and applicable data protection rules.
11. Policy Updates
We may update this Privacy Policy to reflect changes in technology, law, or our services. The "Last updated" date at the top of this page indicates the latest revision. Material changes will be announced in the application before they become effective.