Privacy Policy

1. Introduction

LeapFlowX Private Limited ("LeapFlowX", "we", "us", or "our") operates a payments and payouts infrastructure platform that enables businesses to process refunds, vendor payments, salary disbursements, and related financial transactions ("Services"). This Privacy Policy explains how we collect, use, disclose, and protect information when you access our website at leapflowx.in, use our dashboard, or integrate with our APIs (collectively, the "Platform").

This Policy applies to our business customers ("Merchants"), the end-users and beneficiaries of payouts initiated through our Platform ("Beneficiaries"), and visitors to our website. By using the Platform, you agree to the collection and use of information as described here. If you do not agree with this Policy, please discontinue use of the Platform.

2. Information we collect

2.1 Information you provide to us

• Account information: name, business name, work email, phone number, designation, and company registration details when you sign up or request a demo.
• KYC and KYB information: PAN, GSTIN, CIN, bank account details, IFSC codes, and supporting business documents required for onboarding under applicable RBI and AML/KYC norms.
• Transaction information: beneficiary names, account numbers, UPI IDs, card tokens, payout amounts, and reference identifiers submitted via our dashboard, bulk upload files, or API requests.
• Support communications: information you share with us via email, chat, or phone when seeking support.

2.2 Information collected automatically

• Usage data: IP address, browser type, device identifiers, pages visited, and timestamps, collected via cookies and similar technologies on our website and dashboard.
• API and log data: request metadata, response codes, and error logs generated when you or your systems interact with our APIs, retained for debugging and fraud monitoring.

2.3 Information from third parties

We may receive information from banking partners, payment networks (such as NPCI/UPI rails), card networks, identity verification providers, and credit bureaus to validate transactions, screen for fraud, and meet regulatory obligations.

3. How we use information

We use the information we collect to:

• Process payouts, refunds, and related financial transactions on behalf of Merchants;
• Verify identity and conduct KYC/KYB, AML, and sanctions screening as required by law;
• Operate, maintain, and improve the Platform, including the dashboard and APIs;
• Detect, investigate, and prevent fraud, unauthorised transactions, and security incidents;
• Communicate with you about your account, transactions, and changes to our Services;
• Comply with legal and regulatory obligations, including those under the Reserve Bank of India, the Prevention of Money Laundering Act, and the Digital Personal Data Protection Act, 2023; and
• Send service updates and, where you have consented, marketing communications.

4. Legal basis for processing

We process personal data on the basis of: performance of a contract with you or your organisation; compliance with legal and regulatory obligations applicable to payment and financial intermediaries; our legitimate interests in operating a secure platform and preventing fraud; and, where applicable, your consent.

5. Sharing of information

We do not sell personal information. We may share information with:

• Banking and payment partners: banks, card networks, and NPCI/UPI infrastructure providers, to the extent necessary to execute a payout or refund;
• Regulators and law enforcement: where required under applicable law, court order, or regulatory direction;
• Service providers: cloud hosting, identity verification, fraud detection, customer support, and analytics vendors, bound by confidentiality and data processing agreements;
• Corporate transactions: a successor entity in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

6. Data retention

We retain transaction records and KYC/KYB documentation for the period mandated by applicable RBI guidelines and the Prevention of Money Laundering Act (currently a minimum of 5 years from the date of transaction or relationship closure, whichever is later). Other personal data is retained only for as long as necessary to fulfil the purposes described in this Policy, after which it is securely deleted or anonymised.

7. Security measures

We maintain administrative, technical, and physical safeguards designed to protect personal and financial information, including encryption of data in transit and at rest, role-based access controls, network segmentation, and continuous monitoring. While we work to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Subject to applicable law, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of data we are not legally required to retain; withdraw consent for marketing communications; and lodge a grievance with our Grievance Officer (see Section 13) or the appropriate data protection authority. We will respond to verified requests within the timelines prescribed by applicable law.

9. Cookies & tracking technologies

Our website and dashboard use cookies and similar technologies to remember preferences, keep you signed in, and understand how the Platform is used. You can control cookies through your browser settings; disabling certain cookies may affect Platform functionality.

10. Children's privacy

The Platform is intended for use by businesses and individuals who are at least 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

11. International data transfers

Where we engage service providers or process cross-border payouts outside India, personal data may be transferred to and processed in other jurisdictions. We take steps to ensure such transfers are subject to appropriate safeguards consistent with applicable data protection law.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the revised Policy on this page with an updated "Last updated" date. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

13. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Grievance Officer:

LeapFlowX Private Limited
3rd Floor, 312, Plot No. 6-A, Okay Plus Big Benn Swag Farm, New Sanganer Road, Nagar, Ramnagar, Jaipur, Rajasthan 302019, India
Email: privacy@leapflowx.in
Support: support@leapflowx.in