Privacy Policy

SoniPe (“SoniPe”, “we”, “us”, or “our”) is operated by Turnet Digi Solution Private Limited. This Privacy Policy explains how we collect, use, share and protect information about retailers, distributors and their customers (“you”) when you use our website, mobile applications and AEPS, DMT, BBPS, recharge and related services (together, the “Services”).

1. Information we collect

We collect information necessary to onboard retailers and partners, process financial transactions, and comply with RBI and NPCI requirements for business correspondent and payment aggregation services.

• Identity and KYC information — name, PAN, Aadhaar (for AEPS biometric authentication), photograph, address proof and bank account details submitted during registration or KYC.
• Transaction data — amounts, timestamps, beneficiary details, commission and settlement records for AEPS, DMT, BBPS, recharge, PAN card, Merchant QR and Micro ATM transactions.
• Device and usage data — IP address, device identifiers, app version, log files and approximate location used for fraud prevention and service reliability.
• Communications — support requests, call recordings and messages exchanged through our helpdesk, WhatsApp or email channels.

2. How we use your information

• To create and verify retailer, distributor and customer accounts, including KYC and Aadhaar-based authentication for AEPS.
• To process and settle transactions, calculate commission, and reconcile wallet balances.
• To detect, investigate and prevent fraud, money laundering and unauthorized access, as required under RBI and PMLA guidelines.
• To provide customer support and respond to service requests or complaints.
• To send transactional alerts (SMS/email/WhatsApp) and, where permitted, service updates.
• To comply with applicable law, regulatory reporting and lawful requests from authorities.

3. How we share your information

We share information only where necessary to deliver the Services or where required by law, including with:

• Partner banks, NPCI, UPI and AEPS switch providers, and BBPS billers, to complete the transactions you initiate.
• KYC and identity verification providers acting on our behalf under contractual confidentiality obligations.
• Regulators, law enforcement or courts, when required by law or to protect the rights, safety or property of SoniPe, our users or the public.
• Service providers who host our infrastructure, send notifications, or provide customer support tooling, bound by data-protection obligations.

We do not sell your personal information to third parties for marketing purposes.

4. Data security

We use industry-standard safeguards — including encryption in transit, access controls and transaction monitoring — to protect your information. Aadhaar data collected for AEPS authentication is processed in accordance with the Aadhaar Act, 2016 and applicable UIDAI guidelines, and is not stored beyond what is required for transaction processing and regulatory record-keeping.

5. Data retention

We retain KYC and transaction records for the period mandated by RBI and other applicable regulations (currently a minimum of ten years from the date of transaction, unless a longer period is required by law), and delete or anonymize other personal information once it is no longer needed for the purposes described in this Policy.

6. Your rights and choices

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, or withdraw consent for non-essential communications, by contacting us using the details below. Certain information cannot be deleted while your account is active or while we are under a legal obligation to retain it (for example, KYC and transaction records).

7. Cookies

Our website uses cookies and similar technologies to keep you signed in, remember preferences, and understand how the site is used. You can control cookies through your browser settings; disabling them may affect some site functionality.

8. Children's privacy

Our Services are intended for use by adults operating a retail or distribution business and are not directed at children under 18. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy on this page with an updated “Last updated” date.

10. Contact us

For questions about this Privacy Policy or to exercise your rights, contact us at chetan@sonipe.com or +91 98113 36551. Our registered office: 4th Floor, E-57, Sector-63, Gautam Buddh Nagar (Noida), Uttar Pradesh, 201301, India.