Privacy Policy

BeyoundExtra Tech Pvt Ltd (“Beyound”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy applies exclusively to the bill payment services provided through the Beyound platform that utilise the Bharat Bill Payment System (BBPS) operated by the National Payments Corporation of India (NPCI) (“BBPS Payment Services”). These services allow you to pay recurring bills such as electricity, water, gas, DTH, mobile postpaid, broadband, insurance premiums, loan EMIs, and other eligible bill categories.

This Policy explains what personal data we collect, how we use it, who we share it with, and your rights when you use our BBPS Payment Services. It supplements the general Beyound Privacy Policy and, in case of any conflict concerning BBPS payments, this Policy shall prevail.

By using Beyound BBPS Payment Services, you agree to the practices described in this Privacy Policy.

• Scope and Applicability

• This Privacy Policy applies to:

• Payers: Individuals who initiate bill payments through Beyound using BBPS.

• Biller Entities: Utility providers, telecom operators, insurance companies, and other organisations that receive bill payments via BBPS.

• The BBPS Payment Services include:

• Making one-time or scheduled credit card payments for bills in BBPS-enabled categories.

• Viewing bill details, payment history, and receipts.

• Managing biller preferences and recurring payment instructions.

• Information We Collect

• Information You Provide Directly

• When you register for or use the BBPS Payment Services, we may collect:

• Identity & Contact Information: Full name, email address, phone number, date of birth, and residential address.

• KYC Information: PAN, Aadhaar number (for identity verification), and proof of identity/address as required under applicable laws and NPCI guidelines.

• Biller Details: Biller category, biller name, consumer account number / customer ID, and any other identifier required to fetch or pay your bill.

• Payment Information: Credit card details (card number, expiry, CVV – collected securely through payment gateways), billing address, and transaction amounts.

• Communications: Records of your interactions with our customer support team.

• Information Collected Automatically

• When you use the BBPS Payment Services, we automatically collect:

• Log Data: IP address, device type, operating system, browser type, app version, and timestamps.

• Usage Data: Pages or screens visited, features used, transaction history, and referral sources.

• Location Data: Approximate location derived from IP address or GPS (if you grant permission).

• Information from Third Parties

• We may receive information about you from:

• BBPS / NPCI: Transaction status, biller details, and fraud risk indicators.

• Biller Entities: Bill amount, due date, and any late payment charges (when you initiate a bill fetch).

• Payment Processors & Card Networks: To confirm transaction status and prevent fraud.

• KYC Verification Agencies: To validate your identity using Aadhaar or PAN.

• How We Use Your Information

• We use your information solely to provide, improve, and secure the BBPS Payment Services. Specific purposes include:

• Processing Bill Payments: To fetch bill details, initiate, complete, and confirm bill payments through BBPS, including sending funds to the respective biller.

• Identity Verification: To perform KYC checks (Aadhaar/PAN) in compliance with RBI, NPCI, and other regulatory requirements.

• Fraud Prevention & Security: To detect and prevent unauthorised transactions, money laundering, or other financial crimes.

• Customer Support: To respond to your queries, resolve disputes, and provide transaction updates.

• Communication: To send you payment confirmations, reminders, and important service-related notices.

• Service Improvement: To analyse usage patterns, troubleshoot issues, and enhance the user experience.

• Legal Compliance: To comply with applicable laws, court orders, or regulatory directives (including NPCI’s operating guidelines).

• We do not use your data for marketing purposes related to BBPS payments unless you have explicitly consented to receive such communications.

• Legal Basis for Processing (for users in jurisdictions requiring it)

• We process your personal data on one or more of the following legal bases:

• Performance of a Contract: To provide the BBPS Payment Services you have requested.

• Compliance with Legal Obligations: To meet KYC, anti-money laundering, tax reporting, and NPCI/regulatory requirements.

• Legitimate Interests: To prevent fraud, ensure security, and improve our services, provided such interests do not override your privacy rights.

• Consent: Where you have given consent for specific processing activities (e.g., marketing).

• How We Share Your Information

• We share your personal data only as necessary to deliver the BBPS Payment Services and as permitted by law:

• With BBPS / NPCI: To process the bill payment, we share payer details, biller information, and transaction amounts with the BBPS platform. NPCI may also use the data for system integrity, reconciliation, and fraud monitoring.

