Privacy Policy

1. Who is who

RupeeBeat is a software service (website, web app and Android app) that finance companies, chit/pigmy/thandal lenders and similar businesses ("Customers") use to record loans and daily collections.

For the borrower and loan records a Customer enters, the Customer decides why and how the data is used and is the Data Fiduciary; Code2Codes acts as its Data Processor and handles the data only on the Customer's instructions. For the accounts of Customer staff, website visitors and demo-request leads, Code2Codes is the Data Fiduciary.

RupeeBeat is a record-keeping and collection tool. It is not a lender, a payment gateway or a Regulated Entity under RBI rules, and it does not lend money, collect payments online or move funds.

2. Data we handle

• Staff account data: name, phone number, role, encrypted password (bcrypt hash, never the password itself), language preference, last login time.
• Borrower and loan data entered by the Customer: name, phone, address, loan and repayment details, collection receipts, notes. We do not ask for or store Aadhaar, PAN, bank passwords, card numbers or OTPs.
• Device and location data from the Android app, only for field agents: a device identifier used to bind an agent to one phone, the phone's approximate/precise location at the moment a collection or visit is recorded (to verify the agent was at the borrower's address), and the device clock (to detect time tampering).
• Camera/photos only if the Customer enables proof-of-visit features; nothing is read from your gallery, contacts, SMS or call log.
• Usage and technical data: IP address, browser/app version, request logs and error logs (kept 30 days), and an audit trail of who changed which record and when.
• Website analytics: Google Analytics 4 (measurement ID G-H6H3LMEEFF) records page views and button clicks on the public website using cookies or similar identifiers. We do not send names, phone numbers or borrower data to Google Analytics.
• Enquiry data: name, company, phone and message you submit in the demo/contact form or send to us on WhatsApp or email.

3. Why we use it (purposes)

• To provide the service: sign-in, collection queues, receipts, reports, approvals, plan and usage tracking.
• To keep money records trustworthy: fraud and misuse detection, audit logs, geofence and clock checks.
• To secure the service: login throttling, lockouts, abuse prevention, incident investigation.
• To respond to you: demo requests, support, plan-upgrade requests received on WhatsApp, important service notices.
• To improve the website and product using aggregate analytics.
• To meet legal obligations, such as responding to lawful orders and keeping tax records.

4. Legal basis and consent

We process staff and borrower data for the legitimate purposes above, on the basis of the Customer's agreement with us and, where the DPDP Act requires, the consent of the person concerned or the "certain legitimate uses" the Act recognises. Location is collected only while a field agent records a collection or visit, after the Android permission prompt; you can refuse or withdraw the permission in phone settings, but location-checked collection will then not work.

Customers are responsible for giving their borrowers any notice and obtaining any consent that the law requires before entering their data into the service.

5. Sharing

We do not sell personal data and do not use it for advertising. We share it only with:

• The Customer whose workspace the data belongs to (its admins and managers see their own company's data only).
• Infrastructure and service providers who help us run the service, such as our server host and Google (Analytics), under confidentiality and security obligations.
• Courts, police or government authorities when required by law, or to protect rights and safety, after reasonable review of the request.
• A buyer or successor if the business is transferred, with the same protections.

6. Where data is stored and security

Data is stored on servers in India. We use HTTPS in transit, hashed passwords, role-based access, per-company data separation, login lockouts, tamper-evident audit logs and daily backups. No system is perfectly secure; if a personal data breach occurs we will notify the affected Customer and, where required, the Data Protection Board of India, without undue delay.

7. Retention and deletion

Records are soft-deleted by design: a deleted record is hidden and can be restored by Code2Codes support for a limited time, because accidental deletion of loan records can cause real financial harm. Active data is kept while a Customer's account is live. After a Customer ends service we keep data for up to 90 days for export and restoration, then delete or irreversibly anonymise it, except what we must keep for law, tax or dispute reasons (for example billing records for up to 8 years). Request logs are kept for 30 days. Backups are overwritten on a rolling basis.

See the Data Deletion page for how to ask for deletion.

8. Your rights

Under the DPDP Act you may: get a summary of the personal data we process about you; ask us to correct, complete or update it; ask us to erase it; withdraw consent; nominate someone to exercise rights if you die or become incapacitated; and have your grievance resolved. For borrower data, please contact the finance company that holds your loan first; we will help them act on your request.

Write to kowsikc2c@gmail.com. We will acknowledge within 72 hours and respond within 30 days.

9. Children

RupeeBeat is for businesses and their adult staff. We do not knowingly collect data of anyone under 18. If you believe a child's data has been entered, tell us and we will delete it.

10. Cookies

The website uses essential storage (your language and login) and Google Analytics cookies. You can block or delete cookies in your browser, or opt out using the Google Analytics opt-out add-on; the site continues to work.

11. Changes to this policy

If we make material changes we will post the new policy here with a new date and, for existing Customers, notify them through the app or WhatsApp.

12. Grievance Officer and contact

Grievance Officer, Code2Codes. Email: kowsikc2c@gmail.com. Phone/WhatsApp: +91 90424 77789. Address: Code2Codes, Tamil Nadu, India.

We aim to resolve complaints within 30 days. If you are not satisfied, you may approach the Data Protection Board of India as the DPDP Act provides.