Privacy Policy

Thank you for showing interest in Canara UPI Application (“Canara ai1Pe” or “App”). We value the trust you place in us. We are committed to protecting your privacy. This privacy policy (‘Privacy Policy’) explains how we collect, use, process, store, transfer, disclose and share your personal information. This Privacy Policy applies to your access and use of our App as further described in our Canara ai1Pe Terms and Conditions available on our App. By downloading and using our App, you agree to be bound by this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use or access our App. By mere use of or access to our App, you expressly consent to our collection, use, process, storage, transfer, sharing and disclosure of your personal information in accordance with this Privacy Policy. This Application collects some Personal Data from its users.

This Privacy Policy explains:

• The type of information that we collect
• How we may use this information
• How and to whom we may disclose such information
• How we protect such information
• How you may access or modify your personal information

2. Types of Information We Collect

We process your personal and financial information that you provide when you interact with us, such as when you download, transact or use or attempt to transact or use, register or access links available, on our App. These categories of personal and financial information, including sensitive personal data or information, with your consent, where we process your personal information independently. We do so to ensure that you are provided a safe, efficient, smooth and seamless experience.

We collect the following personal and financial information:

• Your phone number
• Last six digits of Aadhaar number
• Customer relationship number (issued to you by biller/merchant)
• Other personal identifiable information that may be provided by you to use the App
• Financial and transaction information such as your bank account details
• Other financial transaction related information, including but not limited to, transaction details and history, withdrawal amount, payee details, OTP from bank or our App etc., log file information from application, software etc., metadata and other data
• Other financial information that may be provided by you to use the App
• Your device details like device identifier, SIM details
• Internet Protocol (IP) address and location data (for example, the IP address and location data from a mobile phone)
• Passwords, when you create an account-based relationship with us
• If you give us access to your contacts, we will collect those contacts for providing service to you. However, we do not store these contacts.
• We may use third party analytics services to collect information about how you use and interact with our App. However, no personally identifiable information or payment sensitive information is shared or used for such analytical purposes.

We also recommend checking the policies of your relevant bank and/or financial institution for their practices on collection and processing of personal information for payment transactions.

3. How We Use Your Information

We collect, process, use, store, transfer, disclose and share your information with your consent. By using the App and providing your personal information, you consent to the processing of your personal information in accordance with this Privacy Policy.General Use: In general, the information you submit to us is used either to provide services to you or respond to requests that you make. We may use your personal information for the following purpose:

• To send you a welcome message and to verify ownership of the mobile number provided when your user account is created
• To identify you as a user in our system
• To provide access to our App
• To facilitate the creation of and secure your user account
• To process payments and transactions on your behalf and on your instruction, send transaction information or intimation, other emails, communications and messages to you in relation to the payments, transactions, your instructions or services or products availed by you on the App or third-party links on the App;
• To provide improved administration of our App
• To notify you about updates to our App, payment reminders, bill details etc.
• To improve and customize the quality of experience when you interact with our App
• To send you administrative e-mails, messages or notifications, such as security or support and maintenance advice
• To engage with or contact inactive users of our App
• To analyse the data submitted/provided by you to resolve issues faced by you with respect to the usage of the App
• To send and allow third parties to send offers and promotional materials related to our App and/or products and/or services availed by you on the App
• To resolve disputes, meet legal obligations
• To run and advertise various schemes and initiatives run by us or our affiliates
• To provide various offers and personalised schemes for you; To create UPI number using customer mobile number if not already created for inward payment
• To research, analyse and develop our services or products
• To communicate with you, such as about changes in our services or this Privacy Policy
• To comply with the guidelines and laws as applicable. The User's personal data may be used for legal purposes in Court or in stages leading to possible legal action arising from improper use of this Application or related services.
• To enforce our Terms & Conditions or Privacy Policy

4. How We Share Your Information

We may share or disclose your information only as permissible under applicable laws and as per terms of this Privacy Policy. We may share your personal information in the course of providing services and processing your transactions and other instructions with different persons and entities such as financial institutions, merchants, service providers, other entities participating in a payment system, business associates, government and regulatory authorities, consultants, our affiliates and internal departments

We may share your personal information, on a need-to-know basis, for the following purposes:

• –Enabling Services for enabling the Services or products availed by you using the App or for running promotions, facilitating the Transactions between you and the relevant financial institution, Services or product providers or the merchant, as the case may be, or otherwise processing your instructions;
• Grievances for grievance redressal and dispute management related to the Services or products availed using the App or generally in relation to use of the App;
• Support to provide, improve, protect, and promote our App (such as third- party analytics tools to help us measure traffic and usage trends for our App), for security, analytics, research or sending you communications. These third parties will access your information only to perform tasks on our behalf and in compliance with this Privacy Policy;
• Fraud and Risk management for verification, investigation or prevention of frauds or to manage risks (including risk mitigation) or recover funds in accordance with applicable laws or for customer awareness and safety;
• Enforcing Rights We may also disclose personal information to enforce our policies, respond to claims that a posting or other content violates others’ rights, or protects anyone’s rights, property or safety.
• Compliance We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to:
• comply with the applicable laws;
• if required to do so by law or any government or regulatory or statutory authority, where in good faith we believe that such disclosure is permissible under applicable laws;
• prevent fraud or abuse of our name, brands, trademarks or such other rights belonging to us or our other users;
• law enforcement authorities, investigating agencies and entities or persons, to whom it is mandatory to disclose the personal information as per the applicable law, including upon receipt of a lawful access request from a governmental authority, or upon being directed to do so by a judicial institution/authority,
• courts, judicial and quasi-judicial authorities and tribunals, arbitrators and arbitration tribunals.

