This Privacy Policy explains how Dahikar Technologies Private Limited ("Company", "we", "us") handles personal data when you use RecoverPe. It is effective 20 October 2026. We follow the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other Indian law that applies to this product.
Read our Terms of Service, Trust and Cancellation & Refund Policy.
1. Who this Policy covers
It covers people who create a RecoverPe account, people those businesses invite into a workspace, and the customers and suppliers whose details a business stores in RecoverPe. If you upload someone else's contact details, you are responsible for having a lawful basis to do that and for telling them what you use RecoverPe to do.
2. Your clients' data: the shop is responsible, we process it
When a business stores its customers' or clients' details in RecoverPe, such as names, phone numbers, company names, GSTIN, an accounts contact, invoices and payment status, that business decides why and how the data is used. Under the DPDP Act the business is the Data Fiduciary for that customer data. The business appoints Dahikar Technologies Private Limited as its Data Processor, only to run the Service: the ledger, reminders the business asks us to send, payment links, and receipts.
The business warrants that it collected that customer data lawfully and that it told the customer what the data is used for, including messages the business sends through RecoverPe. If you are such a customer and want your data corrected or deleted, ask the business first. You may also write to support@recoverpe.com and we will pass it on and help.
We may use aggregated or anonymised information, which does not identify a person, to see how RecoverPe is used and to improve the product.
RecoverPe does not contact a shop's customers to market RecoverPe, or shops other than the one they dealt with, unless that customer has opted in themselves. That opt-in is a separate box on the shop QR page, a pay link, and a receipt. It is optional and it starts unticked. It is not the shop's own box for sharing a name and mobile with that shop. The customer can stop RecoverPe offers at any time with the stop link on that page, or by writing to support@recoverpe.com. Stopping RecoverPe offers does not stop the shop's own receipts or payment reminders.
If an owner runs several businesses in one login, each business's customers and staff are kept separate and are visible only inside that business.
3. Data we collect
- Account data: name, email, mobile number, billing address, and the authentication identifiers needed to sign you in.
- Business data: GSTIN, MSME registration, invoice and ledger details, and documents you upload or generate.
- Contact data: names, phone numbers, and message history for the people you add.
- Payment data: Razorpay order and payment references, plan, add-ons, and transaction status. We do not store full card numbers. If you connect Smart Collect, we store the link to your own Razorpay account and the status of payments made to it. That money goes directly to you, not to us.
- Identity verification data: for the account owner and, when you ask us to check a customer, the PAN, the name returned for that PAN, the bank account number and IFSC, and a GSTIN when one is given. We use this to prevent fraud and abuse and so that reminders you send can be trusted. The check is performed by Cashfree Payments India Pvt Ltd against bank and government records. We store only a masked PAN, the last 4 digits of the account, the verified name, and the result. We do not keep the full PAN or the full account number after the check.
- UPI data: a UPI ID you save for payment links and your personal QR. Saving a UPI ID does not, by itself, verify a bank account.
- Technical data: device and log data used to keep the Service secure and to understand failures.
- Analytics data: Google Analytics and Meta Pixel only after you accept cookies. If you decline, those tools are not loaded.
4. Why we use it
- To create and secure your account, including mobile verification.
- To provide the ledger, reminders, documents, and billing you ask for.
- To take payment through Razorpay and to verify an owner or a customer when you start that check.
- To prevent fraud, enforce our Terms, and meet legal duties.
- To answer support requests sent to support@recoverpe.com.
5. Legal basis
We process personal data on the bases the DPDP Act allows: your consent (including the acceptance checkbox and the cookie choice), performing the contract in the Terms of Service, and complying with law. Where the law allows a legitimate use such as securing the Service, we rely on that use and limit it to what the product needs.
6. Who we share data with
We do not sell personal data. We share it with processors that run the Service:
- Firebase, for authentication, file storage, and sign-in emails.
- Resend, for product and reminder emails.
- Supabase, for the application database.
- Razorpay, for subscriptions, add-ons, one-time purchases, verification fees, and Smart Collect when you connect your own Razorpay account.
- Cashfree Payments India Pvt Ltd, to check a PAN, a GSTIN, and a bank account against bank and government records when you start a verification.
- Meta, for WhatsApp delivery when you send or automate a WhatsApp message.
