Information We Collect

We collect the information and data you provide only to ensure that we can provide you with our services in the best manner possible. We wish to keep such collection and usage of data as transparent as possible. We have detailed the types of data we collect for your perusal below. In order to create and maintain the NeoFinity Account, the following types of data are collected by NeoFinity and constitute “NeoFinity Account Data”. NeoFinity will have the right to use the NeoFinity Account Data in accordance with the terms of this Policy; it may share parts of this data with the Bank from time to time. The Bank too will use such data in accordance with the terms of this Policy. 

Means of Gathering Data

1. Data you input in the course of signing up and using NeoFinity’s services: User profile data: This includes your name, phone number, and email address. Address Book Contacts: If you grant NeoFinity access to the address book on your mobile device, then NeoFinity may access and store the names and contact information from your address book to facilitate invitations, social interactions, and payments/transfers to your contacts through our Platform and for other purposes described in this Policy. Feedback data and other data: We collect the data that you actively put into the Platform. This includes the follows:
   • User feedback.
   • If you call our call centers, we may record calls for quality and training purposes.
   • Data you input when you participate in our referral programs. For example, when a user refers another person, we receive the referred person’s personal data from that user.
   • Account users who request services for, or on behalf of other users, or who enable such users to request or receive services through their accounts.
2. Data we collect from your usage of our Services:
   • Geolocation data: We collect the location data from your mobile device if enabled by you to do so. We may also collect this data when our Platform is running in the background of your mobile device. You will not be able to use critical and essential features of the Platform if you disable the location services.
   • Usage data: NeoFinity collects data about how you interact with our Services. This includes data such as access dates and times, Platform features or pages viewed, Platform crashes and other system activity, type of browser, and third-party sites or services used before interacting with our Services.
   • Device data: We may collect data about the devices used to access our Services, including the hardware models, device IP address, operating systems and versions, software, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion data, and mobile network data. When you choose to grant permissions to any device features like contact lists, photos, camera, location, microphone, SMS, storage, phone calls, and NFC, NeoZAP may access, store, and utilize the data obtained through these permissions.
   • Cookies: We also collect information through the use of “cookies”, tracking pixels, and similar technologies to understand how you navigate through the Platform to learn your preferences. Cookies are small text files that web servers place on your device; they are designed to store basic information and to help websites and apps recognize your browser. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be accessed every time you use the Platform.
3. Information we receive from other sources

   We may also be working closely with third parties (including, for example, business partners, technical sub-contractors, analytics providers, search information providers) and may receive information about you from such sources. Such data may be shared internally and combined with data collected on this Platform.

How And Why Do We Use Your Data?

How Do We Share The Collected Information?

Data Security

We may provide the functionality to load the payment gateway through debit card, credit card or any other payment mode and collect data in relation to these payment modes (“Payment Data”). The information regarding your Payment Data may be stored once you make the first payment by the card/other payment mode and is protected against unauthorized access. For this purpose, a certified payment provider is used whose systems meet the applicable security standards, such as example PCI-DSS (Payment Card Industry – Data Security Standard). The Payment Data is stored by the contracted PCI-DSS-certified payment provider for recurring transactions. We do not, ourselves, store your Payment Data and if we ever do, it will be only in abbreviated form for analysis purposes or to prevent fraud.

In order to ensure that the debit/credit card/other payment mode is used by the legitimate owner and to prevent cases of fraud, the Payment Data and card information is transferred to one or more external payment security services. This transfer may also include additional personal data. The external payment security services may process personal data on our behalf.

Data Retention

We will retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

What are Your Rights to Control the Data?

It is important for us that you remain in control of your data. You alone are the owner and manipulator of your data, and you shall have the right to restrict our usage of the data in the manner provided below. You should also remain informed of your rights with regards to the use of your data and information by us. Your rights with regards to your data are listed below. The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions. If you would like to exercise any of these rights, please contact us.

Account Deletion

We provide all our Users an option to request the deletion of a specific account through the profile section on the NeoZAP App.

Following such request, we delete all such information related to the specific account including but not limited to profile information, card data, transaction details, reward details, referrals details, statement details, google auth sessions etc. that we are not required to retain.

In certain circumstances, we may be unable to delete your account, such as if there is any outstanding dispute or unresolved claims pending on your card/account. However, upon resolution of the issue preventing deletion, the information is immediately deleted.

Note that we may retain certain information if necessary for our own legitimate business interests such as fraud prevention and enhancing users' safety and security or to fulfil our legal and contractual obligations and compliance requirements.

You also have the option to request for locking the account instead. This will temporarily lock your NeoZAP virtual card and tag until you re-activate them again. If you face any issues, you can get in touch with us at support@neofinity.in

What Are Our Data Security Practices?

We use appropriate technical and organizational security measures to ensure a level of protection to your personal data which is commensurate to the risk, taking into account state of the art technologies, implementation costs and the nature, scope, context and purposes of processing as well as the risk of likelihood and the degree of risk. The transfer of personal data between your end device and us is generally carried out in an encrypted form (TLS encryption).

You can identify an encrypted connection by the lock symbol in the address line of your browser. If you communicate with us by email, access by third parties cannot be ruled out. In the case of confidential information, we recommend using encrypted email communication (PGP).

Children’s Privacy We take the privacy of Minors very seriously. Please make sure that you as the Parent who accepts these terms on behalf of the Minor, supervise the types of data that the Minor shares with us. To make sure data shared by Minors is safe, we may (from time to time) integrate new mechanisms and safeguards on our Platform.

Communications We may from time to time send you service-related announcements when we consider it necessary to do so (such as when we temporarily suspend the Platform for maintenance, or security, privacy, or administrative-related communications). We send these to you via SMS or email, as we deem fit.

When you use NeoFinity or send emails or other data, information or communication to us, you agree and understand that you are communicating with us through electronic records and you consent to receive communications via electronic records from us periodically and as and when required. We may communicate with you by SMS and/or E-mail or through WhatsApp or by such other mode of communication, electronic or otherwise. You hereby expressly agree to receive communication (including transactional messages) through said modes of communications from the Neo Group.

NeoFinity reserves a right to create any Whatsapp groups ("Groups") through its representatives (hereinafter referred to as "Group Admin") who are expressly authorized to control, monitor and administer the Groups on its behalf.

The Group Admin reserves the right at all times to determine, in its sole discretion, whether the content posted on the Group is appropriate and in compliance with these Terms of Use. The Group Admin further reserves the right to remove any participant/member from the Group if it finds you or any participant/member to have circulated/posted any content which is objectionable or improper for the Groups or its participants and/or deemed to have violated the Terms of Use or for any reason whatsoever.

Updates To This Notice

We may occasionally update this Policy. Use of our Services after an update constitutes consent to the updated notice to the extent permitted by law. If we make significant changes, we will notify you of such changes in advance. Please take the time to periodically review this Policy for the latest information on our privacy practices.