Privacy Policy

bluFin360 Vault Pvt Ltd ("Company," "we," "us," or "our") operates the bluFin360 payment platform, committed to safeguarding your privacy and protecting your personal data. This Privacy Policy explains how we collect, store, use, and share user information, ensuring compliance with RBI, NPCI, IT Act 2000, and PCI-DSS regulations. By using bluFin360, you consent to the practices outlined below.

1. Information We Collect

We collect the following types of information when you use our services:

1.1 Personal Information

• Name, email, phone number, and address.
• PAN, Aadhaar, GST details (for merchants).
• Bank account and UPI details for transactions.

1.2 Transactional Data

• Payment details (amount, mode, merchant details).
• Order history and settlement reports.
• Refunds, chargebacks, and dispute history.

1.3 Device & Technical Data

• IP address, browser type, device model.
• Login timestamps, geolocation data (if enabled).
• App usage and transaction behavior analytics.

1.4 Cookies & Tracking Technologies

We use cookies, pixels, and analytics tools to enhance user experience, track performance, and detect fraudulent activities.

2. How We Use Your Information

We use collected data for:

• Processing Transactions: Enabling seamless payments & settlements.
• Fraud Prevention: Detecting unauthorized activities & mitigating risks.
• Customer Support: Assisting with payment issues, refunds, & disputes.
• Regulatory Compliance: Meeting RBI, NPCI, and AML obligations.
• Personalization & Marketing: Offering tailored promotions and insights (with consent).

We never sell or rent user data to third parties.

3. Data Storage & Localization Policy

3.1 Compliance with RBI Data Localization Guidelines

• All transaction-related data is stored on servers located in India.
• No payment data is stored or transmitted outside India unless explicit regulatory approval is granted.
• Backup storage follows encryption and cybersecurity protocols.

3.2 Data Retention Policy

• Transaction data is retained for a minimum 5 years as per RBI & IT Act 2000 regulations.
• Post-termination, data is deleted or anonymized unless legally required for legal obligations.

4. Transaction Security Policy

4.1 PCI-DSS & Payment Security Compliance

bluFin360 adheres to PCI-DSS Level 1 standards to ensure:

• End-to-End Encryption (E2EE) for payment data.
• Tokenization for card details to prevent unauthorized access.
• Two-Factor Authentication (2FA) for secure customer transactions.

4.2 Fraud Prevention & Risk Monitoring

We implement:

• AI-driven fraud detection for real-time risk assessment.
• Behavioral analytics to detect suspicious transactions.
• 24/7 transaction monitoring for unauthorized access prevention.

4.3 User Responsibilities

Users must:

• Maintain strong passwords and not share OTPs.
• Ensure secure access to devices and accounts.
• Report unauthorized transactions immediately.

5. Data Sharing & Third-Party Access

We share data only with authorized entities, including:

• Banking & Payment Partners (NPCI, Visa, Mastercard, RBI-regulated banks)
• Regulatory Authorities (for compliance & fraud investigation)
• Service Providers (cloud hosting, AI risk detection, customer support)

All third parties must comply with RBI & data security regulations.

6. User Rights & Controls

Users have the right to:

• Access & update their personal data.
• Request deletion (subject to data retention laws).
• Opt out of marketing communications at any time.
• Report security concerns via grievance redressal team.

7. Governing Law & Compliance

This policy complies with:

• RBI Payment Aggregator & Gateway Guidelines (2020)
• NPCI UPI Payment Security Framework
• IT Act 2000 & Data Protection Laws
• PCI-DSS & ISO 27001 Security Standards (Under Process)

Jurisdiction: Disputes governed by Indian laws and resolved in the courts of Bengaluru, Karnataka.

8. Policy Updates & Contact Information

We may update this policy periodically. Users will be notified of major changes via email or platform announcements.

Last Updated: 07/07/2025

Data Protection Officer (DPO): info@blufin360.com

Support Helpline: +91 7795510723