- Fast2SMS, for transactional SMS when that channel is actually used.
- Bolna (Bolna AI, India), for AI voice calls when your plan and wallet allow them.
- Vercel, for hosting and first-party delivery analytics.
- Google Analytics and Meta Pixel, only if you accept analytics cookies.
We also disclose data when the law, a court at Nagpur, or another competent authority requires it, or when it is necessary to protect the rights and safety of customers, their counterparties, or the public.
7. Messages and TRAI
Reminder content is sent because a RecoverPe user asked for it. Customer DLT SMS goes out only on plans that include SMS, and only when server approval is recorded. A template id on file is not approval by itself. WhatsApp reminders that a plan already includes are a separate channel. Automated outbound messages are held during TRAI quiet hours, 7:00 PM to 9:00 AM IST. An AI voice call may be recorded and transcribed so the shop can see what the customer said. The recording and the transcript stay with that shop, for the owner and staff who are allowed to see it. The call says this at the start.
8. How long we keep data, and deletion
We keep account and ledger data while the account is open so the Service can run. Masked verification records — a masked PAN, the last 4 digits of an account, the verified name, and the result — are kept for that same period and are deleted with the account, unless a tax or other law requires the invoice for the verification fee to be kept. A customer's RecoverPe marketing choice — the time they opted in, where they opted in, and the time they withdrew — is kept for as long as we need it to honour that choice and to answer a grievance. Shop customer data stays while that shop's account is open and is removed with the account, unless a law requires a specific record to be kept. When you confirm deletion in Settings, or an administrator schedules deletion, we cancel active subscriptions and set the account to pending purge. You cannot use the dashboard during that time.
We do not erase the account on the same day. The daily erasure job permanently deletes an account after it has been scheduled for at least 30 days. The job deletes the sign-in identity, the user record and the product rows that cascade from it, and the stored files it is written to remove, including invoices, legal notices, evidence, and payment proofs tied to that account. There is no separate product archive of the account after the job succeeds, and there is no shorter self-serve wipe.
Email support@recoverpe.com before that deletion if you need the request cancelled. Backup copies and processor logs can take longer to age out of systems we do not use to operate a deleted account. A statute that requires Dahikar Technologies Private Limited to keep a specific record is not waived by this Policy.
9. Security
We use access controls, encryption in transit, and server-side isolation of secrets. No internet service can promise that a breach is impossible. Tell us at support@recoverpe.com if you believe your account is compromised. A plain list of the controls we use, and the companies that process data for us, is on the Trust page.
10. Your rights
Subject to the DPDP Act, you may:
- Ask for a summary of the personal data we hold about your account, and correct it.
- Withdraw consent where the processing is consent-based. Withdrawal does not undo processing that has already happened lawfully.
- Request erasure, which follows the 30-day deletion process above.
- Raise a grievance with the contact below.
Changing the email or mobile number on an open account is done through support, after we check that the request comes from the account holder.
11. Children
RecoverPe is not for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has an account, email support@recoverpe.com and we will close it.
12. Transfers outside India
Some processors may handle data outside India. Where that happens, we take reasonable steps to put protections in place that are consistent with applicable Indian law.
13. Changes
We may update this Policy at any time. Changes take effect when posted on this page with a new date. For a material change, we will also tell you by email or in the app before it takes effect. If you keep using RecoverPe after that, the updated Policy applies. The date on this version is 20 October 2026.
14. Grievance Officer
Dahikar Technologies Private Limited has appointed a Grievance Officer who is also the data-protection contact for RecoverPe. Send privacy requests and grievances about the product to support@recoverpe.com. We aim to respond within two business days and to resolve grievances within the time the DPDP Act requires. Write "Grievance" in the subject line. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Dahikar Technologies Private Limited has its registered office at Plot No. 108, Flat No. 102, Pragati Apartment, Laxminagar, Nagpur, Maharashtra - 440022, India. Use support@recoverpe.com for RecoverPe product support.
Team RecoverPe
15. Governing law
This Policy is governed by the laws of India. The courts at Nagpur, Maharashtra, India have exclusive jurisdiction over disputes about it, except where a consumer-protection law gives you a forum that cannot be waived.
16. Related policies
Read our Terms of Service, Trust and Cancellation & Refund Policy.