Privacy Policy

1. Introduction

This Privacy Policy explains how BeepnPay Enterprises Private Limited ("Beep AI", "we", "us", "our") collects, uses, stores, and protects your personal data when you use the Beep AI application and services. By using Beep AI, you consent to the practices described here. This policy is published in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable rules.

2. Company & Contact Details

Beep AI is operated by BeepnPay Enterprises Private Limited, a company incorporated in India, with registered office at Ground Floor, C3A/62A, B-1, Janak Puri, New Delhi 110058, India. For any privacy-related queries, contact us at support@beepnpay.com.

3. Grievance Officer

In accordance with the DPDP Act and the Information Technology (Intermediary Guidelines) Rules, the Grievance Officer is:

• Name: Sahil Raj Singh
• Designation: Founder & CEO
• Email: support@beepnpay.com

We will acknowledge grievances within 48 hours and resolve them within the timelines prescribed under applicable law.

4. Data We Collect

We collect the following categories of personal data:

• Identity & contact data: name, phone number, email address, date of birth
• Account data: login credentials via phone OTP, and where enabled, Google or Apple sign-in identifiers
• Transaction data: booking details, travel and commerce preferences, and records of completed transactions
• Usage data: your interactions with the app, search queries, conversational inputs, and app activity
• Device & technical data: device identifiers, IP address, operating system, and app performance data

We do not collect or store your card, UPI, or bank credentials. All payments are processed by our third-party payment processor, and sensitive payment credentials are handled directly by them.

5. How We Use Your Data

We use your data to:

• create and manage your account;
• understand your intent and complete bookings and transactions on your behalf;
• pre-fill booking details for a faster experience;
• provide customer support;
• improve our services;
• detect and prevent fraud; and
• comply with legal obligations.

6. Legal Basis

We process your data on the basis of your consent, the necessity to perform the services you request, and our compliance with legal obligations under Indian law.

7. Sharing & Disclosure

We share data only as necessary to deliver our services, with:

• travel inventory partner(s) to fulfil flight and hotel bookings;
• our third-party payment processor to complete payments; and
• service providers who support our operations under strict confidentiality obligations.

We share data with law enforcement or regulators only where legally required. We do not sell your personal data.

8. Payment Processing

All payments are processed through a third-party payment processor. When you pay by card, your card details are entered directly into the payment processor's secure checkout and are never stored on Beep AI's servers. UPI payments are completed within your chosen UPI application. Beep AI does not store card numbers, CVV, UPI PINs, or bank credentials.

9. Data Security

We use industry-standard security measures to protect your personal data, including encryption of data in transit and at rest, access controls, and secure authentication. While no method of transmission or storage is completely secure, we take reasonable steps to protect your information and to respond promptly to any security incident in accordance with applicable law.

10. Data Storage

Your personal data is stored securely with reputable cloud infrastructure providers. Where your data is processed or stored outside your country of residence, we take reasonable steps to ensure it is handled in accordance with this policy and applicable law.

11. Data Retention

We retain personal data only as long as necessary:

• Account and identity data: for the duration of your account, and up to 3 years after deletion, for tax and regulatory compliance
• Transaction and booking records: 7 years from the transaction date, as required under the Income Tax Act, 1961 and GST laws
• Conversational and usage data: 12 months from collection, after which it is anonymised or deleted
• Consent records: for the duration of your account and 1 year after deletion

12. Account & Data Deletion

You may request deletion of your account and associated personal data at any time by emailing support@beepnpay.com with the subject "Delete My Account." We will verify your identity and process your request. Upon deletion, we remove your identity, contact, conversational, and usage data from our active systems. Certain transaction records are retained for the legally mandated periods described in Section 11, solely for legal compliance, and are securely deleted thereafter. Full details are available on our Account Deletion page.

13. Your Rights

Under the DPDP Act, you have the right to access, correct, and erase your personal data; the right to withdraw consent; the right to grievance redressal; and the right to nominate another individual to exercise your rights in the event of death or incapacity. To exercise any right, contact support@beepnpay.com.

14. Children's Privacy

Beep AI is intended for users aged 18 and above. We do not knowingly collect data from minors. If we learn that we have collected data from a person under 18, we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the app or by email. Continued use of Beep AI after changes constitutes acceptance of the revised policy.

16. Governing Law

This Privacy Policy is governed by the laws of India, and any disputes are subject to the exclusive jurisdiction of the courts of New Delhi.