GLOBAL PRIVACY NOTICE

4.1. We have set out below, in a table format, a description of all the ways we may process your Personal Data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

4.2. Your data will only be disclosed for the purposes identified in this privacy notice (as may be updated from time to time) unless a law or regulation specifically allows or requires otherwise. We require all third parties to respect the security of your Personal Data and to treat it in accordance with the applicable law.

4.3. Juspay allows you to access certain services of Juspay, which may involve artificial intelligence systems, including large language models (LLMs), AI-powered assistants, and third-party AI platforms integrated via Model Context Protocol (MCP) connectors or similar secure interfaces.

4.4. When a customer enables this feature, Juspay's MCP server receives queries, instructions and associated input data transmitted by the third-party AI platform on customer's behalf for the purpose of generating responses to such queries. Juspay shall process such data for the purpose of responding to the request initiated by the customer, as well as for the purpose of debugging, monitoring, performance optimization and enhancement in relation to this feature. Juspay shall transmit only such limited data to the AI platform as is strictly necessary and proportionate to fulfil the specific request raised by the customer.

5.1. Where we need to collect Personal Data by applicable law or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with access to our products and services). In this case, we may have to cancel a product or service you have with us, but we will endeavor to notify you if this is the case at the time.

6.1. We use different methods to collect data from and about you, including, but not limited to:

6.2. Direct interactions. You may give us your identity data, contact data and financial data by filling in forms or corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:

6.3. Automated technologies or interactions. As you interact with our website or avail our services, we automatically collect technical data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies, pixels, server logs and other similar technologies.

6.4. Contact and transaction data from providers of technical, payment and delivery services based inside and outside your location country

7.1. We provide you with choices regarding our use of your Personal Data for marketing and advertising purposes. We have established the following Personal Data control mechanisms:

7.2. You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at any time using the details stated in section 16. Please note that the opt out will not affect the lawfulness of processing that has taken place before the opt out.

8.1. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

9.1. Some of our external third parties are based outside your country and the European Economic Area (EEA), so their processing of your Personal Data will involve a transfer of data outside of your country.

9.2. Whenever we transfer your Personal Data out of your country, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

10.1. We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorised way, altered, disclosed or being unavailable. In addition, we limit access to your Personal Data to those employees, agents, professional advisers, contractors, and other third parties who have a need to know. They will only process your Personal Data on our instructions, and they are subject to a duty of confidentiality. We periodically review all privacy and security policies and update them, when necessary, in line with changes in data protection laws or when new technologies are introduced into our business.

10.2. Where the introduction of new technologies results in a high risk to your Personal Data, we may, where required by applicable law, perform a data protection impact assessment and will only proceed if we are able to mitigate any identified high risks.

11.1. We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

11.2. In some circumstances, we may anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

12.1. Once the data retention periods above expire, digital records are permanently destroyed or fully anonymised if retained for statistical or research purposes. In this case, all personal identifiers are removed permanently so individuals cannot be identified.

13.1. You may have the following rights in relation to the personal data processed by us, depending on the jurisdiction within which you reside:

13.2. If you would like to exercise any of these rights, please contact us via the details set forth under section 16. If you are not satisfied with how we process your request or are otherwise aggrieved by the manner in which we process your personal data, you may have a right to appeal our decision or make a complaint in the following manner:

14.1. When we act as a Data Processor and process data on behalf of our customers, any request you submit regarding your data will be forwarded to the respective customer(s).

15.1. Policies and procedures are reviewed and compared to the requirements of applicable laws and regulations at least annually, and whenever changes to such laws and regulations are made, privacy policies and procedures are revised to conform with the requirements of applicable laws and regulations.

15.2. We may update this privacy notice from time to time to reflect changes in our practices or to comply with applicable laws. We will notify you of any material changes to this privacy notice by posting the revised policy on our website or by sending you a notification. The revised policy will be effective as of the date it is posted. By continuing to use our services after we make changes to the privacy notice, you agree to be bound by the revised notice.