Privacy Policy

1. Information We Collect

Paywize Forex Pvt Ltd (operating as Nimo Forex) collects the following categories of information to provide and improve our forex services:

Personal Information

• Full name, date of birth, and contact details (email address, phone number, postal address)
• Identity verification documents such as Aadhaar, PAN card, passport, and visa details as required for KYC compliance
• Photographs and selfies for identity verification purposes
• Bank account details and financial information for processing transactions

Transaction Information

• Details of forex transactions including currency type, amount, exchange rate, and date
• Forex card usage history, remittance details, and payment records
• Purpose of remittance or foreign exchange as required under FEMA regulations

Technical Information

• Device information, IP address, browser type, and operating system
• Usage data including pages visited, features used, and time spent on our platform
• Location data (with your consent) for branch locator and service delivery

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling forex transactions, card issuance, currency exchange, and remittance services
• Verifying your identity and conducting KYC/AML checks as mandated by the RBI and PMLA regulations
• Communicating with you regarding your transactions, account updates, and service notifications
• Improving our products, services, and user experience through analytics and research
• Sending rate alerts, promotional offers, and marketing communications (with your consent)
• Detecting and preventing fraud, unauthorised transactions, and security threats
• Complying with legal obligations, regulatory requirements, and reporting to the RBI and other authorities
• Responding to customer support requests and resolving disputes

3. Data Security

We implement industry-standard security measures to protect your personal and financial data:

• AES-256 encryption for data at rest and TLS 1.3 encryption for data in transit
• PCI-DSS compliance for all payment card data handling and storage
• Multi-factor authentication and role-based access controls for system access
• Regular security audits, vulnerability assessments, and penetration testing
• Secure data centres with physical and logical access controls
• Employee training on data protection and confidentiality obligations

While we strive to protect your information, no method of transmission or storage is completely secure. We encourage you to use strong passwords and report any suspicious activity immediately.

4. Cookies and Tracking Technologies

Our website and applications use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the website to function properly, including session management and security features.
• Analytics Cookies: Help us understand how visitors interact with our website, enabling us to improve our services and content.
• Functional Cookies: Remember your preferences such as language selection and currency display settings.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (only with your consent).

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

5. Third-Party Sharing

We do not sell your personal data. We may share your information with third parties only in the following circumstances:

• Regulatory Authorities: With the RBI, Financial Intelligence Unit (FIU-IND), and other government bodies as required by law.
• Banking Partners: With partner banks and financial institutions for processing transactions and card issuance.
• Payment Networks: With Visa, Mastercard, and other payment networks for card transaction processing.
• Service Providers: With trusted vendors who assist us in operating our platform, conducting KYC verification, and delivering services, bound by strict confidentiality agreements.
• Legal Requirements: When required by law, court order, or in response to a valid legal process.

6. Your Rights

Under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You can request a summary of your personal data that we hold and the processing activities performed on it.
• Right to Correction: You can request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data, subject to legal and regulatory retention requirements.
• Right to Withdraw Consent: You can withdraw your consent for marketing communications at any time by contacting us or using the unsubscribe link in our emails.
• Right to Grievance Redressal: You can raise a complaint with our Grievance Officer or escalate to the Data Protection Board of India.

To exercise any of these rights, please contact us at support@nimoforex.com.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations:

• KYC records are maintained for a minimum of 5 years after the business relationship has ended, as mandated by PMLA regulations.
• Transaction records are retained for a minimum of 10 years as per RBI guidelines.
• Marketing and communication preferences are retained until you withdraw your consent.
• Technical logs are retained for up to 12 months for security and analytics purposes.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you a notification through email or our application. We encourage you to review this policy periodically to stay informed about how we protect your information. The "Last updated" date at the bottom of this page indicates when this policy was last revised.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: