Privacy Policy

Last updated: 19 October 2026 · Applies to ypayx.com

This Privacy Policy explains how Bitoodle Online Services Private Limited ("YPayX", "we", "us") collects, uses, shares and protects information when you visit ypayx.com (the "Site") or contact us through it. It is published in accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who we are

YPayX is the corporate employee-benefits line of YPay, operated by Bitoodle Online Services Private Limited, a company registered in India with its office in Noida, Uttar Pradesh. Prepaid cards offered under the YPayX programme are issued by an RBI-licensed prepaid payment instrument (PPI) issuer partner, which is a separate data fiduciary for the card and KYC data it holds.

2. What we collect on this Site

  • Information you give us: when you submit the demo or contact form we collect your work email, company name, number of employees and anything you write to us. We may also receive your name and designation if you share them.
  • Information collected automatically: standard server logs (IP address, browser type, pages visited, referring URL, timestamps) and, where enabled, analytics cookies (see Section 6).
  • We do not collect card numbers, KYC documents, Aadhaar or payment credentials on this Site. Those are collected only inside the YPayX app or employer dashboard under the issuer partner's and our separate programme terms.

3. How we use it

  • To respond to your enquiry and schedule a demo.
  • To send you information about YPayX products you asked about. You can opt out at any time by replying "unsubscribe" or writing to us.
  • To operate, secure and improve the Site, and to understand which pages are useful.
  • To comply with law, including RBI and tax requirements where applicable.

Our legal basis under the DPDP Act is your consent (given when you submit a form) and our legitimate use for responding to a request you initiated.

4. Sharing

We do not sell personal data. We share it only with: (a) service providers who process it for us under contract — form handling, email, hosting and analytics providers; (b) our RBI-licensed issuer partner, where you proceed to a card programme; (c) auditors, advisors and authorities where required by law. Processors may be located outside India; where they are, we rely on contractual safeguards permitted under Indian law.

5. Retention

Enquiry data is kept for up to 24 months from your last interaction, or longer if you become a customer or if law requires. Server logs are kept for up to 180 days.

6. Cookies and analytics

The Site uses essential cookies/storage for basic functionality and may use analytics (such as Google Analytics) to measure traffic in aggregate. You can block cookies in your browser; the Site will still work. We do not use advertising cookies on this Site.

7. Your rights

Under the DPDP Act you may access, correct or request erasure of your personal data, withdraw consent, and nominate a person to exercise these rights. Write to [email protected] with the subject "Privacy request". We respond within 30 days. You may also raise a grievance with our Grievance Officer at the same address, and thereafter with the Data Protection Board of India.

8. Security

We use HTTPS, access controls and reputable processors. No method of transmission is fully secure; if we learn of a breach affecting you, we will notify you and the authorities as the law requires.

9. Children

The Site is for businesses and their representatives and is not directed at children under 18.

10. Links and third parties

Links to the issuer partner, RuPay, merchants or other sites are governed by those sites' own policies.

11. Changes

We may update this policy; the date at the top shows the current version. Material changes will be highlighted on this page.

12. Contact / Grievance Officer

Bitoodle Online Services Private Limited, Noida, Uttar Pradesh, India · [email protected]

This Site is for information and lead enquiries only. Card-programme privacy terms are provided separately at onboarding together with the issuer partner's terms.