Introduction

This Privacy Policy describes how Afola Private Limited and its affiliates (collectively “Open Pay”, “we”, “our”, “us”) collect, use, share, protect, or otherwise process your information/personal data through our mobile application and website Open Pay (hereinafter referred to as the “Platform”). By visiting or using this Platform, providing your information, or availing any product/service offered on the Platform, you expressly agree to be bound by the terms and conditions of this Privacy Policy, the Terms of Use, and the applicable service/product terms and conditions.

Collection

We collect your personal data when you use our Platform, services, or otherwise interact with us. Some of the information we may collect includes:

• Personal details such as name, date of birth, address, telephone/mobile number, email ID, etc.
• Sensitive personal data with your consent such as payment details, KYC documents or biometric information (if applicable).
• Behavioral and transactional data based on your activity on the Platform including recharge activity, utility bill payments, wallet balance, refund status, and device information.

Usage

We use your personal data for purposes such as:

1. Providing, operating, and enhancing our services.
2. Processing recharges, bill payments, wallet settlements, and refunds.
3. Resolving disputes and troubleshooting issues.
4. Communicating service updates and notifications.
5. Conducting marketing research and surveys (only with user consent).
6. Preventing fraud and ensuring compliance with applicable laws.

Sharing

We may share your personal data with:

• Our affiliates and group entities for providing services.
• Third parties such as recharge partners, BBPS, payment processors, and law enforcement agencies.
• Identity verification agencies for KYC and authentication.
• Other parties as required by law or for protecting rights and safety.

We do not sell or rent your personal data to any third party.

Security Precautions

We adopt reasonable security practices including encryption technologies and multi-layer security systems to protect your personal data. However, data transmission over the internet cannot be guaranteed as completely secure. You are responsible for safeguarding your account login credentials.

Data Deletion and Retention

You may delete your account through the Platform settings or by contacting us.
Certain data may continue to be retained as necessary for:

• Legal and regulatory compliance
• Fraud prevention and dispute resolution
• Accounting and auditing requirements
• Business and transactional record purposes

Your Rights

You may access, rectify, and update your personal data through functionalities available on the Platform. You may also request:

• Account deletion
• Withdrawal of consent
• Review of stored data

However, withdrawal of consent may impact service availability.

Consent

By using the Platform, you consent to the collection, storage, processing, and sharing of your data as outlined in this Privacy Policy. You may withdraw consent by contacting the Grievance Officer, but withdrawal may affect service availability.

Grievance Officer