Privacy policy.

This privacy policy describes how PayLap("we", "us") collects, uses, stores, and shares your personal information when you use our platform. We designed this policy to be readable rather than legalese — but it is the binding version.

By creating an account or using our services, you consent to the practices described here.

Information you provide

• Identity details (name, date of birth, gender) for KYC compliance.
• Contact details (email, phone, mailing address).
• Identity proofs (PAN, Aadhaar, passport — uploaded during KYC).
• Bank account details for withdrawals.
• Communication you send us (support emails, contact form messages).

Information collected automatically

• Browser, device, and operating system data for analytics and fraud prevention.
• IP address and approximate location.
• Pages visited and actions taken on the platform.

We use the information we collect to:

• Verify your identity and complete KYC compliance.
• Process bookings, payments, and withdrawals on your behalf.
• Provide customer support and respond to your inquiries.
• Detect, prevent, and respond to fraud or platform abuse.
• Send important account, security, and transaction notifications.
• Improve the platform's performance, design, and feature set.

We do not sell your personal information to third parties. We do not use your data to train external advertising platforms or recommendation engines.

We share information only in these specific cases:

• Compliance partners: KYC verification providers, bank reconciliation services, and regulatory filings as required by Indian law.
• Underlying developers: aggregated, non-identifying booking data so developers can plan project execution.
• Legal authorities: when compelled by valid legal process or to protect against imminent harm to people or property.
• Service providers: infrastructure providers (cloud hosting, email delivery, payment processors) under strict data-processing agreements.

We use industry-standard practices to protect your data, including:

• TLS encryption for all data in transit.
• Encryption at rest for sensitive fields like KYC documents and bank details.
• Role-scoped database access with audit logging.
• Manual review of sensitive operations (KYC, payments, withdrawals).
• Regular security reviews and dependency patching.

No system is perfectly secure. If we ever discover a breach affecting you, we will notify you promptly and explain what happened.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and data, subject to legal retention requirements for completed transactions.
• Opt out of non-essential email communications.

To exercise any of these rights, email us at support@paylap.in.

We retain your information for as long as your account is active. After account closure, we may retain transaction records and KYC documents for the period required by Indian financial regulations — typically seven years.

Marketing communications and analytics events are deleted within 24 months of collection unless you have an active investment.

We use only essential cookies — for keeping you logged in, securing your session, and remembering your preferences. We do not use advertising cookies or third-party tracking pixels.

You can disable cookies in your browser, but parts of the platform (especially the investor dashboard) will not function without them.

We may update this policy from time to time. Material changes will be notified to registered users via email and an in-app banner. The updated policy takes effect on the date posted.

For privacy questions or requests, contact support@paylap.in.