Privacy policy
What ShantiPe collects, why we collect it, who we share it with, and what you can ask us to do about it.
Template pending legal review. This policy is sample wording supplied with the site build. Replace the placeholder entity details in site.config.mjs, have the text reviewed by counsel, then set draftLegal: false to remove this notice.
01 Scope
This policy explains how DotMik Software Private Limited (“we”, “us”, “ShantiPe”) handles personal data when you visit this website or use the ShantiPe portal as a retailer, distributor, master distributor or state head.
It also covers data belonging to the end customers your counter serves, which we process on behalf of our banking and biller partners. Where we act on their instructions, their own privacy terms apply alongside this one.
02 What we collect
From you, as a channel partner
- Identity and KYC — name, date of birth, PAN, Aadhaar reference, photograph and shop or business proof.
- Contact — mobile number, email address and the address of your outlet.
- Financial — settlement bank account and IFSC, wallet balances, commission slab and transaction history.
- Device and session — IP address, browser and device type, and an encrypted session token.
- Location — the geographic coordinates of your device at the time of a transaction, where the service requires it (see section 4).
From the customer at your counter
- Aadhaar number or virtual ID, bank selection and a fingerprint scan, for AEPS transactions.
- Beneficiary name, account number and IFSC, or a UPI ID, for money transfer.
- Consumer or subscriber number and mobile number, for bill payment and recharge.
- Passenger name, age, gender and contact details, for travel booking.
From this website
- Anything you type into an enquiry form on this site — there is one on the home page and a longer one on the contact page.
- A single browser preference recording whether you chose the light or dark theme.
03 How we use it
We process the data above to:
- Create and verify your account, and establish your tier and the services approved for you.
- Carry out the transactions you initiate, and route them to the correct bank, biller or travel partner.
- Calculate, credit and reconcile commission and settlement.
- Meet KYC, anti-money-laundering, tax and record-keeping obligations imposed on us and on our partners.
- Detect and investigate fraud, misuse and suspicious transaction patterns.
- Provide support, and investigate complaints and chargebacks.
- Send operational messages about your account, transactions and service availability.
We do not sell personal data, and we do not use customer transaction data for advertising.
04 Aadhaar & biometric data
Biometric data is treated differently from everything else on this page.
- A fingerprint captured for AEPS is encrypted by the registered device itself before it reaches the portal. We never receive a raw fingerprint image.
- The encrypted capture is transmitted for the single authentication it was taken for, and is not stored by us afterwards.
- We retain only the transaction outcome and the reference numbers needed for audit and dispute resolution.
- Aadhaar-based authentication is performed strictly for the transaction the customer has consented to at your counter, under the UIDAI framework and our partners’ licences.
- Location is recorded alongside AEPS transactions because the operating rules for Aadhaar-enabled payments require the agent’s position to be logged. It is not used to track you outside transactions.
06 Retention
Transaction records, KYC documents and audit logs are retained for the period required by applicable financial-services record-keeping rules, counted from the end of your relationship with us. Where no statutory period applies, we keep data only as long as it serves the purpose it was collected for.
Encrypted biometric captures are not retained at all, as described in section 4.
07 Security
Measures in place include:
- Encrypted session tokens, with the token and its key held separately — one without the other is unusable.
- Automatic sign-out after two hours of inactivity on every screen behind the login.
- Access to each service is checked on our servers, so a service your account was not approved for cannot be reached by any route.
- Transport encryption for all traffic between your browser, our servers and our partners.
- Access to production data limited to staff who need it for support or compliance.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.
08 Your rights
Subject to our record-keeping obligations, you may ask us to:
- Confirm what personal data we hold about you, and give you a copy.
- Correct data that is inaccurate or out of date.
- Erase data we no longer have a lawful reason to keep.
- Withdraw a consent you previously gave, where processing rests on consent.
- Nominate another person to exercise these rights if you die or become incapacitated.
Write to info@dotmik.com. We will respond within the period required by applicable law. Note that we cannot delete transaction records we are legally obliged to retain, and doing so would also remove your own evidence in any future dispute.
10 Children
The portal is a business tool and is not intended for anyone under 18. We do not knowingly create channel-partner accounts for minors. Where a customer at your counter is a minor, the transaction is governed by the relevant bank’s or biller’s own rules.
11 Changes
We may update this policy as the platform, our partners or the law change. The “last updated” date at the top always reflects the current version, and material changes will be notified inside the portal.
12 Contact
DotMik Software Private Limited
Plot No. 165, Prem Nagar, Blk-G, PP-354, Najafgarh, South West Delhi, New Delhi, Delhi, India, 110043
Privacy: info@dotmik.com
Grievance Officer: Monesh Sharma — monesh@dotmik.com
Phone: +91 93558 80074 (Monday to Saturday, 10:00 – 19:00 IST)
If you are not satisfied with our response, the escalation path is set out in our grievance redressal policy.