Privacy Policy

NixaFin collects information to provide a secure and efficient payment processing service. This information can be categorized as follows:

We use personal information to:

• Operate Payment Processing Product: Facilitate and authenticate payment transactions, provide related services such as dispute resolution, fraud prevention, and security.
• Provide Products and Services: Deliver the products, services, programs, offers, or information You request and related customer service.
• Analytics and Modelling: Understand how the product is used to create business intelligence and insights.
• Product Development: Generate de-personalized and anonymized datasets used to enhance product development.
• Business Operations: Support everyday business operations such as account management, quality control, website administration, business continuity, disaster recovery, security, fraud prevention, corporate governance, and legal compliance.
• Data Security: Ensure the security of NixaFin's systems, detect unusual activity, and protect against unauthorized access.
• Statistical Analyses: Aggregate information to perform statistical analysis of User behaviour and characteristics to measure interest in Our Products and Services.
• Recruitment: Evaluate job applicants and make informed hiring decisions.
• International Transfers: Transfer personal information to and process it in India and other countries as necessary. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement for international transfer.

We adhere to the principle of data minimization. This means We only collect the minimum amount of personal data necessary to achieve the purposes outlined in this Privacy Policy. We do not collect more data than is required for these purposes.

NixaFin does not sell, trade, or rent Your personal information to third parties. However, We may share Your personal information with:

• Service Providers: Third-party service providers (including financial institutions such as banks) performing business-related functions such as processing payments, fraud prevention, data storage, data analysis, IT services, cloud communication/telecommunication service, customer service, and email delivery. These providers have access to Your personal information only to perform these tasks on Our behalf and are obligated not to disclose or use it for any other purpose.
• Compliance with Laws and Law Enforcement: Government or law enforcement officials or private parties as required under Applicable Laws. This includes responding to subpoenas, court orders, or other legal processes.
• Protecting Rights and Interests: Necessary to investigate, prevent, or take action regarding potential violations of Our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of Our assets, Your personal information may be transferred as part of that transaction. We will provide notice before Your personal information is transferred and becomes subject to a different privacy policy.
• With Your Consent: Any third party not covered by the categories outlined above, provided You have granted Us explicit permission or where a contractual arrangement necessitates such transfer to fulfil contractual obligations.

By using NixaFin Platform or providing Us with Your personal information, You consent to Our collection, use, and sharing of Your personal information as described in this Privacy Policy.

By giving Your consent hereunder, You understand that We may share and/or transfer Your Personal Data to any third party in India or outside India, including but not limited to risk assessment/mitigation companies for purposes such as risk assessment, analysis, security, fraud prevention, fraud screening, and quality control. We may share Your Personal Data to Our group companies, affiliates, corporate partners or authorized personnel’s for purposes consistent with this Policy in compliance with Applicable Laws. You also agree that NixaFin reserves the right to make Your details available to its partner banks/ financial institutions or any such other third party, as the case may be, and that You may be contacted by the partners and/or the third party for information through email, telephone, WhatsApp and/or SMS.

We recognize the importance of Your right to control the usage of Your Personal Data. We provide You with multiple ways to exercise Your rights, including:

• Right to Access: Request and obtain information about the processing activities of Your Personal Data.
• Right to Rectification: Correct, complete, or update Your Personal Data.
• Right to Erasure: Request deletion or removal of Personal Data that is no longer necessary for the purposes for which it was collected unless retention is necessary for compliance with legal and regulatory obligations.
• Right to Restriction of Processing: Request the restriction of processing Your Personal Data under certain circumstances.
• Right to Data Portability: Receive a copy of Your Personal Data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
• Right to Object: Object to the processing of Your Personal Data based on legitimate interests and direct marketing.
• Right to Withdraw Consent: Withdraw Your consent for processing Your information at any time, though this may affect Our ability to provide some or all of the NixaFin Platform’s offerings.
• Right to Lodge a Complaint: Lodge a complaint with the relevant supervisory authority if You believe Your rights have been violated.

To exercise these rights, please contact Us at privacy@nixafin.ai.

Ensuring the confidentiality, integrity, and availability of Your data is Our top priority. We employ advanced encryption standards, applied cryptography, and a security framework for data in transit, data in use, and data at rest using a zero-trust architecture. Measures include:

• Data in Transit: Use of TLS 1.3 for point-to-point security and End-to-End Encryption (E2EE) with RSA encryption key length 2048 bits.
• Data at Rest: Envelope-based symmetric encryption at the application layer using AES with a key strength of 256 bits and the GCM algorithm.

As no data transmission over the Internet or wireless network can be guaranteed as completely secure, You are responsible for maintaining the confidentiality of Your passwords and account information.

We retain Your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal and regulatory obligations. We will retain and use Your personal information to the extent necessary to resolve disputes and enforce Our legal agreements and policies.

We do not knowingly collect personal data from children under the age of 18. If We become aware that We have inadvertently received personal data from a child under the age of 18, We will delete such information from Our records.

Our website may contain links to third-party websites. These third parties and their websites are governed by their terms and conditions. We do not make any representations regarding the availability and performance of third parties or their websites and are not responsible for their content, terms of use, privacy policies, or practices.

NixaFin is based in India and has affiliates and service providers located outside of India as well. Your Personal Data may be transferred to and maintained outside of Your country, which may not have similar privacy or data protection laws. By using NixaFin Platform, You acknowledge that Your information might be shared with global entities governed by their respective laws and policies.

Our Privacy Policy is subject to change from time to time. If in Our opinion, the changes are material in nature, We will post an alert on Our website. However, We suggest that You review this Privacy Policy periodically for keeping abreast with the latest changes. It is to be noted that the changes in the policy will become applicable with the immediate effect. If You do not wish to permit changes in Our use of Your Personal Information, You must notify Us promptly. Your continued use of NixaFin Platform after any change/ amendment to this Privacy Policy shall indicate Your acknowledgement of such changes and consent to be bound by the revised Privacy Policy.

The current version of privacy Policy can be accessed from the link on Our homepage or at the bottom of Our website pages.

Your use of NixaFin Platform will be governed by and construed in accordance with the laws of India. You consent to the exclusive jurisdiction of the competent courts/tribunals located in Bengaluru, India for resolving any disputes, legal action or proceedings resulting from Your use of NixaFin Platform and hereby waive any objections to such jurisdiction.

Furthermore, You acknowledge that We are not liable for any interception of information transmitted over the internet and release Us from any claims arising from such interception or unauthorized use or access to Your information.

If You have any concerns or questions about this Privacy Policy or if You need any assistance in exercising Your privacy rights, please contact Our Data Protection Officer at the co-ordinates mentioned below. Please note, If You contact Us to provide feedback, register a complaint, or ask any question, We will record any Personal Information and other content that You provide in Your communication, so that We can effectively respond to Your query / concern / complaint.

For End-Customers (individuals transacting with Business Users), please refer to the privacy policy of the Business User for information regarding their privacy practices, choices, and controls, or contact the Business User directly.