Privacy Policy

1. Information We Collect

We collect information that you provide directly and data generated through your use of our services:

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services including bill payments, recharges, and remittance
• Process transactions and send related notifications
• Verify your identity as required by applicable financial regulations (KYC/AML)
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Communicate with you about updates, promotions, and support
• Comply with legal obligations and respond to lawful requests from authorities

3. Information Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Payment Processors: Cashfree (payment gateway), Khalti (Nepal bill payments) — only transaction data necessary to process your payment
• KYC Providers: Didit.me (identity verification) — your identity documents for verification only
• Legal Requirements: When required by law, subpoena, or government request
• Service Providers: Cloud hosting, email delivery, and SMS providers who process data on our behalf under strict confidentiality agreements

4. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS/SSL (HTTPS)
• Sensitive data at rest is encrypted using AES-256 encryption
• Payment card information is never stored on our servers — processed directly by Cashfree (PCI-DSS compliant)
• Access to personal data is restricted to authorized employees on a need-to-know basis
• Regular security audits and vulnerability assessments are conducted

5. Cookies & Tracking

We use essential cookies to:

• Maintain your login session
• Remember your country and language preferences
• Protect against CSRF attacks

We do not use third-party advertising cookies or tracking pixels. We may use basic analytics to understand service usage patterns.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years as required by financial regulations. After account deletion, we may retain certain data as required by law or for legitimate business purposes (fraud prevention, legal compliance).

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your data for certain purposes

To exercise any of these rights, please contact us at our contact page or email privacy@REMITNIX.com.

8. International Data Transfers

As we serve users in 14 countries, your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for all international data transfers, including standard contractual clauses and adequacy decisions where applicable.

9. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at our contact page or email privacy@REMITNIX.com.