Privacy Policy

This policy explains what personal data Instant Payout ("we", "us") collects when you use our merchant app and website to accept UPI payments and make payouts, why we collect it, who we share it with and the choices you have. Instant Payout is operated by Onemind Solutions Private Limited (CIN U58203RJ2023PTC089716), No- E263, Main Road, Madri Industrial Area, Transport Nagar, The Keys Hotel, Udaipur City, Udaipur, Girwa, Rajasthan, India, 313001, which is the data fiduciary for this data under the Digital Personal Data Protection Act, 2023.

What we collect

• Account details — name, business name, mobile number, email and a password (stored only as a one-way hash).
• KYC details — Aadhaar (verified by OTP through a licensed verification partner), PAN, business/company details and settlement bank account. Your Aadhaar number and Aadhaar photo are stored encrypted, kept outside our website, and visible only to authorised compliance staff (every view is logged); everywhere else it is shown masked (last 4 digits).
• Payment records — amounts, payer name and UPI ID, UTR/RRN, status, fees and settlement details for payments made to your QR, and beneficiary details for payouts you make.
• Device & log data — a device identifier, device model, app version, IP address and a Firebase push token so we can secure your account and send payment alerts to your device.
• Support messages and any screenshots you choose to attach.

The app does not read your SMS, contacts, location, call logs or photo gallery. OTPs are typed in by you.

Why we use it

• To create and secure your merchant account and sign you in.
• To meet KYC, anti-money-laundering (PMLA) and other legal obligations before you can receive or send payments.
• To issue your dedicated UPI QR, show payments in real time, notify you of received payments and settle funds to your verified bank account.
• To process payouts you request, and to calculate fees, GST and invoices.
• To answer support requests, investigate disputes and prevent fraud.

We process this data to perform our contract with you, to comply with law, and with your consent where the law requires it. We do not use your data for advertising.

Who we share it with

Only with partners needed to provide the service: our payment gateway and banking partners (for QR collection, payouts and settlement), KYC verification providers (Aadhaar OKYC, PAN, bank-account checks), email/SMS providers (for OTPs and alerts), Google Firebase (push notifications), and government, regulators, courts or law-enforcement agencies where the law requires. Each partner may use the data only to provide its service to us. We do not sell personal data.

Where it is stored

Your data is stored on servers located in India. Some service providers (such as Google Firebase) may process limited data, like push tokens, outside India under their own safeguards.

Security

Data travels over HTTPS only. Passwords are hashed, sensitive KYC data is encrypted, admin access is permission-based and logged, and app sessions use per-device tokens that you can revoke by signing out. No system is perfectly secure; if a breach affects your data we will inform you and the authorities as the law requires.

How long we keep it

Account and profile data are kept while your account is active. Transaction, KYC and settlement records are kept for the period required by Indian law (including RBI directions and the PMLA, generally at least 5 years after the account closes or the transaction date) and are then deleted or anonymised. Support chats and device tokens are deleted within 30 days of account deletion.

Your rights

• Access & correction — ask for a summary of your data or correct inaccurate details by writing to support@instantpayout.com.
• Deletion — delete your account from the app (Profile → Delete account & data) or via this page. Records we must keep by law are retained only for that period.
• Withdraw consent — you may withdraw consent at any time; we may then be unable to provide services that depend on it.
• Notifications — turn payment notifications on or off in the app (Profile) or in Android settings.
• Nominate — you may nominate another person to exercise these rights in case of death or incapacity.
• Complain — contact our Grievance Officer. If you are not satisfied, you may approach the Data Protection Board of India.

Children

Our services are for businesses and are not meant for anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. The date at the top shows the latest version; for significant changes we will notify you in the app or by email.

Contact