• With Biller Entities: To ensure the payment is credited to your account, we share your consumer identifier and payment confirmation with the respective biller.

• With Payment Processors & Card Networks: To authorise and settle credit card transactions.

• With KYC Verification Agencies: To verify Aadhaar, PAN, and other identity documents through secure, government-approved APIs.

• With Banking Partners: For fund settlement, reconciliation, and fraud monitoring.

• With Regulatory or Law Enforcement Authorities: When required by law or in response to a legal request.

• With Service Providers: Third parties that help us host the platform, analyse data, or provide customer support (under strict confidentiality obligations).

• We do not sell your personal data to third parties.

• Data Security

• We implement robust security measures to protect your information:

• Encryption: All sensitive data (including credit card details and KYC documents) is encrypted in transit (TLS/SSL) and at rest.

• Access Controls: Only authorised personnel have access to personal data, and they are bound by confidentiality obligations.

• Fraud Monitoring: Real-time monitoring systems flag suspicious transactions.

• Aadhaar & PAN Protection: Aadhaar numbers are collected only for verification via UIDAI-authorised APIs and are never stored in plain text. PAN data is similarly protected.

• While we strive to protect your data, no system is completely secure. You are responsible for keeping your login credentials confidential.

• Data Retention

• We retain your personal data only as long as necessary for the purposes set out in this Policy, or as required by law.

• Transaction Data: Retained for at least 8 years (or as prescribed by tax/regulatory requirements) to comply with financial record-keeping obligations.

• KYC Data: Aadhaar and PAN verification data are retained only as long as mandated by RBI/UIDAI regulations and are securely deleted thereafter.

• Account Data: If you close your account, we will retain your data for a period of up to 30 days to complete pending transactions, after which we will delete it unless a longer retention is required by law.

• Your Rights and Choices

• Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.

• Correction: Rectify inaccurate or incomplete information.

• Deletion: Request deletion of your data, subject to legal retention requirements.

• Restriction: Ask us to limit processing in certain circumstances.

• Portability: Receive your data in a structured, machine-readable format.

• Withdrawal of Consent: Withdraw any consent you previously gave (e.g., for Aadhaar verification), though this may affect your ability to use the BBPS Payment Services.

• To exercise these rights, contact us at support@beyound.in or through the in-app help section. We will respond within 30 days.

• Use of Cookies and Similar Technologies

• When you access our website or app for BBPS Payment Services, we use cookies and similar technologies to:

• Keep you logged in during your session.

• Understand how you interact with our platform.

• Improve performance and security.

• You can manage cookie preferences through your browser or device settings. Disabling certain cookies may affect functionality.

• Children’s Privacy

• Our BBPS Payment Services are intended for users who are at least 18 years of age. We do not knowingly collect personal data from children under 18 without parental consent. If you are a parent or guardian and believe we have inadvertently collected data from a minor, please contact us so we can delete it.

• International Data Transfers

• Beyound operates primarily in India, and your data is stored on servers located in India. BBPS transactions are processed within India by NPCI. If we engage third-party service providers located outside India, we ensure appropriate safeguards (such as standard contractual clauses) are in place to protect your data.

• Changes to This Privacy Policy

• We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any material changes will be communicated to you via email or a prominent notice on our platform. The “Last Updated” date at the top of this Policy indicates when it was last revised. Continued use of the BBPS Payment Services after the effective date constitutes acceptance of the updated Policy.

• Grievance Redressal

• If you have any concerns regarding the handling of your personal data in connection with BBPS payments, you may contact:

• Grievance Redressal Officer (GRO) Mr. Vinod Kumar Email: vinod@beyound.in Phone: +91 8069240024 Address: First Floor, Building No. 138, 4th Main Road, Industrial Town, Rajajinagar, Bangalore North, Bangalore – 560010, Karnataka, India

• We will acknowledge your complaint within 48 hours and strive to resolve it within 7 working days.

• If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority (in India, the Ministry of Electronics & Information Technology or the appropriate consumer forum).

• Contact Us

• For any questions about this Privacy Policy or our data practices related to BBPS payments, please contact us:

• Email: support@beyound.in Phone: +91 90004 00804 (Customer Support Helpline) In-App: Help & Support section

By using Beyound BBPS Payment Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.