Applies to: ViralPe mobile apps (Android), web properties under viralpe.com and sub‑domains, and related services operated by ViralPe Sales and Services Private Limited (“ViralPe”, “we”, “us”).

Replace placeholders (CIN, address, names) before publishing.

1) Who we are

ViralPe Sales and Services Private Limited
CIN: U62013TS2024PTC188169
Registered Office: HD-015, WeWork RMZ Spire, Silpa Gram Craft village, Madhapur, Shaikpet, Hyderabad- 500081, Telangana
Email: welcome@viralpe.com
Grievance Officer:Shaji K R, Shaji.kr@viralpe.com, 9995830786, HD-015, WeWork RMZ Spire, Silpa Gram Craft village, Madhapur, Shaikpet, Hyderabad- 500081, Telangana

We comply with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and applicable rules. Where we integrate with payment partners, we rely on PCI‑DSS compliant gateways and do not store card PAN/CVV on our systems.

2) Scope

  • ViralPe Android app and web (app.viralpe.com and other sub‑domains)
  • Recharges, bill payments, vouchers, wallet features, referral links, KYC and fraud‑prevention checks
  • Our communications: email, SMS/OTP, WhatsApp, push, in‑app, IVR

Third‑party sites/SDKs are governed by their own policies.

3) Key definitions

  • Data Principal: you
  • Personal data: any data that can identify you
  • Sensitive data: financial information, KYC IDs, biometrics (if used)
  • Data Fiduciary: ViralPe
  • Processor: vendor processing data for us under contract

4) What we collect

a) Identity & Contact

Name, mobile (OTP), email, DoB, gender (if provided), referral code.

b) KYC (when required)

Govt IDs (e.g., PAN, masked Aadhaar e‑KYC), address proofs; liveness/selfie only if mandated.

c) Payments & Wallet

UPI VPA and bank details only where needed for refunds/cashback. We do not store card PAN/CVV.

d) Device & App

Device model/OS, app version, crash logs, IP address, identifiers (e.g., AAID).

e) Location (optional)

Approx/precise location for circle/pincode, nearby services, fraud‑prevention. You can disable in OS settings.

f) Usage

Screens used, clicks, session time, referrals, notification opens.

g) Camera (optional)

QR/barcode scan; document uploads for KYC/support.

5) How we use your data

  • Core services: recharges, bill pay, vouchers, wallet, refunds/cashback, history
  • Account & security: authentication, fraud monitoring, dispute resolution
  • Compliance: KYC/AML where legally required, tax/audit records
  • Product improvement & analytics: crash reports, performance
  • Support: troubleshooting, ticketing
  • Communications: transactional alerts; marketing only with your consent, which you can withdraw

7) Sharing & disclosures

We do not sell personal data. We may share with payment partners, recharge/biller aggregators and telecom/billers, KYC vendors, cloud/IT/DevOps, analytics and messaging providers, geo services, auditors/regulators/law enforcement when required. All processors are bound by contract and security obligations.

Sub‑processors. We use carefully selected service providers (sub‑processors) to deliver our services. The categories are described in this Policy. Our current list of sub‑processors is published at /legal/sub-processors and may be updated from time to time. We will provide in‑app or email notice for material changes (e.g., a new payment/KYC vendor).

8) Cookies, SDKs & identifiers

Used for login, security, performance, and referral attribution. You can reset AAID/limit ad tracking from device settings.

9) Retention

We retain data only as long as necessary for the above purposes and to meet legal and regulatory duties (e.g., transaction records typically up to 7–8 years). When no longer required, we delete or anonymize.

10) Your rights

  • Access, correct/update, delete/erase data not required by law
  • Withdraw consent for optional processing (marketing, location, contacts)
  • Nominate a person to exercise rights in case of death/incapacity
  • File a grievance (see below)

Use in‑app controls or email info@viralpe.com. We respond within statutory timelines.

11) Children’s data

We do not knowingly process data of children under 18 without verifiable parental consent, and we do not perform tracking/targeted advertising to children.

12) Security

We apply organizational and technical safeguards (encryption in transit, hardened infrastructure, access controls, logging, backups). Card credentials are not stored by us; our payment partners handle card data per PCI‑DSS/RBI requirements.

13) Account deletion & portability

Delete from Profile → Settings → Delete Account or email support from your registered email. We will delete or anonymize data not required for legal purposes and confirm completion. On request, we provide a copy of your basic profile and transaction history in a portable format, subject to legal constraints.

14) Grievance redressal & contacts

  • Grievance Officer (India): Shaji K R, shaji.kr@viralpe.com, 9995830786, HD-015, WeWork RMZ Spire, Silpa Gram Craft village, Madhapur, Shaikpet, Hyderabad- 500081, Telangana. (We acknowledge and decide within 15 days.)
  • Data Protection / Compliance: shaji.kr@viralpe.com
  • General Support: welcome@viralpe.com

15) Changes to this Policy

We will update this Policy from time to time. Material changes will be notified in‑app/on‑site or via email. The latest version will always be available here with an effective date and version history.

Version: v2.0 • Effective: 01 October 2025