Privacy Policy - VDFI Services

This policy explains what information VDFI Services PVT LTD (“VDFI Services”, “we”) collects through the VDFI Services mobile app and web portal, why, who it is shared with, how long it is kept, and the choices you have. The service is for registered business correspondents, retailers and distributors who offer banking and payment services to their customers.

1. Information we collect

• Account details — your name, mobile number, email address, date of birth, shop name and address, and your position in your distributor network.
• KYC documents — your PAN, Aadhaar number, bank account details, and the photos or scans of these documents that you upload, as required to verify you before you can offer financial services.
• Transaction records — every AePS, money transfer, payout, bill payment, recharge and wallet transaction you carry out, with its amount, time, status and reference numbers, including the customer details that the transaction requires.
• Location — your device’s location when you carry out an AePS transaction or the daily AePS merchant login. Banks and NPCI require the location of every AePS transaction. We do not track your location in the background.
• Biometric data — fingerprints are captured only through a UIDAI-certified RD (registered device) service. It encrypts each capture on the device, and we pass it on unopened to the bank or authentication service for that one transaction. We do not store fingerprint data.
• Device information — device model, operating system, app version, IP address and a device identifier, used to keep your account secure and to detect fraud. Bluetooth is used only to connect to a receipt printer you choose.

2. How we use it

• To create and verify your account, and to meet KYC and anti-money-laundering obligations.
• To carry out the transactions you request, and to issue receipts and statements.
• To calculate and pay commissions, and to settle wallet balances.
• To sign you in securely, including one-time passwords sent by SMS.
• To prevent, detect and investigate fraud, and to resolve disputes and complaints.
• To comply with law and with requests from banks, NPCI, UIDAI and regulators.

We do not sell your information, and we do not use it for third-party advertising.

3. Who we share it with

• Banks, NPCI and licensed payment and banking partners, to the extent each transaction requires.
• Identity and KYC verification services, to verify the documents you submit.
• SMS providers, only to deliver one-time passwords and service messages.
• Law enforcement agencies, regulators and courts, when the law requires it.

4. Secure storage

Data travels over encrypted (TLS) connections. Passwords and transaction PINs are stored only as one-way hashes. Partner credentials and other secrets are encrypted at rest. Identity numbers such as Aadhaar are shown only masked, and access to KYC records is limited to authorised staff. Uploaded KYC documents are kept in access-controlled storage. They are shared with a verification partner only through a link that expires within minutes.

5. Data retention

We keep your account information for as long as your account is open. When an account is closed, we delete or anonymise the personal information we no longer need. Transaction records and KYC records are kept for the period the law requires — under the Prevention of Money-laundering Act, 2002 and RBI directions, generally five years after the business relationship ends — and then deleted.

6. Your choices and rights

• You can view and update your profile in the app, or ask support to correct it.
• You can ask us to close your account and delete your data: Account & Data Deletion Request.
• You can withdraw consent, for example to location access, in your device settings. Some services, such as AePS, cannot be offered without it.

7. Children

The service is only for adults running a business. We do not knowingly collect information from anyone under 18.

8. Changes

If we change this policy, we will update the date above. Material changes are also announced in the app.

9. Contact

For questions, complaints or requests about your data, contact VDFI Services support: support@vdfiservices.com · 9231098434