Privacy policy

Last updated: January 1, 2026

FlexyPe Technologies Private Limited ("FlexyPe", "Company", "we", "us", or "our") values your trust and respects your privacy. We are committed to protecting your personal data in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act").

This Privacy Policy describes how we collect, use, store, disclose, and protect personal data when you access or use our website, products, and services, including FlexyPe Checkout, FlexyPass, and FlexyPe Cart (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope

This Privacy Policy applies to:

  • Merchants: Businesses using FlexyPe’s Services (Checkout, Pass, or Cart) to process orders.
  • Shoppers: End-users transacting on merchant websites powered by FlexyPe.
  • Visitors: Individuals visiting our website or interacting with our network.
  • Partners: Users interacting with FlexyPe for demos, support, partnerships, or marketing.

2. Information We Collect

We collect information to provide a seamless checkout experience and to power our visitor identification network.

2.1 Personal Data (Shoppers & Merchants)

Depending on your interaction with our Services, we may collect:

  • Identity Data: Name, mobile number (including OTP verification data), and email address.
  • Delivery Data: Shipping address, billing address, and pin code.
  • Transaction Data: Order details, transaction amount, and payment method preference (UPI, COD, Card, BNPL).
  • Technical Data: Device type, browser version, IP address, operating system, and session information.

Note: We do not store full card details or sensitive payment credentials. Payment data is processed securely by authorized payment gateways (e.g., Razorpay, Cashfree, PhonePe).

2.2 FlexyPass Data (Visitor Identification)

When FlexyPass is enabled on a merchant website, we process specific data to enable features like "One-Tap Login" and address autofill:

  • Network Identifiers: Encrypted identifiers (hashed values) that allow us to recognize a returning user across the FlexyPe merchant network.
  • Behavioral Signals: Session-level data and interaction patterns (e.g., cart abandonment) used to calculate "Intent Scores" and prevent fraud.
  • Status: Phone number verification status to ensure secure logins.

2.3 Information Collected Automatically

  • Cookies & Trackers: We use cookies, web beacons, and pixels to maintain user sessions, analyze trends, and administer the platform.
  • Usage Logs: Information about how you navigate the checkout flow, time spent on pages, and error logs to improve performance.

3. How We Use Your Information

We use personal data for the following lawful purposes:

  • Service Delivery: To facilitate the checkout process, process payments, and verify identities via OTP.
  • Network Benefits (FlexyPass): To recognize you across participating merchant websites, pre-fill your delivery details (subject to your consent/verification), and simplify login.
  • Fraud Prevention: To detect and prevent fraudulent transactions, reduce Return-to-Origin (RTO) rates, and block high-risk COD orders using our proprietary risk models.
  • Communication: To send order confirmations, shipping updates, and invoices via SMS, WhatsApp, or Email.
  • Improvement: To analyze usage patterns, fix bugs, and optimize the checkout experience.
  • Compliance: To comply with legal obligations, such as tax regulations and cyber security laws.

4. Data Ownership and Roles

To ensure compliance with the DPDP Act:

  • Merchant Data: For data collected on behalf of a Merchant (e.g., specific order details), the Merchant acts as the Data Fiduciary, and FlexyPe acts as the Data Processor.
  • FlexyPe Data: For data independently collected or generated by our Services (including FlexyPass network identifiers, aggregate risk scores, and behavioral insights), FlexyPe acts as a Data Fiduciary. We use this data to enable cross-website functionality and fraud protection.

We do not sell your personal data.

5. Data Sharing and Disclosure

We may share your information with trusted third parties to provide our Services:

  • Merchants: We share Shopper data (Name, Address, Order Details) with the specific Merchant you are buying from to fulfill your order.
  • Service Providers: We engage third-party processors for:
    • Payments: (e.g., Razorpay, PhonePe, Simpl) to process transactions.
    • Communication: (e.g., WhatsApp Business API, SMS Gateways) to send status updates.
    • Cloud Infrastructure: (e.g., AWS, Google Cloud) to store data securely.
  • Legal Requirements: We may disclose information if required by law, court order, or government agency for the prevention, detection, and investigation of offenses.
  • Corporate Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity, subject to this policy.

6. Cookies and Tracking Technologies

We use cookies to:

  • Maintain Sessions: Keep you logged in during the checkout process.
  • Enhance Security: Detect unusual activity to prevent account takeover.
  • Analyze Performance: Understand how users interact with our flows.

You can manage or disable cookies through your browser settings. However, disabling cookies may impact features like autofill and one-tap login.

7. Children’s Privacy

Our Services are strictly intended for individuals who are 18 years of age or older and are legally competent to enter into a binding contract under the Indian Contract Act, 1872. FlexyPe does not knowingly solicit, collect, store, or process personal data from minors.

If you provide any information related to a minor, you represent and warrant that you have the lawful authority to do so—either as a parent or a legal guardian—and that such disclosure complies with applicable data protection laws. FlexyPe reserves the right to verify such authority and may suspend or terminate access to our Services if we believe this provision has been violated.

8. Data Security

We implement robust technical and organizational measures to protect your data, including encryption and strict access controls.

9. Data Retention

We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

  • Operational Retention: We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
  • Transaction Records: Transactional data may be retained for a longer duration as required by tax laws and financial regulations in India.
  • Deletion: Once the retention period expires, or upon your valid request for deletion, we will securely delete or anonymize your data to ensure it can no longer be associated with you.

10. Usage of Other Websites

Our Service/Website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services, including the Merchant websites that utilize our checkout solutions.

11. Your Rights

Under applicable laws (including the DPDP Act), you have the right to:

  • Access: Request a summary of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data (subject to legal retention requirements).
  • Withdraw Consent: Withdraw your consent for specific processing activities.
  • Grievance Redressal: Lodge a complaint regarding our data processing.

To exercise these rights, please contact us at hello@flexype.io.

12. Grievance Redressal

When you contact us to share feedback, ask questions, or raise a complaint, we collect and store the personal information you provide to effectively address and resolve your inquiry. Any specific concerns regarding your Personal Information, the content on our Website, or disputes related to confidentiality and intellectual property rights should be promptly reported to our designated Grievance Officer using the details provided below. We are committed to redressing all such grievances within one (1) month from the date of receipt.

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of the Grievance Officer are:

Grievance Officer: Azeem Hussain
Company: FlexyPe Technologies Private Limited
Email: hello@flexype.io
Address: Bengaluru, Karnataka, India

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact us at: