Privacy Policy

1. Information We Collect

QVOI collects the following categories of user information:

• Account Data: Name, registered mobile number, email address, and secure password upon sign-up.
• Transaction Information: Payment amounts, biller details, BBPS reference numbers, selected payment instruments, and transaction outcomes.
• Device and Network Data: IP address, device model, operating system version, browser type, network carrier, and session timestamps.
• Payment Method Data: Masked card or bank identifiers used to initiate transactions; full financial credentials are never stored by QVOI and are processed exclusively through certified, PCI-DSS compliant third-party payment gateways.
• Support and Communication Data: Content of messages, complaints, and correspondence you submit through our support interface.
• Regulatory Compliance Data: Where required under law, identity verification information collected in accordance with applicable KYC norms.

2. How We Use Your Information

• To register and authenticate your QVOI account.
• To process, route, and confirm bill payment and recharge transactions through the BBPS network.
• To share necessary transaction data with NPCI Bharat BillPay Limited (NBBL), billers, biller aggregators, and authorised payment gateways for settlement and reconciliation.
• To generate and deliver transaction receipts and payment confirmations.
• To detect and investigate fraudulent, unauthorised, or suspicious activity.
• To respond to support queries and resolve transaction disputes.
• To comply with legal obligations under RBI, NPCI, and other applicable regulatory frameworks.
• To conduct aggregate, anonymised analytics to improve platform quality and reliability.

3. Disclosure of Personal Data

QVOI does not sell, rent, or trade your personal information. Data may be shared with:

• NPCI Bharat BillPay Limited (NBBL) as the BBPS Central Unit, for transaction routing, clearing, and settlement.
• Registered billers and biller aggregators, to the extent required to complete payment delivery.
• Sponsor banks and NPCI-certified Technology Service Providers (TSPs) supporting BBPS operations.
• Law enforcement agencies, courts, or regulatory bodies including RBI and NPCI, upon receipt of a valid legal requirement.
• Successor entities in the event of a corporate restructuring, with equivalent privacy protections in place.

4. Cookies

QVOI uses cookies and web storage technologies for session management, fraud prevention, and aggregate usage analytics. Cookie preferences can be managed through your browser settings, though doing so may limit access to certain platform features.

5. Data Retention

We retain transaction records and user account data for the minimum period required under applicable Indian law, including the Prevention of Money Laundering Act, 2002, and RBI data localisation and retention norms. Data no longer required for legal, regulatory, or operational purposes is securely deleted or irreversibly anonymised.

6. Your Rights

You have the right to access, correct, or request deletion of your personal data held by QVOI, subject to applicable legal retention obligations. To exercise any of these rights, contact us at admin@qvoi.app.

7. Security

We employ SSL/TLS encryption for all data in transit, encrypted storage for sensitive records, access controls, and periodic security audits. All payment processing is performed by PCI-DSS certified gateways. While we take all reasonable measures, no internet-based system can guarantee complete immunity from security risks.

8. Changes to This Policy

We may update this Privacy Policy periodically. Any significant changes will be communicated via the platform or registered email. Continued use of QVOI constitutes acceptance of the updated policy.

9. Contact Information

If you have any questions, concerns, or requests regarding this Policy or the handling of your personal information, please contact us at admin@qvoi.app.