🔒 Your privacy matters to us. This Privacy Policy explains how Virtual Recharge Hub Pvt. Ltd. collects, uses, stores, and protects your personal information when you use our platform or services.
Section 01
Introduction
Virtual Recharge Hub Pvt. Ltd. ("we", "us", "our") is committed to protecting your personal data in accordance with the Information Technology Act 2000 (IT Act), the IT (Reasonable Security Practices) Rules 2011, and all applicable Indian data protection regulations including the Digital Personal Data Protection Act 2023 (DPDPA) as it comes into force.
This Policy applies to all data collected through virtualrechargehub.in, our mobile apps, API integrations, contact forms, registration processes, and any interaction with our team. By using our platform, you consent to the collection and use of your data as described herein.
Section 02
Data We Collect
| Category | Examples | Why We Collect It |
|---|
| Identity & KYC | Name, DOB, PAN, Aadhaar (masked), photo ID | Regulatory KYC compliance |
| Contact Details | Mobile, email, postal address | Account management, communication |
| Business Details | Shop name, GST number, business type | Partner onboarding, invoicing |
| Financial Data | Bank account, wallet balance, transaction history | Payments, settlements, reconciliation |
| Device & Usage Data | IP address, browser, device ID, pages visited | Security, fraud prevention, analytics |
| Transaction Data | Recharge numbers, operator, amount, timestamp | Service delivery, dispute resolution |
| Communication Data | Support tickets, emails, chat logs | Customer support, quality assurance |
We do not collect biometric data (other than for AEPS authentication which is processed directly by NPCI/UIDAI and not stored by us), political views, religious beliefs, or any other sensitive personal data beyond what is required for KYC.
Section 03
How We Collect Your Data
- Registration forms — when you sign up as a retailer, distributor, or partner;
- KYC submission — documents uploaded during verification;
- Transactions — data generated each time you use our services;
- Automated technologies — cookies, log files, and analytics tools on our website and app;
- Customer support — when you call, email, or chat with us;
- Third parties — from payment gateways, telecom operators, or public business registries where relevant.
Section 04
How We Use Your Data
- To process your transactions and deliver recharge/bill payment services;
- To manage your account, wallet, and commission payouts;
- To comply with KYC, AML, and other regulatory requirements under Indian law;
- To verify your identity and prevent fraud and unauthorised access;
- To improve our platform through usage analytics and error tracking;
- To communicate service updates, maintenance notices, and important alerts;
- To send promotional communications (only with your consent; you can opt out anytime);
- To resolve disputes, complaints, and support queries.
Section 05
Data Sharing
We do not sell or rent your data. We may share it with:
- Telecom operators & service providers — to complete your recharge or bill payment transactions;
- Banks & payment processors — for wallet loading, settlement, and AEPS/DMR processing;
- NPCI / UIDAI — for AePS authentication (no biometric data is stored by us);
- Technology service providers — cloud hosting, SMS gateway, analytics tools — all under data processing agreements;
- Regulatory authorities — RBI, TRAI, income tax, or law enforcement as legally required;
- Business successors — in the event of a merger or acquisition, with equivalent data protections.
We require all third-party processors to handle your data under strict confidentiality and security obligations equivalent to ours.
Section 06
KYC & Regulatory Compliance
As a financial services platform operating under RBI guidelines and PMLA (Prevention of Money Laundering Act), we are legally required to collect and verify KYC documents for all registered users. This is a statutory obligation and cannot be waived.
KYC data is stored securely, accessed only by authorised compliance personnel, and retained for the legally mandated period of 5 years from account closure or as otherwise required by law.
Section 07
Data Retention
- KYC & financial records: 5–7 years as mandated under PMLA and Indian tax law;
- Transaction logs: 5 years from the date of transaction;
- Account data: Duration of account + 2 years after closure;
- Marketing consent records: Until withdrawal + 1 year;
- Website usage data: 26 months (standard analytics period).
After retention periods expire, data is securely deleted or anonymised.
Section 08
Data Security
We implement industry-standard security measures to protect your data:
- 256-bit SSL/TLS encryption for all data in transit;
- AES-256 encryption for sensitive data at rest;
- Two-factor authentication (OTP/TOTP) for platform access;
- Regular penetration testing and security audits;
- Strict role-based access controls — only authorised personnel can access sensitive data;
- 24×7 transaction monitoring for fraud detection.
In the event of a data breach affecting your personal information, we will notify you within 72 hours and report to competent authorities as required.
Section 09
Cookies & Tracking
Our website uses the following types of cookies:
- Essential cookies — Required for login sessions, security, and platform functionality;
- Analytics cookies — To understand site traffic and user behaviour (e.g., Google Analytics with IP anonymisation);
- Preference cookies — To remember your language or display preferences.
You can manage cookies through your browser settings. Disabling essential cookies may affect platform functionality. We do not use cookies for cross-site behavioural advertising.
Section 10
Your Rights
Under applicable Indian data protection law, you have the right to:
- Access — Request a copy of personal data we hold about you;
- Correction — Request correction of inaccurate data;
- Deletion — Request deletion (subject to regulatory retention obligations);
- Withdraw Consent — Opt out of marketing communications at any time;
- Grievance Redressal — Lodge a complaint with our Data Protection Officer.
To exercise any right, email us at privacy@virtualrechargehub.in. We will respond within 30 days.
Section 11
Third-Party Links
Our platform may contain links to third-party websites or operator portals. These have their own privacy policies, and we accept no responsibility for their practices. We encourage you to review the privacy policy of any third-party site you visit.
Section 12
Children's Privacy
Our platform is intended for users aged 18 and above. We do not knowingly collect data from minors. If we become aware that a minor has registered, the account will be immediately suspended and data deleted. Please contact us at privacy@virtualrechargehub.in if you believe a minor has registered.
Section 13
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified to registered users via SMS or email at least 7 days before the change takes effect. Continued use of the platform after changes are posted constitutes acceptance of the revised Policy.