Privacy Policy

Who we are:
SpendOS is a payment intelligence platform operated by PIPL ("Pepmo", "we", "us"). This policy explains how we collect, use, and protect information when you use SpendOS or any Pepmo product.

What we collect:
Information you give us When you register, book a demo, or contact us — name, email address, organisation, and role.

Information from your integration When SpendOS is deployed within your platform, we receive transaction context — merchant category, basket size, payment instrument type, and offer eligibility signals. We do not receive or store card numbers, account numbers, or personally identifiable cardholder data.

Technical information IP address, browser type, device identifiers, and usage data when you visit our website or use our platform.

Cookies See our Cookie Policy for full details.

How we use it:
We use the information we collect to:

• Deliver and operate the SpendOS platform

• Make real-time offer decisioning at the payment moment

• Improve platform performance and accuracy

• Communicate with you about your account, updates, and support

• Comply with legal obligations

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Who we share it with:
Service providers
We work with infrastructure providers who process data on our behalf under strict data processing agreements.

Legal requirements
We may disclose data where required by law, court order, or regulatory authority.

Business transfers
In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction. We will notify you before this happens.

We do not share data with any party for their own marketing or commercial purposes.

Data residency and localisation :
SpendOS is designed to comply with data localisation requirements. For bank and NBFC deployments, cardholder data stays within your environment. SpendOS processes only the transaction context signals required to make an offer decision — it does not store or transfer cardholder data to its own servers.

How long we keep it :
We retain account and contact data for as long as your relationship with us is active, plus a reasonable period thereafter for legal and audit purposes. Transaction context signals used for real-time decisioning are not retained after the decision is made.

Your rights :
Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data

• Withdraw consent where processing is based on consent

• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at support@pepmo.app

Security :
We use industry-standard security measures including encryption in transit, access controls, and regular security reviews. If you believe your data has been compromised, contact us immediately at support@pepmo.app

Changes to this policy :
We will notify you of material changes by email or via the platform before they take effect.

Contact :
PIPL: Office 108-109, Amanora Mall, WeWork Amanora Crest, Amanora Park Town, Hadapsar, Pune, Maharashtra 411028 | support@pepmo.app