NagadPay.com, operated by Across Power EV Pvt. Ltd., is a comprehensive digital AEPS (Aadhaar Enabled Payment System) portal that enables secure financial transactions for millions of users across India.

This policy applies to:

• All users of NagadPay.com website and mobile applications
• AEPS service providers and business partners
• Customer support and service interactions
• Marketing communications and promotional activities

Personal Information

• Basic Details: Full Name, Mobile Number, Email Address, Date of Birth
• Identity Information: Aadhaar Number (encrypted/masked), PAN Card details
• Contact Information: Residential Address, Business Address, PIN Code
• Financial Information: Bank Account Details, Transaction History, Credit Score (if applicable)

Biometric & Technical Data

• Biometric Data: Fingerprint scans, Iris scans (processed through UIDAI)
• Device Information: Device ID, IMEI, Operating System, App Version
• Location Data: GPS coordinates, IP Address, Network Information
• Usage Analytics: App usage patterns, feature utilization, session duration

Transaction Information

Primary Services

• AEPS Transactions: Processing cash withdrawals, balance inquiries, and mini statements
• Identity Verification: KYC compliance and customer authentication through UIDAI
• Account Management: User registration, profile updates, and service customization
• Customer Support: Resolving queries, technical assistance, and dispute resolution

Security & Compliance

• Fraud Prevention: Real-time transaction monitoring and risk assessment
• Regulatory Compliance: Meeting RBI, NPCI, and UIDAI requirements
• Audit & Reporting: Maintaining transaction records for regulatory authorities
• System Security: Protecting against unauthorized access and cyber threats

Authorized Sharing

• NPCI (National Payments Corporation): For AEPS transaction processing and settlement
• UIDAI (Unique Identification Authority): For Aadhaar authentication and verification
• Partner Banks: For account verification and transaction processing
• Payment Processors: For secure payment processing and settlement
• Technology Partners: For system maintenance and security (under strict NDAs)

Legal Disclosure

• Court orders, legal processes, and law enforcement requests
• Government investigations and regulatory inquiries
• Prevention of fraud, money laundering, or other criminal activities
• Protection of our rights, property, and safety of users

Technical Safeguards

• End-to-End Encryption: All data transmission secured with AES-256 encryption
• Secure Data Centers: Data hosted in Tier-3 certified facilities with 24/7 monitoring
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Quarterly security assessments and penetration testing
• Data Backup: Automated, encrypted backups with geographic redundancy

Operational Security

• Employee Training: Regular security awareness and data protection training
• Incident Response: 24/7 security monitoring and rapid incident response team
• Vendor Management: Strict security requirements for all third-party providers
• Compliance Monitoring: Continuous monitoring for regulatory compliance

Data Access & Control

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Deletion: Request deletion of your data (subject to legal requirements)
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing for marketing or legitimate interests

How to Exercise Your Rights

• Online Portal: Access your privacy settings through your account dashboard
• Email Request: Send detailed requests to [email protected]
• Written Request: Submit physical requests to our registered office
• Customer Support: Contact our support team for assistance

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality and security
• Performance Cookies: Help us understand how users interact with our services
• Functional Cookies: Remember your preferences and settings
• Security Cookies: Protect against fraud and unauthorized access

Analytics Services

• Google Analytics: Website usage statistics (anonymized)
• Application Performance Monitoring: Service reliability and performance
• Fraud Detection Systems: Real-time transaction monitoring

Integrated Services

• Payment Gateways: Razorpay, PayU for secure payment processing
• SMS & Email: AWS SES, Twilio for communication services
• Cloud Infrastructure: AWS, Microsoft Azure for hosting and storage
• Support Systems: Zendesk, Freshworks for customer service

Nagad Pay services are intended for adults (18+ years) only. We do not knowingly collect personal information from children under 18 years of age.

• Age Verification: All users must confirm they are 18 or older during registration
• Parental Controls: Parents can request removal of any child's data discovered on our platform
• Educational Use: Special provisions for educational institutions using our services

How We Notify You

• Email Notifications: Direct notification for significant changes
• In-App Alerts: Prominent notices within the application
• Website Banner: Notification banner on our homepage
• SMS Updates: Critical changes via SMS notification

Version History

• Version 2.1 (June 20, 2025): Enhanced security measures and user rights
• Version 2.0 (March 15, 2025): Added cookie policy and third-party services
• Version 1.0 (January 10, 2025): Initial privacy policy