Privacy Policy
This Privacy Policy explains what personal data OniPay collects, why we collect it, and how it is handled.
1. Data We Collect
- Account data: your email address, used to sign in via one-time passcode.
- Identity verification (KYC) data: your full legal name, phone number, Aadhaar number, a photo of your Aadhaar card, and a selfie holding it.
- Transaction data: your buy/sell orders, payout methods, withdrawal requests, and ledger balance.
- Support data: messages you send through the in-app inbox.
- Technical data: session and security logs (e.g. login timestamps) used for fraud prevention and audit purposes.
2. Why We Collect It
- To verify your identity and meet KYC/AML obligations before enabling trading.
- To process and settle your orders and withdrawals.
- To detect and prevent fraud, and to secure your account.
- To respond to support requests and legal or regulatory inquiries.
3. Who Can Access Your Data
KYC documents and personal data are accessible only to authorized OniPay administrators reviewing verification and support requests, via a separate, isolated admin authentication system. Uploaded documents are never served publicly — they can only be retrieved through an authenticated request by the account owner or an authorized admin.
4. How Your Data Is Stored
Account and transaction data is stored in our database. Uploaded Aadhaar and selfie images are currently stored on server-side disk storage outside the public web root, gated behind authentication. Before OniPay handles real funds at scale, document storage should be migrated to an access-controlled, encrypted object store, and this policy updated to reflect that change.
5. Data Retention
We retain KYC and transaction records for as long as your account is active and for a reasonable period afterward, to meet recordkeeping obligations common to money-services and financial platforms and to resolve disputes. You may request deletion of your account data where retention is not otherwise required by applicable law.
6. Your Choices
- You can view your verification status and submitted details from your profile page.
- You can request a copy of your data or ask us to delete it, subject to legal retention requirements, by contacting support.
7. Contact
Questions about this policy or your data can be sent to support@onipay.local.
This page is a general template and does not constitute legal advice. Given that KYC documents and payment proofs are sensitive personal data, this policy should be reviewed alongside your AML policy and applicable data protection law before OniPay handles real funds.