1. Introduction
This Privacy Policy explains how Shri Dariyav Doorstep Services Private Limited, the company behind Paymitraa (“SDDS”, “we”, “us”, or “the Company”) handles personal information in connection with the Paymitraa website and the partner services made available through it.
It applies to visitors to the website, to registered partners in each network role, and to enquiries submitted through our forms. It should be read together with the Terms & Conditions.
2. Information We Collect
We collect information in three ways: information you give us directly, information collected automatically when you use the website, and information we receive from third parties involved in delivering a service.
The categories are described in Sections 3 and 4. We aim to collect only what is needed for the purpose it is collected for.
3. Information You Provide
Depending on how you use the website, this may include:
- Registration details — name, business or shop name, mobile number, email address, state and district, selected role, and account credentials.
- Enquiry details — the purpose, service interest, location, and message you submit through the connect form.
- Verification material — documents and identifiers requested during onboarding for your role: Aadhaar card, PAN card, bank account details, shop photograph, shop address, mobile number, email address, and Video KYC.
- Support correspondence — the content of messages, calls, or tickets raised with the support desk.
- Transaction records — records generated when services are delivered at a counter: transaction ID, RRN or UTR reference, amount, date and time, status, the customer’s name and mobile number, and the bank, biller, or provider involved.
Please do not send us sensitive information that has not been requested.
4. Automatically Collected Information
When you visit the website, limited technical information may be collected automatically by our hosting or security infrastructure, such as IP address, browser and device type, referring page, pages viewed, and timestamps.
This information is used to operate the site, keep it secure, and diagnose problems. Server logs record the IP address, browser, pages viewed, and time of each request, and are retained for 90 days.
5. How We Use Information
Where we hold personal information, it is used to:
- register, verify, and activate partner accounts;
- provide, operate, and support the services available at a counter;
- process and reconcile transactions, credit allocation, and settlement;
- respond to enquiries and provide support desk assistance;
- maintain records for review, reporting, and audit;
- detect, investigate, and prevent fraud, misuse, or security incidents;
- meet legal, regulatory, and banking-partner obligations;
- send operational communications about your account or a service you use.
We rely on your consent, on performing our contract with you, and on our legal and regulatory obligations — including RBI and NPCI requirements — as the basis for this processing.
7. Analytics
We may use analytics tools to understand how the website is used and to improve it. Analytics providers may process usage data on our behalf under their own terms.
We are in the process of enabling Google Analytics 4 (GA4). It is not active on the website yet. Once it is, it will process website usage data on our behalf under Google’s own terms, and any opt-out offered by the provider will be linked here.
9. Third-Party Services
Some services depend on third-party providers, and the website may link to third-party sites. Those parties handle information under their own privacy policies, which we do not control. We encourage you to read the policy of any third party before providing information to it.
10. Data Security
We take reasonable measures intended to protect personal information against unauthorised access, alteration, disclosure, or destruction. Within the partner platform this includes role-wise permissions and verified approval for sensitive account actions.
Our measures include HTTPS/SSL encryption in transit, role-based access control, verified approval for sensitive account actions, and audit logs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the affected users, the Data Protection Board of India and CERT-In as required under applicable law and CERT-In directions.
11. Data Retention
We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as required by law, regulation, or a banking partner’s record-keeping requirements — whichever is longer. Transaction and audit records are typically subject to longer statutory retention than enquiry or marketing records.
Retention periods differ by type of record: transaction and KYC records are kept for the period required under applicable law (including PMLA and RBI requirements), while enquiry and support records are kept only as long as needed for the purpose they were collected for.
12. Your Privacy Rights
Subject to applicable law and to our record-keeping obligations, you may be able to:
- request access to the personal information we hold about you;
- request correction of information that is inaccurate or incomplete;
- request erasure of information we no longer need to keep;
- object to or request restriction of certain processing;
- withdraw consent where processing is based on consent;
- request a copy of certain information in a portable format;
- raise a complaint with the Data Protection Board of India.
To make a request, contact the support desk using the details in Section 16. We may need to verify your identity before acting, and we will respond within the time required under applicable law. These rights are available under the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology (IT) Rules, 2011, and applicable RBI and NPCI guidelines.
Our Grievance Officer for privacy and data protection matters is:
- Grievance OfficerBhaira Ram Saran
- Emailsaran@sddspl.in
- Phone+91 92160 51652
13. Children’s Privacy
The website and the partner services are intended for business users and are not directed at children. We do not knowingly collect personal information from anyone below 18 years of age. If you believe a child has provided us with personal information, please contact the support desk so it can be removed.
14. International Data Transfers
Personal information collected through the website is processed in connection with services operated in India. If information is transferred to, stored in, or accessed from another country — for example by a hosting or communications provider — we will take steps intended to ensure it remains protected in a manner consistent with this policy.
15. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised version takes effect when published on this page, and the “Last updated” date at the top will be changed accordingly. Where a change is material, we will take reasonable steps to notify registered partners.
16. Contact Us
For questions about this policy, or to make a privacy request:
- EntityShri Dariyav Doorstep Services Private Limited (SDDS), the company behind Paymitraa
- Registered addressC/o Bansi Lal Jagid S/o Kanaram, Badri Vishal Nagar, Sarvoday Basti, Bikaner, Rajasthan – 334004, India
- Privacy contact (Grievance Officer)saran@sddspl.in
- Support emailhelpdesk@sddspl.in
- Phone+91 92160 51652
- HoursMonday to Saturday, 10:00 AM to 6:00 PM
See also: Terms & Conditions · FAQs · Contact