Privacy Policy

01Who this covers

This policy explains what Veduka Investments (“Veduka”, “we”, “us”) does with personal information when you visit vedukainvestments.com, register with us, or use the platform to settle a bill. It applies to you whether you are an individual using Veduka for household bills or a person acting for a business.

The entity responsible for your information is Veduka Investments, at 3/20, Mothi Nagar Main Road, Porur, Chennai‑600116, Tamil Nadu.

02What we collect

Information you give us

• Identity and KYC. Name, date of birth, photograph, PAN, Aadhaar or other officially valid document, and for businesses the registration, tax and constitution documents together with details of authorised signatories and beneficial owners.
• Contact details. Email address, mobile number, billing address.
• Bill documents. Invoices, rent agreements, fee notices, payroll registers, purchase orders and any supporting document you upload to establish the obligation being settled.
• Payee details. Name, bank account number and IFSC or UPI handle, and the payee's relationship to you.
• Correspondence. What you send our support desk, including call recordings where we tell you a call is being recorded.

Information we generate or receive

• Transaction records. Amount, category, date, status, settlement reference and the bill each payment is linked to.
• Verification results. Penny‑drop name match outcomes, KYC verification status, sanctions and politically‑exposed‑person screening results, and risk scores.
• Technical data. IP address, device and browser type, operating system, timestamps, pages viewed and referring URL.

03Card data, specifically

Veduka does not store your full card number. Card details are captured in a PCI‑DSS compliant environment operated by our payment processing partners and are replaced with a token before they reach our systems. What we hold is the token, the card network, the issuing bank name and the last four digits — enough to show you which card you used and to route a refund back to it.

The card verification value (CVV) is never stored by us or by our processor after authorisation.

04Information about your payees

To settle a bill we need details of the person or business being paid. When you provide them, you confirm that you are entitled to share that information with us for this purpose, and that the payee is expecting the payment.

We use payee information only to verify the account, make the settlement, produce your records, and meet legal obligations. We do not market to your payees, we do not sell their details, and we do not use them to build a separate commercial relationship without their knowledge.

A payee who wants to know what we hold about them, or wants it corrected, can write to the address in section 12.

05Why we use it

• To provide the service — verifying payees, authorising the card transaction, settling the bill, issuing references and receipts, and supporting you when something goes wrong.
• To meet legal and regulatory obligations — customer due diligence, record‑keeping, reporting suspicious activity, tax and accounting requirements, and responding to lawful requests from authorities.
• To prevent fraud and misuse — detecting self‑payments, structuring, stolen card usage, and payments that do not correspond to a genuine bill.
• To improve the platform — understanding which categories are used, where the flow breaks, and how quickly settlements clear.
• To communicate with you — transaction alerts, service notices and, only if you have opted in, occasional product updates.

We do not use your information for automated decisions that produce legal effects for you without a human being able to review the outcome on request.

06Who we share it with

• Acquiring banks and payment processors, to authorise and process the card transaction.
• Our settlement bank, to move funds to the payee.
• Verification providers, for KYC, penny‑drop account validation and screening.
• Cloud hosting and infrastructure providers whose servers hold the platform. Personal data is stored in India.
• Professional advisers and auditors, under confidentiality obligations.
• Authorities and courts, where we are legally required or permitted to disclose.
• An acquirer of our business, if Veduka is ever sold or merged — with notice to you.

We do not sell personal information, and we do not share it with advertisers or data brokers.

07How long we keep it

Transaction records, KYC documents and the bills that authorised each payment are retained for the period required by applicable law — generally not less than five years from the date of the transaction or the end of our relationship with you, whichever is later.

Support correspondence is kept for two years. Technical logs are kept for twelve months. Card tokens are deleted when you remove the card or close your account, unless a dispute or investigation is open.

Where we no longer need information for any of these purposes, we delete it or irreversibly anonymise it.

08How we protect it

• Encryption in transit and at rest, with card data tokenised at capture.
• Role‑based access, so staff see only what their work requires, with access logged.
• Maker‑checker approval and IP allowlisting on payment instructions.
• Segregation of customer settlement funds from operating accounts, reconciled daily.
• Independent security testing and periodic review of our processors.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law, and tell you what we are doing about it.

09Cookies and analytics

We use a small number of cookies. Some are strictly necessary — keeping you signed in, remembering your session, protecting forms against abuse. Others measure how the site is used so we can improve it.

You can block or delete cookies in your browser settings. If you block the necessary ones, parts of the platform will stop working. We do not use advertising or cross‑site tracking cookies.

10Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:

• ask for a summary of the personal data we hold about you and how it is processed;
• ask us to correct data that is inaccurate, or complete data that is incomplete;
• ask us to erase data we no longer need, subject to our record‑keeping obligations;
• withdraw a consent you previously gave, which will not affect processing already carried out;
• nominate another person to exercise these rights if you are incapacitated or deceased;
• raise a grievance with us and, if unsatisfied, with the Data Protection Board of India.

Write to the address in section 12. We respond within thirty days and will tell you if we need to verify your identity first.

11Changes to this policy

We update this policy when the service or the law changes. The date at the top of this page tells you when it was last revised. If a change materially affects how we use your information, we will notify you by email or through the platform before it takes effect.

12Contact and grievances

For anything in this policy, including access, correction and erasure requests:

• Grievance Officer: [name of officer]
• Email: contact@vedukainvestments.com
• Post: Veduka Investments, 3/20, Mothi Nagar Main Road, Porur, Chennai‑600116, Tamil Nadu
• Response time: acknowledgement within 48 hours, resolution within 30 days.

If we have not resolved your concern, you may escalate to the Data Protection Board of India.