Privacy Policy

Privacy Policy - Woohoo Xyz
Data Protection & Privacy Policy

Welcome to Woohoo Xyz, an independently operated Sole Proprietorship enterprise headquartered in India. Your privacy, confidentiality, and data integrity are fundamental pillars of our financial processing ecosystem.

This Privacy Policy explains the protocols governing how Woohoo Xyz collects, processes, verifies, utilizes, and safeguards your personal and transactional information when you access our portal or utilize our digital payment facilitation services. By browsing our website, initiating a transaction, or entering beneficiary information, you explicitly agree to the data collection and processing methodologies described in this comprehensive policy document.


Privacy Governance & Information Architecture

1. Scope & Categories of Collected Information

To execute financial clearing workflows smoothly, Woohoo Xyz collects two distinct classifications of data:

Personally Identifiable & Transactional Data: When you initiate an education fee payment, rent transfer, business invoice settlement, or vendor payout, you voluntarily furnish payer particulars (including full name, electronic mail address, Indian mobile telephone number) along with beneficiary clearing data (such as recipient bank name, branch IFSC code, bank account digits, re-entered confirmation account digits, and remittance purpose).
Automated Device & Telemetric Data: Our web infrastructure automatically logs non-identifying telemetry including your Internet Protocol (IP) address, browser client profile, operating system architecture, device model, referral URLs, session timestamps, and page interaction latencies to optimize system performance, eliminate checkout bottlenecks, and prevent automated bot intrusions.


2. Purpose of Information Processing & Operations

Woohoo Xyz utilizes collected information strictly for operational and regulatory necessities:

• Executing direct-to-bank settlement clearings across standard T+2 or T+3 business day banking cycles.
• Cross-verifying branch IFSC legitimacy against centralized banking directories prior to transaction dispatch.
• Generating instantaneous computerized PDF invoices and audit receipts complete with system reference identifiers.
• Dispatching synchronized transaction confirmations and operational alerts via EmailJS to your registered email address.
• Facilitating customer grievance redressal, dispute investigations, and interbank UTR tracking with payment aggregators.
• Complying with statutory anti-money laundering (AML), Prevention of Money Laundering Act (PMLA), and Know Your Customer (KYC) regulatory mandates in India.


3. PCI-DSS Compliance & Zero Payment Credential Storage

Woohoo Xyz operates under a strict zero-credential storage policy. We never capture, log, store, or possess access to your sensitive financial payment credentials—including complete 16-digit debit or credit card numbers, card security codes (CVV/CVC), card expiration dates, net banking passwords, or UPI personal identification numbers (PINs). All payment authorisations occur within isolated, encrypted iframes managed directly by certified PCI-DSS Level 1 compliant gateway aggregators (such as Razorpay).


4. Authorized Third-Party Service Providers

To maintain enterprise-grade processing continuity, Woohoo Xyz interfaces with trusted third-party technical providers:

Payment Gateway Infrastructure (Razorpay): Handles the transmission of encrypted payment tokens, banking gateway handshakes, and 3D-Secure card authentication flows.
Electronic Mail Delivery (EmailJS): Automates instant email dispatch of transaction receipts and dual-channel notifications.
Document Rendering Engines (jsPDF): Compiles real-time, client-side downloadable PDF receipts without transmitting billing records to external unauthorized databases.
Bank Verification Utilities: Queries public banking databases to validate IFSC routing codes before payments are locked.

All third-party partners are bound by strict contractual data confidentiality standards and regulatory processing norms.


5. Non-Disclosure & Prohibition on Commercial Data Trading

Woohoo Xyz operates on direct service fees and transparent settlement surcharges. We do not sell, lease, monetize, trade, or distribute your personal details, transaction histories, or email addresses to third-party marketing agencies, lead brokers, or advertising networks under any circumstances. Your information is shared exclusively with banking channels and gateway switches directly involved in clearing your authorized payment.


6. Statutory Disclosures & Law Enforcement Compliance

As a legally recognized Sole Proprietorship enterprise in India, Woohoo Xyz reserves the right to disclose personal and transaction records when mandated by lawful process, court summons, judicial decrees, or formal inquiries issued by authorized law enforcement, taxation, or economic intelligence agencies under the Information Technology Act, 2000, and related Indian financial regulations.


7. Data Retention Cycles & Infrastructure Security

Transactional logs, including payment identifiers, gross values, surcharge breakdowns, timestamp records, and verified IFSC entries, are retained in encrypted operational registers solely for statutory accounting, tax audits, and interbank dispute reconciliations. We utilize end-to-end Secure Sockets Layer (SSL/TLS) encryption, continuous network monitoring, and administrative access restrictions to shield your records against unauthorized access, accidental alteration, or electronic theft.


8. User Rights, Corrections & Remediation

Under applicable Indian data privacy regulations, you maintain the right to verify the accuracy of the contact and payment information we hold regarding your transactions, request updates to erroneous billing records, or seek formal clarification on our clearance protocols. If you identify a discrepancy in your transaction logs or require past clearance records for institutional proof, our administrative desk provides dedicated assistance.


9. Restriction on Minor Usage

Woohoo Xyz does not knowingly offer digital financial clearing services to individuals below the age of eighteen (18) years without parental or legal guardian supervision. Education and tuition settlements initiated on behalf of minors must be executed by adult parents, guardians, or authorized sponsors possessing legal capacity to contract and execute financial instruments under Indian law.


10. Modifications to Privacy Standards

Woohoo Xyz reserves the prerogative to revise, modernize, or amend this Privacy Policy periodically to reflect technological changes, security enhancements, or statutory revisions in Indian financial legislation. Any amendments become effective immediately upon being posted on this webpage. Continued use of our portal following updates denotes explicit acceptance of the revised privacy framework.

WOOHOO XYZ