Privacy Policy

This Privacy Policy applies to information collected through Orvion Fin — the website, dashboard, and any related services operated by NextGenAI. It covers information about your business, your authorised users, and, where relevant, the freelancers you pay. It doesn't cover third-party payout rails (PayPal, Airtm, or your freelancer's bank) once your payout instruction reaches them — each of those operates under its own privacy policy.

We collect information in three broad categories:

Account & verification information

• Company name, registered address, GST number, and PAN.
• Verification documents: GST certificate, PAN card, cancelled cheque, address proof, and certificate of incorporation.
• Authorised signatory name, email, phone number, and login credentials.

Transaction information

• Wallet top-up and balance history.
• Payout amount, currency, destination rail, and status.
• Freelancer payout details you enter (name, country, payout account or ID).

Usage information

• Log data such as IP address, browser type, device information, and pages visited within the dashboard.
• Support conversations and grievance tickets you raise with us.

We use the information above to:

• Verify your business and meet our know-your-customer (KYC) obligations.
• Process wallet top-ups and payouts, including currency conversion and fee calculation.
• Screen transactions for sanctions, fraud, and money-laundering risk.
• Provide support and respond to grievances.
• Maintain records required by RBI, FEMA, and other applicable financial regulations.
• Improve the reliability and security of the platform.

We process your information because it's necessary to perform our contract with you (running your wallet and payouts), to comply with legal obligations we're subject to as a payment facilitator, and, in limited cases such as service improvement, on the basis of our legitimate interest in keeping Orvion Fin reliable and secure — balanced against your rights, as described in Section 8.

We share information only where it's needed to provide the service or where the law requires it:

• Payout rails — PayPal, Airtm, and UPI receive the payout details needed to complete each transaction.
• Banking & payment partners — the banks and processors that move funds into and out of your wallet.
• Verification & screening providers — third parties that help us confirm KYC documents and screen for sanctions matches.
• Regulators & authorities — where required under RBI, FEMA, tax law, or a valid legal request.
• Service providers — cloud hosting and infrastructure providers who process data on our behalf, under confidentiality obligations.

We do not share your verification documents or wallet activity with any other business on Orvion Fin — access is scoped strictly to your own company account.

Data is encrypted in transit and at rest. Access to production systems and customer data is limited to personnel who need it to do their job, and is logged and reviewed. Verification documents are stored in access-controlled storage separate from day-to-day transaction data.

No system is completely immune to risk, and we describe what happens if something does go wrong in Section 13.

We retain account and transaction records for as long as your account is active, and for a period afterwards as required by applicable financial recordkeeping regulations — typically several years after an account closes. Once that retention period ends, we delete or irreversibly anonymise the data.

Subject to applicable law and our regulatory recordkeeping obligations, you can:

• Request a copy of the personal data we hold about your account and authorised users.
• Ask us to correct inaccurate information.
• Ask us to delete data we're not required to retain for legal or regulatory reasons.
• Withdraw consent for any processing that relies on consent, where applicable.

You can exercise these rights from your dashboard settings, or by contacting us using the details in Section 15. We'll respond within the timeframe required by applicable law.

When you enter a freelancer's payout details, you're providing us with limited personal data about them — name, country, and payout account or ID — solely to complete the payout you've instructed. We use this data only for that purpose and for the sanctions screening and recordkeeping described above.

You're responsible for having a lawful basis to share your freelancer's payout information with us, and for letting them know their payment details will pass through Orvion Fin to complete the transfer.

Our dashboard uses essential cookies to keep you signed in and to remember your preferences, and limited analytics cookies to understand how the product is used so we can improve it. We don't use third-party advertising cookies. You can control cookies through your browser settings, though some features of the dashboard may not work correctly without essential cookies enabled.

Because Orvion Fin facilitates cross-border payouts, payout details you provide are necessarily transferred to payout rails and financial institutions outside India as part of completing each transaction. Where we transfer data internationally for infrastructure or support purposes, we require the receiving party to protect it to a standard consistent with this policy.

Orvion Fin is a business product and is not directed at, or intended for use by, individuals under 18. We don't knowingly collect personal data from children.

If we become aware of a data breach that's likely to pose a risk to you or your freelancers, we'll notify you without undue delay, describe what happened and what data was affected, and tell you the steps we're taking and the steps you can take to protect yourself, in line with applicable breach-notification law.

We may update this policy as our practices or legal obligations change. For material changes, we'll notify you by email and in-app at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

For questions about this policy or to exercise your data rights, reach out using the details below. Grievances that aren't resolved through our support team can be escalated to our designated Grievance Officer, in accordance with applicable Indian IT regulations.