We may share some or all of your information in connection with or during negotiation of any merger, financing, acquisition or dissolution, collaboration, transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, your information may also be transferred as a business asset. If another entity acquires us or our business or assets, that entity will possess all your information collected by us and will assume the rights and obligations regarding your information as described in this Privacy Policy.

We have put in place appropriate technical, organisational and contractual safeguards to ensure that your information remains adequately protected in accordance with standards as required or equivalent to those under applicable law.

Stewardship of your data is critical to us and a responsibility that we embrace. We believe that our Users’ data should receive the same legal protections regardless of whether it’s stored on our servers or on their home computer systems or devices. We will abide by the following principles when receiving, scrutinizing and responding to government requests for our Users’ data:

Be transparent,

Protect all users, and

Provide trusted services.

Where your information is shared with financial institutions and their service providers, services or product providers or the merchants or any regulatory or government authorities, the use and processing of your information is governed by their respective policies and as per applicable laws. NBSL and NPCI ensures strict obligations for protection of your information are imposed on these entities, wherever applicable and to the extent possible/feasible for NBSL and NPCI. However, we do not accept any responsibility or liability for usage of your information by these third parties or their policies.

5. Storing of Information

• Data Retention: : Canara Bank maintains the records and information in a safe and secured manner. We retain the personal information we collect about you on our systems for as long as required for the purposes set out above and based on our retention policies, which may include retention beyond the expiry of our transactional relationship with you for the following reasons:
• as required to comply with any legal and regulatory obligations to which we are subject; or
• for the establishment, exercise, or defence of legal claims to the extent permitted under applicable laws.
• Data Storage: Personal Information collected or processed in accordance with this Privacy Policy is stored in electronic files and approved archives. The information is securely stored, and access is restricted to authorised personnel for authorised purposes only.
• No Warranty:Canara Bank takes commercially reasonable safeguards to help keep the information collected through our App secure and take reasonable steps (such as requesting a unique password or verifying the device) to verify your identity before granting you access to your account.
  Retention of Information in India. We may store, process and transmit information in locations in India. Information may also be stored locally on the devices you use to access our App. By registering for and using our App, you consent to the transfer of information to any part of India in which we, our affiliates or service providers maintain facilities and the use and disclosure of information about you thereto as described in this Privacy Policy.

We may store, process and transmit information in locations in India. By registering for and using our App, you consent to the transfer of information to any part of India in which we, our affiliates or service providers maintain facilities.

6. Security Measures

Canara Bank follows appropriate operational, physical, electronic, procedural, and technical safeguards against any unauthorized access or breach of data security to avoid any disclosure or loss or damage to the subjects of personal information. Some of the salient features of our information security controls are as follows:

• Use of firewalls, encryption and data leakage prevention technologies to protect information
• Audit of all vendors, affiliates and service providers and execution of non-disclosure agreements before availing their services
• Multiple levels of security safeguards via login/logout option and Canara ai1Pe lock feature ("Enable Screen Lock")

7. Your Choice

We process your Personal Information with consent. By using the Canara ai1Pe and/or by providing your Personal Information, you consent to the processing of your Personal Information by Canara ai1Pe in accordance with this Privacy Policy. If you consent to our processing of your personal information under this Privacy Policy, you can always withdraw your consent at any time by going to Settings in Canara ai1Pe application and click on “Deregister/Revoke Your Consent”. Please note, however, that this may prevent us from effectively providing some or all services to you and we may continue processing your personal information for purposes required under applicable law (such as regulatory reporting).
Where we process your personal information on behalf of banks or other financial institutions as a payment system provider/ Third Party Application Provider, you may approach the relevant bank or financial institution for exercising your choices highlighted above.

8. Your & Third-Party Information

You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails and messages between you and us, at all times. We are not responsible for any third-party functionality, privacy or security policies which you are bound by. If you share/disclose to us any personal or other information relating to other people or entities, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

9. Changes to the Privacy Policy

Canara Bank reserves the right at our sole discretion to change, modify or amend this Privacy Policy, at any time without providing a prior notice to you of the same. We would recommend to periodically review this Privacy Policy and keep yourself updated with any changes or modifications made herein. You shall be deemed to have accepted our changed, revised or modified Privacy Policy if you continue to use our App or avail our Services post revision or modification in this policy and the last changed, revised or modified Privacy Policy shall be applicable to you.

10. Governing Law and Jurisdiction

This Privacy Policy and the relationship between you and Canara Bank shall be governed by the laws of the India as applied to agreements made, entered into, and performed entirely in India, notwithstanding your actual place of residence. The appropriate courts and forums located at Bengaluru, Karnataka shall have exclusive jurisdiction in any proceedings arising out of the use of App, this Privacy Policy. Canara Bank may, however, in its absolute discretion commence any legal action or proceedings arising out of this Privacy Policy in any other court, tribunal or other appropriate forum and you hereby consent to that jurisdiction

11. Communications

We may periodically send you communications in-app or through other channels, including but not limited to, your mobile phone/contact number, WhatsApp or other social media platforms or email.

12. Contact Information

Any correspondence sent to Canara Bank is treated as record and will be retained as required by law. The name and address details of senders are neither added to a mailing list nor disclosed to third parties without consent of the sender unless required by law. Email messages may be monitored by Canara Bank for processing the requests, system troubleshooting and other maintenance purposes.
For any further queries and complaints related to privacy, or exercising your rights associated with your personal data, you can reach us at our email address: ai1pe@canarabank.com