Privacy Policy

1. Introduction

This Privacy Policy explains how BeepnPay Enterprises Private Limited ("Beep AI", "we", "us", "our") collects, uses, stores, and protects your personal data when you use the Beep AI application and services. By using Beep AI, you consent to the practices described here. This policy is published in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable rules.

2. Company & Contact Details

Beep AI is operated by BeepnPay Enterprises Private Limited, a company incorporated in India, with registered office at Ground Floor, C3A/62A, B-1, Janak Puri, New Delhi 110058, India. For any privacy-related queries, contact us at support@beepnpay.com.

3. Grievance Officer

In accordance with the DPDP Act and the Information Technology (Intermediary Guidelines) Rules, the Grievance Officer is:

• Name: Sahil Raj Singh
• Designation: Founder & CEO
• Email: support@beepnpay.com

We will acknowledge grievances within 48 hours and resolve them within the timelines prescribed under applicable law.

4. Data We Collect

We collect the following categories of personal data:

• Identity & contact data: name, phone number, email address, date of birth
• Account data: login credentials via phone OTP, and where enabled, Google or Apple sign-in identifiers
• Transaction data: booking details, travel and commerce preferences, and records of completed transactions
• Travel documents: passport details, and PAN where a hotel requires it, that you provide for bookings
• Usage data: your interactions with the app, search queries, conversational inputs, and app activity
• Connected accounts (only if you choose to connect them): from Google, your Gmail messages and attachments, Google Calendar events and Google Contacts; from Microsoft, your Outlook mail, calendar and contacts, as described in Sections 6 and 7
• Voice data: your voice when you choose to talk to Beep AI, converted to text to answer you
• Location data: your device's location while you use the app, if you allow it, to find your nearest airport and suggest relevant flights; we keep only your latest location
• Notification data: a device token so we can send you booking updates, reminders and alerts you ask for
• Device & technical data: device identifiers, IP address, operating system, and app performance data

We do not collect or store your card numbers, CVV, UPI PIN, or bank login credentials. All payments are processed by our third-party payment processor, and sensitive payment credentials are handled directly by them. If you set up Reserve Pay, we store only the mandate reference and the bank name, last 4 digits and UPI ID, so we can show your saved payment options.

5. How We Use Your Data

We use your data to:

• create and manage your account;
• understand your intent and complete bookings and transactions on your behalf;
• pre-fill booking details for a faster experience;
• with your permission, read, search, organise, draft and send email and manage your calendar on your instructions, including reminders, alerts you set (for example, when a reply arrives) and trip suggestions from meetings or invitations in your mail and calendar;
• answer questions that need live information using web search;
• send you notifications you have asked for;
• provide customer support;
• improve our services;
• detect and prevent fraud; and
• comply with legal obligations.

6. Connected Accounts: Google

If you connect your Google account, Beep AI asks for these permissions:

• Gmail: read, search and organise your email (labels, archive, trash), create drafts, and send email on your behalf;
• Google Calendar: view, create, change and delete your calendar events;
• Google Contacts (read only): look up the people you ask Beep AI to email or invite.

We use this access only to do what you ask: read or summarise your mail, find a message or document, draft and send replies you approve, check your schedule, add or move meetings, remind you of meetings, tell you when a reply arrives, and suggest trips from meetings or invitations.

Beep AI never sends an email, deletes mail, or sends a calendar invitation or update to other people without your explicit confirmation. You can disconnect Google at any time in the Beep AI app or at myaccount.google.com/permissions.

7. Connected Accounts: Microsoft Outlook

If you connect Outlook, Beep AI asks to read your basic profile, read and manage your mail, send mail on your behalf, read and manage your calendar, and read your contacts. We use this access for the same purposes, and with the same confirmations, as described for Google in Section 6. You can disconnect Outlook at any time in the Beep AI app or in your Microsoft account settings.

8. How We Use Artificial Intelligence

Beep AI uses artificial intelligence to understand your requests and act on them. We send only the data needed for the request you make:

• OpenAI processes the text of your requests, and the email, calendar and document content needed to answer them. OpenAI does not use data sent through its API to train its models, and data sharing for model training is turned off for our account. OpenAI may keep API data for up to 30 days solely to monitor abuse, after which it is deleted.
• ElevenLabs processes your voice when you choose to talk to Beep AI, converting speech to text and Beep AI's replies to speech. Model training on our data is turned off.
• Our web search provider receives the search query when a question needs live information such as prices, news or places. Content from your email or calendar is never included in web searches.

