This Privacy Policy describes how Payomatix Technologies Private Limited, operating Payomatix Payments Institute ("PPI", "we", "us", "our"), collects, uses, stores, and protects information when you use institute.payomatix.com and onlineacademy.payomatix.com (together, the "Platform"), including when you make a payment through our integrated payment gateway.
1. Information We Collect
a. Information you provide directly:
- Name, email address, phone number, and date of birth (collected at direct signup for age verification, per Section 2 of our Terms)
- Institution/college name, course/program of study, year of study
- Billing details (name, billing address, GSTIN if applicable for invoicing)
- Enrolment and assessment data (attendance, scores, capstone submissions)
- Communications you send us (support queries, feedback, NPS responses)
b. Payment information:
- When you make a payment, your card/UPI/net‑banking details are collected and processed directly by our payment gateway partner. PPI does not store your full card number, CVV, or banking credentials on its own servers. We retain only transaction metadata necessary for invoicing, reconciliation, and support (e.g., transaction ID, amount, status, last 4 digits of card where provided by the gateway).
c. Information collected automatically:
- Device/browser type, IP address, pages visited, time spent, referral source, and cookies (see Section 6).
2. How We Use Your Information
- To process enrolment, deliver course access, and issue certificates
- To process payments and generate invoices/receipts
- To communicate programme updates, schedule changes, assessment results, and support responses
- To generate cohort/outcome reports shared with partner institutions (in aggregated or named form as permitted by the relevant institutional agreement)
- To improve our programs, website, and learner experience
- To send programme‑related and, where consented, promotional communications (you may opt out at any time)
- To meet legal, regulatory, tax, and audit obligations
3. Legal Basis / Consent
Where you are a student enrolled through a partner institution, that institution is responsible for obtaining any institutional‑level consent required under applicable data protection law before sharing your data with us. Where you enrol directly, your consent is obtained at the point of registration/payment.
4. Sharing of Information
We share information only as necessary with:
- Payment gateway and financial partners, solely to process transactions
- Partner institutions, where you are enrolled through that institution, for enrolment, attendance, and outcome reporting
- Trainers/faculty, limited to what is needed to deliver and assess the program
- Service providers (LMS hosting, email/SMS providers, analytics) under confidentiality obligations
- Regulators or authorities, where required by law
We do not sell your personal data to third parties.
5. Data Retention
- Enrolment and certification records are retained for 10 years to support certificate verification.
- Payment/transaction metadata is retained as required for tax and audit purposes under applicable law.
- You may request deletion of other personal data we hold, subject to our legal retention obligations (see Section 9).
6. Cookies
The Platform uses cookies and similar technologies to keep you logged in, remember preferences, and understand site usage. You can control cookies through your browser settings; disabling some cookies may affect Platform functionality. We do not currently display a cookie consent banner on the Platform; by continuing to use the Platform, you consent to our use of cookies as described in this policy.
7. Data Security
We apply reasonable administrative, technical, and physical safeguards to protect your information. Payment processing is handled by a PCI‑DSS compliant gateway. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Data Breach Notification
In the event of a personal data breach that is likely to result in risk to your rights, we will notify affected users without undue delay and, where legally required, notify the relevant regulatory authority within the timeline prescribed under applicable law. Notification will include, to the extent known, the nature of the breach, the data affected, and steps being taken to mitigate impact.
9. Your Rights
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, where applicable), you may request to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data, subject to our legal/record‑keeping obligations
- Withdraw consent for promotional communications
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, per Section 14 of the Digital Personal Data Protection Act, 2023
To exercise these rights, contact us at institute@payomatix.com. If you are not satisfied with our response, you may escalate to our Grievance Officer at grievances@payomatix.com (see Section 13).
10. Children's Data
The Platform is intended for direct, self‑service use by individuals aged 18 and above. Learners under 18 may still use the Platform, but only where (a) a parent/guardian completes registration and payment on their behalf, or (b) they are enrolled through their university/institution under an institutional MoU — in which case that institution is responsible for obtaining any parental/guardian consent required before sharing the minor's data with us. We do not knowingly collect personal data directly from a child through independent self‑registration outside these two routes.
11. International Transfers
Payomatix Payments Institute is operated by Payomatix Technologies Private Limited, an affiliate/group company of Payomatix Technologies FZCO (Dubai). As a result, some data may be processed or accessed outside India, including in the UAE. Where we transfer personal data outside India, we do so under contractual safeguards with the receiving entity (such as data processing agreements), and we do not transfer data to a country restricted or notified as impermissible under the Digital Personal Data Protection Act, 2023.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via the Platform or by email.
13. Grievance / Contact
For privacy‑related queries, complaints, or grievances: Grievance Officer: Gauri Rathor, Program & Business Head Email: grievances@payomatix.com Phone: +91 9776769666 Address: Payomatix Technologies Private Limited, Shop No. UG‑06 to UG‑17, Swarn Plaza, Sector Swarn Nagri, Noida, Gautam Buddha Nagar, Uttar Pradesh, 201310
Response timelines (per the Consumer Protection (E‑Commerce) Rules): we will acknowledge your grievance within 48 hours of receipt and resolve it within one month from the date of receipt, save where a longer period is required due to the nature of the complaint, in which case we will inform you of the expected timeline.
See also our standalone Contact Us page.