Privacy Policy for GimBooks Pay App

  EFFECTIVE DATE: 7th October, 2025
  This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use   the Service and tells You about Your privacy rights and how the law protects You.
  We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of   information in accordance with this Privacy Policy.
  Gim Info Solutions Private Limited (“Company”).
  ("GimBooks Pay," "we," "us," or "our") is committed to protecting the privacy of our users ("User" or "you") of the GimBooks Pay   Android application ("App"). This Privacy Policy applies to the App and all products and services offered by Gim Info Solutions  Private Limited.

1. Information Collection and Use
    We collect three types of information from Users:
          1. Personal Information: We may collect personal identification information from users in various ways, including, but not                limited to, when users install our App, register on the App, respond to a survey, fill out a form, and in connection with                other activities, services, features, or resources we make available on our App. The specific personal information we collect                may include your name and phone number. We collect this information only with your consent. 
          2. Information from Signzy: The Company allows you to create an account and log in to use the Service through Digilocker.                We collect Adhar information, and PAN details from Digilocker. Signzy is a third party that provides PII (Personal Identifiable                Information). 
          3. How We Use Collected Information: We may collect and use Users' personal information for the following purposes: 
                        Personalized User Experience: We may use information in the aggregate to understand how our Users as a group                         use the services and resources provided on our App.
                        App Improvement: We may use information to improve our App, including its functionality, Customer Support & User                         Experience.
                        Communication: We may use your email address or phone number to send information and updates pertaining to                         the App, respond to inquiries, questions, and/or other requests. We use your contact number to send OTP, and                         personalise your experience through WhatsApp communication.

  Special Data Collection for BBPS:   1. In order to provide you with seamless Bill Payment services via the Bharat Bill Payment System (BBPS), we collect the following        additional data points:
         1. Biller Identification Details: Biller Name, Biller Category (e.g., Electricity, Gas, Telecom), and Biller Account Identifiers              (e.g., Customer ID, Service Number, K-Number, Registered Mobile Number).
          2. Bill Details: Amount due, due date, bill-fetch metadata, and other biller-specific information.
    2. Data Sharing and Disclosure (BBPS Specific):
        We are required to share your data with third parties to successfully process your BBPS transactions. By using this         service, you explicitly consent to the sharing of your data with:
          1. BBPS Partner (MobiKwik): Your Biller Identification Details and Transaction Information are shared with our BBPOU               partner, MobiKwik, for the mandatory processing, validation, and execution of the payment under the BBPS framework.
          2. Billers and NPCI BBPS: Transaction data is necessarily shared with the respective Biller and the BBPS Central Unit               (NBBL) for final reconciliation, settlement, and compliance reporting.
          3. Purpose: The sole purpose of this data sharing is the execution and completion of your bill payment transactions,               complaint handling, and regulatory compliance as mandated by the Reserve Bank of India and NPCI.
    3. Data Security and Localization Compliance:
         
In adherence to the extant guidelines issued by the Reserve Bank of India (RBI) and NPCI/NBBL, all payment transaction data          processed through our BBPS partnership is securely stored within India. We and our BBPOU partner implement industry-         standard encryption and security protocols as prescribed by the BBPS security standards to protect your confidential          information from unauthorized access or disclosure.

2. Protection of Information
     We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized      access, alteration, disclosure, or destruction of your personal information, username, password, transaction information, and data      stored on our App.

     We follow PCI-DSS guidelines to protect users PII like credit card details, credentials & application data using strong encryption      while storing and transmitting information.

3. Sharing Your Personal Information
    We do not sell, trade, or rent Users' personal identification information to others. We may share generic aggregated demographic     information not linked to any personal identification information regarding visitors and users with our business partners, trusted     affiliates, and advertisers for the purposes outlined above.

4. Permissions Required
  
  GimBooks Pay requires several permissions to function effectively in protecting you from online threats. Here's a breakdown of     each permission and why it's necessary:

            Post Notification: Granting notification access permission on your device is essential. Important app related notifications are             shared using this permission.

           Camera Permission: GimBooks Pay uses camera permission to perform selfie verification as a part of KYC process to             protect your transactions. This does not share your exact location with anyone. By understanding general trends in phishing             attempts or malware distribution across different regions, Truelink can improve its threat detection capabilities and keep you             better protected.

5.  Law enforcement
     Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in      response to valid requests by public authorities (e.g. a court or a government agency).

6. Other legal requirements
     The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

           - Comply with a legal obligation
           - Protect and defend the rights or property of the Company
           - Prevent or investigate possible wrongdoing in connection with the Service
           - Protect the personal safety of Users of the Service or the public
           - Protect against legal liability

7. Changes to this Privacy Policy
     We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this      page.
     We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the      "Effective Date" at the top of this Privacy Policy.
     You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they      are posted on this page.

8. CONTACTING US
    In order to resolve a complaint regarding the Services or to receive further information regarding the use of the Services, please     contact us at:
    Email: You can contact us via email at support@gimbooks.com . Please feel free to send us an email with your queries, feedback,     or requests, and we'll make sure to respond to you promptly.
    Website: Alternatively, you can visit our website at https://www.gimbooks.com/gimbooks-pay/ for additional information, updates,     and resources. Our website serves as a central hub where you can learn more about our services, company, and policies.
    Feedback Form: We value your input and strive to continuously improve our services. If you prefer to provide feedback or submit     inquiries through a form, you can do so by visiting the "Contact Us" page on our website. Simply fill out the form with your details     and message, and we'll get back to you as soon as possible.
    Social Media: Connect with us on social media platforms to stay updated on news, announcements, and events. You can find us     on Facebook, Instagram and Linkedin. Feel free to send us direct messages or engage with our posts.
    Customer Support: For immediate assistance or technical support related to our services, please reach out to our customer     support team. You can find contact details for our support representatives on our website or within the app. We're committed to     providing timely and effective support to address any issues you may encounter.
    Privacy Concerns: If you have specific concerns about your privacy or the handling of your personal data, please don't hesitate     to contact our privacy team. You can reach our privacy specialists by emailing support@gimbooks.com. Rest assured that your     privacy-related inquiries will be handled with the utmost care and attention.

    Office Address: If you prefer traditional correspondence or need to reach us by mail, you can send letters or packages to our     office address:
    GIM INFO SOLUTIONS PVT. LTD.
    Address: 2nd Floor, House, 106/3, Avanti Vihar Rd, Geetanjali Nagar, Sector - 3, Shankar Nagar,
    Raipur, 492001
    Chhattisgarh, India.

    We appreciate your feedback, and thank you for choosing GimBooks Pay. Your satisfaction and trust are of paramount importance     to us, and we're dedicated to providing exceptional service and support to meet your needs.

   Retention for Disputes
 
   We will retain specific transaction data, including the BBPS Transaction Reference Number and complaint logs, for a minimum     period mandated by NPCI and RBI (typically 8 years). This retention is mandatory to facilitate the investigation and resolution of     any payment disputes, chargebacks, or delayed refunds through the formal BBPS Dispute Management System.

    Disclaimer
 
   All information disclosed by You shall be deemed to be disclosed willingly and without any coercion. No liability pertaining to the     authenticity/ genuineness/ misrepresentation/ fraud/ negligence, etc. of the information disclosed shall lie with the Company nor     will the Company in any way be responsible to verify any information obtained from You.