Privacy Policy

Effective Date: March 11, 2026

Welcome to AppVerge Private Limited ("AppVerge", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website appverge or use any of our products and services, including our CRM, ERP, mobile application, BBPS API, and related platforms (collectively, the "Services").

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

1. Information We Collect

We may collect the following categories of information when you use our Services:

a) Personal Identification Information

• Full name, email address, phone number, and postal address
• Business name, GST number, PAN, and other KYC documentation (where required for BBPS or payment services)
• Username and password for your AppVerge account

b) Technical & Usage Data

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent, referral URLs, and clickstream data
• API request logs and integration activity

c) Payment & Transaction Data

• Transaction IDs, billing amounts, payment method type (we do not store full card numbers)
• BBPS bill payment details including biller ID, consumer number, and payment status

d) Communications Data

• Messages sent via our contact forms, support tickets, or email
• Feedback, survey responses, and newsletter subscriptions

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide access to our Services
• Process BBPS bill payments, API requests, and other transactions
• Send transactional emails (receipts, confirmations, account alerts)
• Provide customer support and respond to inquiries
• Improve, personalise, and expand our Services
• Monitor and analyse usage trends to enhance user experience
• Send marketing communications (you may opt out at any time)
• Comply with legal obligations under applicable Indian law, including RBI, NPCI, and BBPS guidelines
• Detect, prevent, and address fraud, security incidents, or abuse

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity — to perform our Services you have requested
• Legitimate interests — to improve our products, prevent fraud, and ensure network security
• Legal obligation — to comply with applicable laws and regulatory requirements
• Consent — where you have explicitly agreed, such as for marketing communications

4. Sharing of Your Information

We do not sell your personal data. We may share your information with:

• Service providers — payment gateways, cloud hosting providers, analytics platforms, and customer support tools operating under strict data processing agreements
• BBPS ecosystem partners — NPCI, billers, and banks as required for processing bill payments
• Legal authorities — courts, regulators, or government bodies when required by law or to protect our rights
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice

All third-party processors are contractually bound to process data only for specified purposes and to maintain adequate security standards.

5. Cookies & Tracking Technologies

We use cookies and similar technologies (web beacons, pixels) to:

• Keep you signed in and remember your preferences
• Understand how visitors interact with our website
• Serve relevant content and measure marketing campaigns

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services. We use Cloudflare for CDN and performance analytics which sets its own cookies in accordance with Cloudflare's privacy policy.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. Transaction records related to BBPS payments are retained for a minimum of 5 years as required by applicable regulatory guidelines. You may request deletion of your account and personal data at any time (subject to our legal retention obligations) by contacting us at support@appverge.in.

7. Data Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls and multi-factor authentication for our internal systems
• Regular security audits and vulnerability assessments

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data (subject to legal obligations)
• Restriction — request that we limit how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — at any time where processing is based on consent

To exercise any of these rights, contact us at support@appverge.in. We will respond within 30 days.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take prompt steps to delete such data.

10. International Data Transfers

AppVerge is incorporated in India and primarily stores data on servers located in India. If data is transferred to or accessed from outside India (e.g., through cloud providers with global infrastructure), we ensure appropriate safeguards are in place consistent with applicable data protection laws.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12. BBPS-Specific Privacy Notice

As a BBPS API Provider authorised under NPCI guidelines, AppVerge processes bill payment data strictly for the purpose of facilitating transactions between customers and billers. This data is shared with relevant BBPS ecosystem participants (NPCI, banks, billers) solely to fulfil the payment transaction. AppVerge does not use bill payment data for profiling or marketing purposes.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the new policy on this page with an updated effective date. Your continued use of our Services after the update constitutes acceptance of the revised policy.