Signin Signup
Sign In Sign Up
Data Retention & Secure Deletion Policy · effective 6 July 2026

How long we keep things , and how they are destroyed.

Written under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the RBI records maintenance circulars. Every dataset has a lifecycle, an archival window and a deletion routine — all of them are on this page.

How deletion works
4
Retention principles
4
Dataset categories
8yr
Financial ledgers, minimum
5yr
KYC files, minimum
180d
Profiles after account closure
1×/yr
Automated policy review
The four principles

What every backend operation is aligned to

The objective is that personal profiles and transaction metadata are retained only for as long as required to deliver requested services, complete regulatory audits, protect assets against fraud and comply with state legislation.

Strict purpose limitation

Data fields are collected exclusively to process financial transactions or satisfy explicit legal mandates.

Proportional storage

Profiles are kept inside active node environments only for the durations necessary to execute services.

Safeguarded infrastructure

Retained datasets are masked and stored behind enterprise firewalls using strict access matrices.

Permanent secure disposal

Once valid statutory storage windows expire, records are immediately purged or anonymised.

What is retained

Four categories, tracked explicitly

The scope covers customer and merchant profiles, admin access history logs, KYC records, transaction summaries across recharges, travel PNR loops, brand gift vouchers and Bharat Connect clearances, multi-gateway clearing receipts, customer care chat dispatches, security threat analytics, and geographic server replication backups.

A

Profile and contact data

Customer and merchant name strings, verified mobile numbers, electronic mailing endpoints, profile configurations, language settings and active session tokens.

B

Identity verification tiers

Full name matching parameters, date of birth metrics, PAN details, Officially Valid Document validation signatures and identity confirmation status tags. Strict redaction rule: Aadhaar-based verifications move exclusively through encrypted masking gateways, substituting placeholders like [Aadhaar Redacted] across code logs to protect raw identification digits.

C

Transaction and biller payloads

Unique transaction ID codes, order strings, billing values, payment modes (UPI, cards, net banking), bank reference confirmations, operator circle logs, central Bharat Connect reference strings and refund tracking balances.

D

Network and analytics logs

Login timestamps, logout triggers, IP tracking parameters, hardware device identifiers, operating system variants, browser signatures, database call metrics and error logs.

How long

The standard retention matrix

Active lifecycle on the left, archival window after account closure on the right. The longer numbers are statutory, not preference.

Data classification
Post-closure archive
Active lifecycle, and why
Customer and merchant profiles
Up to 180 days
Throughout the active usage lifecycle — the archive window covers final settlement reconciliations
Financial transaction ledgers
Minimum 8 years
Active processing and current audit years — to satisfy statutory income tax and corporate rules
KYC identification files
Minimum 5 years
Maintained throughout profile life — to comply with PMLA and RBI guidelines
Dispute and grievance cases
3 to 5 years
Active dispute tracking window — for legal tracking and audit purposes
Network telemetry and IP logs
1 to 3 years
Real-time security routing loops — for standard security analytics and tracking
How deletion works

Archived, then overwritten

Infrastructure controls

CLAUSE 7

Retained datastores are protected using multi-layered physical and technical controls: strict role-based access permissions, multi-factor dashboard validation and continuous encryption layers.

Archival framework

CLAUSE 8

Older operational logs are systematically zipped and moved into offline cloud vaults. Archived arrays receive the identical level of cryptographic protection applied to active client frameworks, ensuring zero data exposure.

Secure deletion mechanisms

CLAUSE 9

When data reaches its storage limits, automated deletion routines trigger. Files are overwritten using secure multi-pass procedures, and string files are cleared from hard storage so they cannot be recovered.

Account closure protocol

CLAUSE 10

On a termination request your profile is immediately deactivated and optional tracking data is removed. Core financial files and identity documents stay locked inside secure offline vaults until all statutory audit periods lapse under federal law.

Systemic legal holds

CLAUSE 11

If served with a formal preservation warrant by a court or a law enforcement bureau such as CERT-In, the automated deletion routines are immediately frozen for that specific data stream until the legal hold is officially lifted.

Continuous reviews

CLAUSE 13

This policy undergoes automated corporate reviews every calendar year, to remain aligned with changes in national digital regulations.

Accountability

Who this policy answers to

VD
Vaskar Das
Founder & Director

Signs off on retention windows and the deletion routines that close them.

"Keeping data longer than the law requires is not caution. It is just more to lose."

This policy defines operational timelines and architectural requirements for the lifecycle preservation, cold archival storage and secure cryptographic deletion of datasets — across web domains, customer dashboards, Android and iOS frameworks, merchant platforms, developer APIs and central operations interfaces.

Anpay is committed to retaining user data responsibly, protecting customer privacy and executing secure deletion routines when storage requirements fade, while maintaining full compliance with operational and legal obligations across the nation.

Effective 6 July 2026DPDP Act 2023IT Act 2000RBI records circulars
Correction or erasure

Exercise your rights over what we hold

Users hold full rights under the DPDP Act, 2023 to request correction of profile anomalies, or erasure of eligible promotional information. Each request is evaluated against existing legal record-keeping requirements.

Corporate statutory coordinates

Legal titleAnpay Ventures Private Limited
CINU63990WB2024PTC272006
GSTIN19ABBCA0218R1ZH
Registered office1st Floor, Narayanpur, Kumarganj, Balurghat, Dakshin Dinajpur, India
Effective date6 July 2026

Unified helpdesk channels

General bureauinfo@anpay.in
Support operationssupport@anpay.in
Settlement & reversalsdispute@anpay.in
B2B partnershipsbusiness@anpay.in
Voice hotline011 6929 0388
WhatsApp corridor+91 94341 16115
Service window11:00 AM to 11:00 PM IST, every day
Tell us your name
Enter the 10-digit number on your account
Enter an email we can reply to
Pick the one that fits best
0 / 1000
A few lines, please — enough for us to act on

Identity verification runs before any request is actioned. Never send your OTP, MPIN, card CVV, full card number or UPI PIN.