Legal

Privacy Policy

Effective date: 1 January 2025  |  MoneyWave Solutions Pvt. Ltd.

MoneyWave Solutions Pvt. Ltd. ("MWSPay", "we", "our", "us") respects your privacy. This policy explains what information we collect through the MWSPay Insurance portal, how we use it, who we share it with, and your rights over it.

1. Information We Collect

• Account information: Name, email address, and mobile number provided during registration.
• Policy details: Policy numbers, insurer selection, date of birth, and other identifiers entered when fetching bills.
• Transaction data: Payment references, order IDs, amounts, timestamps, and status returned by payment gateways.
• Usage and log data: IP addresses, browser type, access times, and error logs collected for security and service reliability.

2. How We Use Your Information

We use collected information solely to:

• Authenticate users and secure portal access.
• Fetch insurance premium details from partner insurers via BBPS.
• Initiate and process payments through integrated payment gateways.
• Display transaction status and generate payment confirmations.
• Investigate disputes, errors, and support queries.
• Comply with applicable laws and regulatory requirements.

We do not use your data for marketing, profiling, or any purpose unrelated to service delivery without your explicit consent.

3. Sharing of Information

We share data only to the extent necessary to operate the service:

• Insurers: Policy details are shared with the selected insurer to retrieve premium information via BBPS/Levin FinTech.
• Payment gateways: Transaction details are shared with Nimbbl to process payments securely.
• Hosting & infrastructure: Data is stored on secured cloud infrastructure with access controls.
• Legal compliance: We may disclose information when required by law, court order, or government authority.

We do not sell, rent, or trade your personal data to any third party.

4. Data Security

All data transmitted through MWSPay Insurance is encrypted in transit using TLS. Sensitive credentials (API tokens, passwords) are never logged or stored in plain text. Access to production systems is restricted to authorised personnel only.

5. Data Retention

We retain transaction records and account data for as long as required to fulfil the purposes described in this policy and to comply with legal obligations. When data is no longer needed, it is securely deleted or anonymised.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. We will respond to verified requests within a reasonable time, subject to any legal obligations to retain certain records.

7. Contact for Privacy Enquiries