Your Data Protection

Privacy Policy

How we collect, use, and protect your information

Last Updated: January 2025 | Effective Date: January 2025

πŸ“‹

Introduction

Section 1

SmartFuelPay ("Company", "we", "us", "our") operates as a digital payment platform for fuel and energy transactions in India. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in accordance with the Information Technology Act, 2000, Rules thereunder, RBI guidelines, and applicable data protection laws.

πŸ“Š

Data We Collect

Section 2

Personal Information

  • β€’Identity Information: Full name, age, gender, national identification (Aadhaar, PAN, Driving License), passport details
  • β€’Contact Information: Email address, phone number, postal address, city, state, PIN code
  • β€’Account Information: Username, password, security questions, authentication credentials
  • β€’Payment Information: Bank account details, card information (tokenized), payment method preferences (collected via encrypted channels only)

Transaction Data

  • β€’Transactional history and logs
  • β€’Amount, date, time, and location of transactions
  • β€’Fuel station and pump details
  • β€’Discount Card and Corporate Card usage data
  • β€’Merchant information and details

Technical Data

  • β€’IP address, browser type, device information
  • β€’Operating system and hardware details
  • β€’NFC/BLE connectivity logs
  • β€’Location data (GPS coordinates, if enabled)
  • β€’Cookies and similar tracking technologies

Usage Data

  • β€’Features accessed, pages visited, time spent
  • β€’Search queries and interactions
  • β€’Error logs and performance metrics
  • β€’Communication preferences
πŸ”„

How We Use Your Data

Section 4

βœ“Service Delivery: Processing transactions, managing accounts, settling payments
βœ“Compliance & Verification: KYC/AML compliance, identity verification, statutory reporting
βœ“Security & Fraud Prevention: Detecting unauthorized access, preventing fraud, protecting against cyber threats
βœ“Service Improvement: Analytics, user research, platform optimization
βœ“Communication: Transaction notifications, service updates, support responses
βœ“Marketing: Promotional offers, loyalty programs (only with explicit consent)
βœ“Legal Obligations: Responding to legal notices, regulatory inquiries, compliance reporting
πŸ“…

Data Retention

Section 5

βœ“Transaction Records: Minimum 5 years (as per RBI guidelines)
βœ“KYC Documentation: Lifetime (as per NISM guidelines)
βœ“Account Information: Duration of account + 3 years post-closure
βœ“Technical Logs: 90 days to 1 year depending on type
βœ“Marketing Data: Until consent is withdrawn
🀝

Data Sharing & Disclosure

Section 6

βœ“Service Providers: Payment processors, banks, card networks (under contractual obligations)
βœ“Regulatory Bodies: RBI, NISM, Financial Intelligence Unit (FIU), and law enforcement
βœ“Business Partners: Fuel merchants, corporate clients (with anonymization where possible)
βœ“Legal Compliance: When required by law or court order

We do NOT sell your personal data to third parties for marketing purposes.

πŸ”

Data Security

Section 7

βœ“Encryption: AES-256 encryption for data at rest, TLS 1.2+ for data in transit
βœ“PCI-DSS Compliance: Payment card data handled per PCI DSS standards
βœ“Access Controls: Role-based access, multi-factor authentication (MFA)
βœ“Regular Audits: Security assessments, penetration testing, vulnerability management
βœ“Incident Response: 24/7 monitoring, incident response protocols
πŸ‘€

Your Rights & Choices

Section 8

βœ“Right to Access: Request a copy of your personal data
βœ“Right to Rectification: Correct inaccurate or incomplete data
βœ“Right to Erasure: Request deletion of data (subject to legal obligations)
βœ“Right to Data Portability: Obtain data in portable format
βœ“Right to Withdraw Consent: Opt-out of marketing communications and non-essential processing
βœ“Right to Lodge Complaint: File a complaint with Data Protection Authority if applicable
πŸͺ

Cookies & Tracking

We use cookies for authentication, security, analytics, and user preferences. You can control cookies through your browser settings. Disabling cookies may affect platform functionality.

πŸ‘Ά

Children's Privacy

Our services are not directed to individuals under 18 years. If we become aware of personal data from minors, we'll delete it promptly.

πŸ“§

Get in Touch

Address: Chennai, Tamil Nadu, India - 600126

⚠️

Grievance Redressal

For IT Act, 2000 Section 79 compliance, our Grievance Officer:

Name

Data Protection Officer

Email

grievance@smartfuelpay.com

Response Time

30 days from receipt