PayKit privacy policy
Who we are
PayKit is run by PayKit. It lets venues, clubs and other businesses ("venues") take bookings and payments through the PayKit app, their booking websites and the PayKit admin panel. This policy explains what we collect when you use PayKit as a customer or as venue staff, why, and the choices you have.
What we collect
- Account: your mobile number, and the name and email you give us. If you sign in with Apple or Google, an account id and the email they share.
- Bookings: what you book (venue, court or slot, date and time), the price, discounts, cancellations and check-ins.
- Payments: the amount, status and transaction references. Card, UPI and bank details are handled by the payment gateway or your UPI app; we never see or store them. If you pay by UPI and upload a screenshot, we keep the screenshot and the UPI reference so the venue can check the payment.
- Venue accounts: for venue owners and staff, the venues you work for and your role there, and for owners the business's contact details, wallet recharges and the fees taken per booking.
- Device: a push notification token, the device type and app version, so we can send booking updates.
- Sign-in codes: one-time codes, stored scrambled and only for a few minutes.
- Server logs: IP address, time and the request made, kept for a short time for security and to fix problems.
The camera is used only to scan booking QR codes at the desk; images are not stored. Photos are read only when you choose a payment screenshot to upload. If you allow it, the app reads your approximate location to pick your city and show how far venues are; this happens on your phone and your location is not sent to us. We do not collect your location, contacts or files. We do not use advertising networks or advertising trackers. Some booking pages show PayKit's own banners; they do not use your personal data.
How we use it
To sign you in, make and manage your bookings, take and verify payments, issue GST invoices, send booking messages (SMS and notifications), run venues' prepaid wallets, prevent fraud and misuse, and meet legal duties. We do not sell your data or use it for advertising.
Who we share it with
- The venue you book with: your name, mobile number, booking and payment details, so they can run your booking. Each venue is responsible for how it uses them.
- Service providers: hosting (Amazon Web Services, Mumbai), the payment gateway (Easebuzz), SMS delivery (MSG91) and notifications (Expo, Google and Apple). They only process data for us.
- Authorities: when the law requires it.
How long we keep it
Your account is kept until you delete it. Bookings, payments and invoices are kept by the venue for as long as tax and accounting law requires, even after you delete your account, but without your name or number on the booking.
Deleting your account
In the app: Account, then Delete my account. Staff: staff mode, More, then Delete my account. Without the app, use the account deletion page or email us. We delete your name, number, email, devices and payment screenshots straight away; what venues must keep is described above.
Your rights
You can see and correct your name and email in the app, ask us for a copy of your data, withdraw consent by deleting your account, and nominate someone to act for you. If we do not resolve a complaint, you can take it to the Data Protection Board of India (Digital Personal Data Protection Act, 2023).
Security
Data is sent over HTTPS and stored on servers in India, with access limited to the people who need it. Payment gateway keys are stored encrypted.
Children
PayKit is not meant for children under 18 to use on their own. A parent or guardian should make the booking.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.
Contact
Questions and requests: [email protected] or WhatsApp/call +91 95037 99999