Privacy Policy

Last Updated: June 3, 2025

1. Introduction

Supermint Infotech Pvt. Ltd. ("EduPay", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, mobile applications, and services (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email, phone number, institution details)
• Complete KYC verification (government ID, address proof, PAN)
• Add students or staff (names, contact details, enrollment information)
• Process payments (bank account details, UPI IDs, transaction history)
• Contact our support team
• Subscribe to newsletters or marketing communications

2.2 Usage Data

We automatically collect certain information when you visit, use, or navigate our Services. This may include:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website addresses
• Clickstream data and interaction patterns

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect and store information about your preferences and browsing behavior. You can control cookies through your browser settings.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing Services: To operate, maintain, and improve our platform and features
• Payment Processing: To facilitate fee collection, settlements, and withdrawals
• Communication: To send transactional emails, notifications, and support responses
• Security: To detect fraud, prevent abuse, and ensure platform integrity
• Analytics: To understand usage patterns and improve user experience
• Marketing: To send promotional content (with your consent, which you can withdraw anytime)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our platform (payment gateways, cloud hosting, SMS/email services)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Consent: When you explicitly authorize us to share your information

All third-party service providers are bound by confidentiality obligations and data protection agreements.

5. Data Security

We implement industry-standard security measures to protect your data:

• 256-bit AES encryption for data at rest and in transit
• TLS 1.3 for all network communications
• ISO 27001 certified data centers
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• Automated threat detection and incident response

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Upon account closure, we will delete or anonymize your data within 90 days, except where retention is necessary for legal, accounting, or fraud prevention purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request deletion of your personal data (right to be forgotten)
• Portability: Request transfer of your data to another service provider
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at support@edupays.in.

8. Children's Privacy

Our Services are intended for educational institutions and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or platform notification.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: