Privacy Policy

1. Introduction

NISPAY ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://nispay.in and use our peer-to-peer exchange platform (the "Service").

2. Information We Collect

We collect information directly from you when you register, use our services, or communicate with us.

2.1 Personal Identification Information

• Name: Your full name as provided during signup.
• Contact Details: Your email address and phone number (10-digit).
• Authentication Data: Passwords (securely hashed) and active session tokens.

2.2 Financial and Transaction Information

• Bank Account Details: Bank Name, Account Holder Name, Account Number, and IFSC code provided for INR transfers.
• Crypto Wallet Details: Wallet addresses and network preferences (e.g., TRC20, ERC20) provided for USDT transfers.
• Transaction Records: History of your buy/sell orders, including amounts, exchange rates, timestamps, and order statuses.
• Payment Proofs: UTR numbers, Transaction Hashes (TxHash), and potentially uploaded screenshots to verify payment fulfillment.

2.3 Referral and Commission Data

• Referral Links: Codes generated for you and usage statistics.
• Commission Ledger: Records of earnings derived from referred users, including source transaction IDs and commission amounts.
• Withdrawal History: Records of commission withdrawals to your linked bank accounts, including bank snapshots at the time of withdrawal.

2.4 Support and Communication Data

• Support Tickets: Messages, subjects, and statuses of inquiries submitted through our Help Center.
• Email Logs: History of transactional emails sent to your registered address for idempotency and delivery tracking.

2.5 Security and Audit Logs

We maintain comprehensive audit logs of critical actions (e.g., profile updates, transaction confirmations) linked to your user ID to prevent fraud and ensure platform integrity.

3. How We Use Your Information

We use the collected data to:

• Facilitate, process, and verify P2P USDT/INR transactions.
• Create, secure, and manage your account.
• Calculate and disburse referral commissions.
• Provide customer support and resolve disputes.
• Send administrative and transactional emails (e.g., order confirmations, security alerts).
• Monitor and analyze usage and trends to improve the platform.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity. [LEGAL / COMPLIANCE REVIEW REQUIRED]

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data in the following circumstances:

• Counterparties: When participating in a P2P transaction, relevant details (e.g., Bank Account Name, Account Number, Wallet Address) are shared with the administrative team to facilitate and verify the transfer of funds.
• Service Providers: We may share data with third-party vendors (e.g., Supabase for database hosting, Hostinger for SMTP email delivery) who need access to perform services on our behalf.
• Legal Obligations: [LEGAL / COMPLIANCE REVIEW REQUIRED] We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. This includes Row Level Security (RLS) on our database infrastructure to ensure your data is only accessible to you and authorized administrators. While we have taken reasonable steps to secure the personal information you provide, please be aware that despite our efforts, no security measures are perfect or impenetrable.

6. Data Retention

We will retain your personal information and transaction history for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (for tax, accounting, or other legal requirements). [LEGAL / COMPLIANCE REVIEW REQUIRED]

7. Cookies and Tracking Technologies

We use standard session management technologies and secure cookies to maintain your authenticated state across the application. We do not currently employ intrusive third-party marketing trackers.

8. Your Privacy Rights

Depending on your location, you may have rights regarding your personal information, such as the right to access, correct, or request deletion of your data. To exercise these rights, please contact us using the details below.

9. Children's Privacy

Our Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: contact@nispay.in