Privacy Policy

1. Introduction

This Privacy Policy (“Privacy Policy”) governs the collection, use, storage, processing, disclosure, and protection of information shared with or collected by Touras India Private Limited (“Company”, “we”, “our”, or “us”) through its website, applications, APIs, products, services, and related technological platforms (collectively referred to as the “Platform”).

This Privacy Policy applies to all users, merchants, customers, visitors, partners, and service providers accessing or using the Platform (“Users”, “you”, or “your”).

By accessing or using the Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy and consent to the collection and processing of information in the manner described herein.

2. Information We Collect and Purpose of Collection

The Company may collect, receive, store, process, or generate various categories of information in connection with your use of the Platform and services. Such information may include personal and business details such as name, email address, mobile number, business entity details, registered address, banking information, payment details, KYC documentation, tax-related information, government-issued identification documents, transaction records, communication records, and any other information voluntarily submitted by Users while accessing or using the Platform.

In addition, the Company may automatically collect technical and usage-related information including IP address, browser type, operating system, device identifiers, geolocation data, internet service provider details, timestamps, referral URLs, clickstream data, and website interaction analytics.

The Company collects and processes such information for purposes including but not limited to user registration, merchant onboarding, account administration, verification procedures, fraud prevention, transaction processing, compliance monitoring, customer support, operational analytics, service optimization, cybersecurity monitoring, enforcement of contractual rights, regulatory reporting, and fulfillment of legal obligations.

The Company shall limit the collection of information to what is reasonably necessary for lawful business and regulatory purposes. Where information is proposed to be used for a purpose materially different from the purpose for which it was originally collected, consent shall be obtained where required under applicable law.

3. Merchant Account Information

In the course of onboarding merchants, partners, or service subscribers, the Company may collect and maintain information including authorized signatory details, corporate registration documents, tax registrations, financial records, settlement account details, KYC documents, compliance declarations, and transaction-related information.

Such information may be used for identity verification, due diligence procedures, onboarding assessments, risk evaluation, fraud detection, transaction monitoring, settlement processing, compliance with applicable laws and regulatory requirements, and ongoing business administration.

The Company may also use registered contact details to communicate important operational updates, compliance notices, transaction alerts, service announcements, security notifications, newsletters, or other relevant communications relating to the use of the Platform and services.

Users may opt out of non-essential marketing communications where such option is made available. However, operational, security-related, compliance-related, or transaction-related communications may continue to be sent as necessary for service delivery and legal obligations.

The Company does not sell Personal Information to unrelated third parties for independent commercial gain or advertising purposes.

4. Customer Information

The Company may process customer-related information submitted during payment processing, onboarding procedures, transaction flows, support interactions, or service usage. Such information may include customer name, contact information, billing details, payment instrument information, wallet details, transaction references, and related communication data.

Where customer information is shared with merchants or service providers in connection with transactions initiated by the customer, such sharing shall be limited to the extent reasonably necessary for completion of the transaction, customer support, compliance obligations, or dispute resolution processes.

The Company shall not be responsible for the independent privacy practices, actions, omissions, or misuse of information by third-party merchants, partners, or service providers once such information is lawfully shared pursuant to customer authorization or transaction requirements.

5. Use of Services Through Third-Party Integrations and AI Platforms

The Platform may, from time to time, support integrations with third-party systems, applications, APIs, artificial intelligence platforms, automation tools, or external service providers for the purpose of enhancing operational efficiency and user experience.

Where Users voluntarily access Company services through such third-party integrations, the Company may process only such information as is reasonably necessary to execute the requested instruction, facilitate service delivery, maintain operational logs, conduct troubleshooting, ensure security, and comply with applicable legal or regulatory obligations.

The Company does not control the privacy practices or internal processing activities of third-party platforms. Any information independently submitted by Users to such external platforms shall remain subject to the respective third-party privacy policies and terms of use. Users acknowledge that the use of such integrations is entirely voluntary and undertaken at their own discretion.

6. Cookies and Tracking Technologies

The Platform may use cookies, web beacons, pixels, SDKs, and similar technologies to enhance user experience, facilitate platform functionality, analyze usage behavior, improve security, and support operational analytics. Cookies are small data files stored on a user’s device that assist in recognizing user preferences and optimizing website performance. Users may disable or restrict cookies through browser settings; however, certain portions or functionalities of the Platform may become unavailable or operate with limited functionality as a result.

The Company may also utilize third-party analytics or performance-monitoring tools that collect anonymized or aggregated information relating to website usage and interaction patterns. Such information is used solely for analytical, operational, and service improvement purposes.

7. Data Sharing and Transfer of Information

The Company may disclose or share information with financial institutions, payment processors, technology service providers, auditors, compliance agencies, consultants, legal advisors, affiliates, regulators, governmental authorities, or law enforcement agencies where such disclosure is reasonably necessary for service delivery, regulatory compliance, fraud prevention, dispute resolution, operational support, or enforcement of legal rights.

The Company may also share information in connection with corporate restructuring, mergers, acquisitions, investments, or business transfers, subject to applicable confidentiality and legal obligations.

Where information is transferred across jurisdictions, the Company shall undertake commercially reasonable efforts to ensure that such transfers are carried out in accordance with applicable legal and regulatory requirements.

8. Data Security

The Company adopts commercially reasonable administrative, technical, operational, and organizational safeguards designed to protect information against unauthorized access, misuse, disclosure, destruction, alteration, or accidental loss.

Such safeguards may include access controls, encryption measures, authentication procedures, network monitoring systems, vulnerability assessments, internal security protocols, and restricted employee access based on business necessity.

While the Company endeavors to maintain appropriate levels of security, Users acknowledge that transmission of information over the internet cannot be guaranteed to be completely secure, and the Company shall not be liable for unauthorized interception, transmission failures, or circumstances beyond its reasonable control.

9. User Rights and Access to Information

Subject to applicable laws and regulatory obligations, Users may request access to information maintained about them and may seek correction, modification, updating, or deletion of inaccurate or outdated information.

Users may also withdraw consent for certain categories of processing where such processing is based solely on consent and withdrawal is legally permissible.

The Company reserves the right to retain such information as may be required for legal compliance, dispute resolution, enforcement obligations, fraud prevention, audit requirements, or legitimate business purposes.

10. Third-Party Links and External Platforms

The Platform may contain links, references, or integrations relating to third-party websites, applications, or services. Such third-party platforms operate independently and are governed by their own terms, privacy practices, and security standards.

The Company neither controls nor assumes responsibility for the content, policies, or practices of any third-party platform and encourages Users to independently review the applicable terms and privacy policies before interacting with such services.

11. Modifications to this Privacy Policy

The Company reserves the right to amend, revise, update, or modify this Privacy Policy from time to time in order to reflect changes in legal requirements, regulatory obligations, operational practices, technological developments, or business needs.

Where legally required, the Company may provide notice of material modifications through the Platform, electronic communication, or other reasonable means.

Continued access to or use of the Platform following publication of any revised Privacy Policy shall constitute acknowledgment and acceptance of such modifications.

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or relating to this Privacy Policy, the use of the Platform, or the processing of information shall be subject to the exclusive jurisdiction of the competent courts located at Gurugram, Haryana, India.

13. Grievance Redressal and Contact Information

Any concerns, complaints, requests, or grievances relating to this Privacy Policy or the processing of Personal Information may be addressed to the designated Grievance Officer or Data Protection Officer at the contact details provided below: