Privacy Policy

1. Overview & Scope

MitraHelp Technologies ("MitraHelp", "we", "our", or "us") operates the digital web and mobile portal https://mitrahelp.ifpcl.in/ providing Bharat Bill Payment System (BBPS) utility bill settlements, telecom recharges, retailer partner services, and commercial electronic appliances e-commerce.

This Privacy Policy explains how we collect, process, store, and safeguard your personal and transactional information in strict compliance with the Digital Personal Data Protection Act (DPDP Act, 2023), Information Technology Act, 2000, Reserve Bank of India (RBI) payment directives, and National Payments Corporation of India (NPCI) Bharat BillPay operating guidelines.

2. Information We Collect

We collect only the data necessary to provide seamless bill payment and e-commerce services:

Account & Identity Data

Full Name, Mobile Number, Email Address
Store / Shop Name (for Retailer & Distributor partners)
Business GSTIN / PAN (where required for commercial invoicing)
Login credentials (passwords stored using salted cryptographic hashes)

BBPS & Transaction Data

Consumer Numbers, CA Numbers, Electricity Account IDs
Biller IDs, Category codes, and dynamic parameter values
Payment reference IDs (`client_ref_id`, `eko_tid`, bank reference)
Wallet ledger records, cashback earned, and debit/credit history

E-Commerce Delivery Data

Delivery shipping address, pincode, landmark
Recipient contact phone number
Order items, quantity, warranty registration records

Technical & Device Data

Server-derived IP address (`source_ip`) for audit logs
Browser user-agent, device type, operating system
Security authentication cookies & Bearer tokens

3. How We Use Your Information

Executing Bill Payments & Recharges: Verifying bill parameters with NPCI BBPS biller operating units and fetching real-time dues.
Wallet Ledger Accounting: Debiting funds safely with atomic database locks and crediting merchant commissions upon confirmed settlement.
Order Fulfillment: Processing e-commerce orders for smart POS machines, barcode scanners, and home appliances with door-step courier delivery.
Fraud Prevention & Security: Preventing duplicate payment submissions (`client_ref_id` idempotency protection) and unauthorized access.
Regulatory Compliance: Maintaining audit trails mandated by RBI, NPCI, and tax authorities.

4. Bharat BillPay (BBPS) & FinTech Data Guidelines

MitraHelp acts as a verified technology interface and Agent Institution connected through authorized BBPS Operating Units (Eko / NPCI).

When you perform a bill fetch or payment, your consumer identifier is transmitted upstream over encrypted TLS connections solely to retrieve and settle your bill. We never store sensitive credit card CVV codes or Net Banking passwords. All Eko developer keys, HMAC-SHA256 signatures, and secrets are executed exclusively on our protected backend server and are never exposed to browser code or mobile applications.

5. Data Security & Encryption Standards

We deploy defense-in-depth infrastructure to protect your information:

TLS 1.3 Transport Encryption for all API traffic

HMAC-SHA256 Timestamped Signatures for Provider Requests

Row-level Transaction Locking against Duplicate Debits

Masked Account Display (`••••••4567`) in Public Views

6. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information to third-party advertisers. Information is disclosed only to:

Authorized BBPS Provider (Eko / NPCI): To process, route, and reconcile utility bill payments.
Logistics & Courier Partners: Only name, address, and phone number necessary for physical product delivery.
Law Enforcement & Regulatory Authorities: When formally required under applicable Indian laws, court orders, or statutory compliance.

7. Your Rights & Data Retention

Under the DPDP Act 2023, you hold the right to review your registered profile, correct inaccuracies, download transaction receipts, and request account closure. Transaction records are retained for the statutory period mandated by banking and tax regulations (typically 5 to 7 years) to support dispute resolution and audits.

MitraHelp

Contents