We do not use your data, or allow these providers to use it, to develop, improve or train generalised artificial intelligence or machine-learning models.

9. Google API Services: Limited Use

Beep AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the user-facing features described in this policy;
• we do not use Google user data, whether raw, aggregated or derived, to develop, improve or train generalised artificial intelligence or machine-learning models, and we do not allow any third party to do so;
• we do not sell Google user data, use it for advertising, or transfer it to data brokers;
• we transfer Google user data to third parties only as needed to provide these features (the providers in Section 8), to comply with law, or with your consent;
• people at Beep AI do not read your Google user data, except with your consent for a specific item, where necessary for security purposes such as investigating abuse, to comply with applicable law, or when the data is aggregated and anonymised for internal operations.

10. Legal Basis

We process your data on the basis of your consent, the necessity to perform the services you request, and our compliance with legal obligations under Indian law.

11. Sharing & Disclosure

We share data only as necessary to deliver our services, with:

• travel inventory partner(s) to fulfil flight and hotel bookings;
• our payment processor, to complete payments;
• OpenAI, ElevenLabs and our web search provider, for the purposes described in Section 8;
• our notification provider, to send notifications;
• our cloud hosting provider, which hosts our servers; and
• other service providers who support our operations under strict confidentiality obligations.

Each receives only the data needed for its part. We share data with law enforcement or regulators only where legally required. We do not sell your personal data.

12. Payment Processing

All payments are processed through a third-party payment processor. When you pay by card, your card details are entered directly into the payment processor's secure checkout and are never stored on Beep AI's servers. UPI payments are completed within your chosen UPI application. Beep AI does not store card numbers, CVV, UPI PINs, or bank credentials; for Reserve Pay we store only the mandate details described in Section 4.

13. Data Security

We use industry-standard security measures to protect your personal data, including encryption of data in transit and at rest, access controls, and secure authentication. While no method of transmission or storage is completely secure, we take reasonable steps to protect your information and to respond promptly to any security incident in accordance with applicable law.

14. Data Storage

Your personal data is stored securely with a reputable cloud hosting provider, on servers located outside India. Where your data is processed or stored outside your country of residence, we take reasonable steps to ensure it is handled in accordance with this policy and applicable law.

15. Data Retention

We retain personal data only as long as necessary:

• Account and identity data: for the duration of your account, and up to 3 years after deletion, for tax and regulatory compliance
• Transaction and booking records: 7 years from the transaction date, as required under the Income Tax Act, 1961 and GST laws
• Conversational and usage data: kept while your account is active, and deleted when you delete your account
• Connected account access (Google and Outlook): kept until you disconnect the account or delete your Beep AI account, and deleted then
• Email, calendar and document content: processed to answer your request, and kept only where it appears in your conversation history, under the conversational data period above
• Consent records: for the duration of your account and 1 year after deletion

16. Account & Data Deletion

You may request deletion of your account and associated personal data at any time by emailing support@beepnpay.com with the subject "Delete My Account." We will verify your identity and process your request. Upon deletion, we remove your identity, contact, conversational, and usage data, and any connected Google or Outlook account, from our active systems. Certain transaction records are retained for the legally mandated periods described in Section 15, solely for legal compliance, and are securely deleted thereafter. Full details are available on our Account Deletion page.

You can disconnect Google or Outlook at any time in the Beep AI app; our access ends immediately. You can also remove access at myaccount.google.com/permissions or in your Microsoft account settings.

17. Your Rights

Under the DPDP Act, you have the right to access, correct, and erase your personal data; the right to withdraw consent; the right to grievance redressal; and the right to nominate another individual to exercise your rights in the event of death or incapacity. To exercise any right, contact support@beepnpay.com.

18. Children's Privacy

Beep AI is intended for users aged 18 and above. We do not knowingly collect data from minors. If we learn that we have collected data from a person under 18, we will delete it promptly.

19. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the app or by email. Continued use of Beep AI after changes constitutes acceptance of the revised policy.

20. Governing Law

This Privacy Policy is governed by the laws of India, and any disputes are subject to the exclusive jurisdiction of the courts of New Delhi.