Privacy notice · draft of 24 October 2026, under review by counsel
What we collect, and why.
This notice is written to be read. It covers the website seedhapay.in, the pay pages, the sticker and link tools, the signed-in app and the bank API. SeedhaPay ("we") is based in Bhilai, Chhattisgarh. The legal entity operating the service will be named here before public sign-ups open. We move no money and hold no funds, so we never see your bank balance or your payment instructions; we see what you give us and what your bank statement shows when you choose to upload it.
If you only use the free tools
Making a code at /make runs in your browser. The IFSC and account number you type are not sent to us. A pay page or sticker you open is served like any web page: our hosting provider logs the address and browser of the request for security and for keeping the service up, and we count visits in aggregate. We set no advertising cookies and run no advertising trackers.
If you sign in
We collect your mobile number to sign you in with a one-time code, your name, and the details of the organisation you create: its kind, legal and trading names, PAN and GSTIN if you give them, and a logo address. For every bank account you register we store the IFSC, the account number, the account type, the holder's name as you give it, the mobile number for IMPS if you add one, and the code made from them. If you ask for verification we store the result and the name your bank holds for the account. We keep the address and device of each signed-in session so you can see and end them from Settings. If you upload a bank statement we store the credit rows it contains: date, amount, narration, the payer's name and reference, and the tags you add.
We use this to make and show your codes, to show the verified name on your pay page, to sign you in and keep your account yours, to match credits to your invoices, and to answer when you write to us. We do not sell personal data and we do not use it for advertising.
What is public, because you published it
A code exists to be paid into. When you register an account, its pay page shows the trading name, the logo, the account details, the verified name at the bank and the date of verification, and whether the code has open reports. The bank API serves the same information to apps that look a code up. Anyone with the code can see this, exactly as anyone with your invoice could. Remove the account in the app and the page stops showing it.
Who else handles it
Our website and application run on Vercel and our database on Neon, in Singapore. One-time codes are delivered by a messaging provider. Name verification, when it opens, is done by a provider that makes a ₹1 credit to the account you register and reports the holder's name; we send that provider the IFSC and account number only. Each of these handles data under a contract with us and only for the purpose above. We disclose data to authorities only when the law requires it, and we will tell you when we are allowed to.
How long we keep it
One-time codes expire in ten minutes and are deleted after. Signed-in sessions last up to 400 days or until you end them. Account and organisation details stay until you remove them or close your account. Uploaded credits stay until you delete the import. Records of reports, verifications and administrative actions are kept for seven years because they may be needed to resolve a dispute about a payment. Server logs are kept for thirty days.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask what personal data we hold about you, have it corrected or erased, withdraw consent for anything that depends on it, nominate a person to exercise these rights for you, and raise a grievance. Write to privacy@seedhapay.in; we answer within thirty days. If you are not satisfied you may approach the Data Protection Board of India. The service is for people aged eighteen and over and for businesses.
Changes
When this notice changes we will show the date here and, for changes that matter, tell signed-in users on their next sign-in. Contact: privacy@seedhapay.in.