PayLite Privacy Notice
This notice explains how PayLite Financial Services Pvt. Ltd. (“PayLite”, “we”, “us”) collects and uses your digital personal data when you use our wallet, payments, KYC and related services.
1. Who is responsible for your data?
PayLite Financial Services Pvt. Ltd. is the Data Fiduciary for personal data processed through PayLite. This notice is provided under the Digital Personal Data Protection Act, 2023 and applicable rules.
2. Personal data we collect
Identity and KYC
Name, date of birth, PAN, masked Aadhaar details, address, PIN code, KYC status and verification records.
Contact and account
Email address, phone number, account identifiers, authentication records and nominee details you choose to provide.
Payments and transactions
Wallet balance, payment amount, recipient, merchant, category, status, notes and transaction timestamps.
Device and security
IP address, browser or device information, approximate location, login events, fraud signals and consent records.
We collect data directly from you, from your use of PayLite, and from authorised identity, payment, fraud-prevention or regulatory service providers.
3. Why we process your data
| Purpose | Data generally used | Basis |
|---|---|---|
| Create and secure your account | Identity, contact, authentication and device data | Your consent and providing the service you requested |
| Complete KYC and meet legal duties | Identity, PAN, masked Aadhaar, address and verification results | Your consent and compliance with applicable law |
| Process wallet payments and transfers | Account, recipient and transaction data | Providing the service you requested |
| Prevent fraud and protect PayLite | Device, login, location and transaction-risk signals | Specified legitimate uses and legal obligations, where applicable |
| Send alerts and service messages | Email, phone and transaction data | Your consent or messages necessary to provide the service |
| Marketing and product offers | Contact details and communication preferences | Your optional consent |
Where processing is based on consent, you may refuse optional processing or withdraw consent later. Withdrawal does not invalidate processing already lawfully completed, and essential services may be unavailable where required data is not provided.
4. Sharing, international processing and retention
We disclose only the data reasonably required to payment networks and banks, KYC and identity-verification providers, cloud and security providers, professional advisers, regulators, law-enforcement bodies when legally required, and another entity involved in a lawful corporate restructuring. Our processors must act only on documented instructions and protect the data.
If personal data is processed outside India, we apply contractual and technical safeguards and comply with any transfer restriction notified by the Central Government.
We retain personal data only for as long as needed for the stated purpose, to provide your account, resolve disputes, prevent fraud, and satisfy financial, tax or regulatory record-keeping duties. When retention is no longer necessary, we erase or anonymise the data unless the law requires continued retention.
5. Security and breach response
We use reasonable technical and organisational safeguards, including access controls, encryption where appropriate, monitoring, secure development practices and processor oversight. If a personal-data breach is likely to affect you, we will notify affected Data Principals and the Data Protection Board as required by applicable law and rules.
6. Children’s personal data
PayLite is intended for people aged 18 or older. We do not knowingly open accounts for children. If processing a child’s data becomes necessary, we will obtain verifiable consent from a parent or lawful guardian and will not undertake tracking, behavioural monitoring or targeted advertising directed at children, except where legally permitted.
7. Your rights and choices
- Access
Ask for a summary of your personal data, processing activities and the identities of other Data Fiduciaries or processors with whom it has been shared, as applicable.
- Correction and completion
Correct inaccurate or misleading personal data and complete data that is incomplete.
- Erasure
Request deletion of personal data that is no longer necessary, unless retention is required by law or for another lawful purpose.
- Withdraw consent
Withdraw consent as easily as it was given. We will stop the affected processing unless another lawful ground requires it.
- Grievance redressal
Raise a grievance with PayLite and, after exhausting our grievance process, approach the Data Protection Board of India as permitted by law.
- Nomination
Nominate another individual to exercise your rights in the event of death or incapacity.
8. Contact and grievance redressal
For privacy questions or a grievance, contact PayLite’s Data Protection and Grievance Office at dpo@paylitefs.com. General support is available at support@paylitefs.com.
Please include your registered email address and enough information for us to understand the request. Do not send passwords, OTPs or full identity-document numbers by email. We may verify your identity before acting on a request.
9. Updates to this notice
We may update this notice when our services or legal obligations change. Material changes will be communicated through PayLite or your registered contact details, and fresh consent will be requested where required.
10. Key service terms
You must provide accurate information, keep credentials and OTPs confidential, and use PayLite only for lawful transactions. Transactions may be delayed or rejected for security, compliance, insufficient balance or service-availability reasons. Applicable charges and transaction details are shown before confirmation. Contact support promptly if you suspect unauthorised use.