Legal

Privacy Policy

Last updated: July 10, 2026

This policy describes how we handle information across Peneu's payment infrastructure platform, in line with applicable Indian data protection and RBI regulatory requirements.

1. Introduction

This Privacy Policy explains how PENEU LIMITED ("Peneu", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use our website, platform, APIs, and related services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information necessary to onboard businesses, process payments, and meet our regulatory obligations under applicable Indian law, including the RBI's payment aggregator regulations and applicable RBI directions.

Identity and KYC information: name, PAN, GSTIN, Aadhaar (where legally required), business registration and incorporation documents.
Financial information: bank account details, transaction history, settlement records, and related payment data.
Contact information: email address, phone number, business address.
Technical information: IP address, device and browser type, log data, and cookies collected when you use our website or dashboard.
Communications: information you provide when contacting our support, sales, or partnership teams.

3. How We Use Information

To verify identity and complete KYC/AML checks before onboarding a merchant, partner, or customer.
To process, route, retry and reconcile payment transactions across the payment providers connected to a merchant's account.
To detect, investigate, and prevent fraud, unauthorized transactions, and other misuse of the Services.
To comply with RBI regulations and other applicable legal or regulatory requirements.
To communicate with you about your account, transactions, support requests, and service updates.
To improve our website, products, and services.

We do not sell personal or business information. We share information only where necessary to provide the Services or where required by law:

With the payment providers, banks and payment gateways that process a transaction, to the extent required to process and settle it.
With regulators, law enforcement, or judicial authorities where required under applicable Indian law.
With service providers who support our operations (for example, cloud hosting, identity verification, or communication tools), under contractual confidentiality obligations.
In connection with a merger, acquisition, or sale of assets, subject to the same protections described in this policy.

5. Data Storage and Security

Payment data is stored in accordance with applicable RBI data localisation requirements. We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, access controls and audit logging.

6. Data Retention

We retain personal and transaction information for as long as necessary to provide the Services, meet our legal and regulatory record-keeping obligations under RBI guidelines, and resolve disputes. Retention periods vary depending on the type of data and the applicable regulatory requirement.

7. Cookies

Our website uses cookies and similar technologies to operate correctly, remember preferences, and understand how visitors use our site. For details on the types of cookies we use and how to manage them, see our Cookie Policy.

8. Your Rights

You may request access to, correction of, or deletion of your personal information, subject to our legal and regulatory record-keeping obligations. To exercise these rights, contact us using the details below, or raise a request through our Grievance Redressal process.

9. Children's Privacy

Our Services are intended for use by businesses and individuals who are at least 18 years old. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Services after any update constitutes acceptance of the revised policy.

11. Contact Us

For questions about this Privacy Policy or how your data is handled, contact us through the contact form at https://peneu.com/contact.