Legal

Privacy Policy

Last updated: 01 May 2026

This Privacy Policy explains how NXTKRAFT SOLUTIONS (OPC) PRIVATE LIMITED ("we", "us", "our") collects, uses, shares and protects information when you use the Power API platform.

1. Information we collect

  • Account information — name, email, phone, business name and password (hashed).
  • KYC details — PAN, last four digits of Aadhaar, business address and any documents you upload for verification of your account.
  • API request data — the payloads you send through our APIs (for example, a PAN number to verify) and the responses returned, used to bill, log and audit usage.
  • Wallet & transaction data — recharge amounts, charges per call, balance after each transaction.
  • Technical data — IP address, user agent, request timestamps and latency.

2. How we use it

  • To deliver verification responses requested by you.
  • To bill your wallet accurately and provide an audit trail.
  • To verify your business is eligible to use KYC APIs.
  • To detect, prevent and investigate fraud or misuse.
  • To meet our legal and regulatory obligations.

3. Sharing

We share API request payloads with the underlying government or authorised data sources strictly to fulfil your verification request. We do not sell personal data. We may disclose data when required by law, court order or a government request.

4. Retention

Account, KYC, transaction and API logs are retained for as long as your account is active and for up to 7 years afterwards to meet tax and audit requirements.

5. Security

Passwords are hashed using industry-standard one-way functions. API bearer tokens are stored in plain text only by you; we store an irreversible reference. Data in transit is protected with TLS.

6. Your rights

You can access, correct or download your account data from your dashboard at any time. To request deletion of your account, write to support@nxtkraft.in.

7. Cookies

We use only essential cookies to keep you signed in and protect forms from cross-site request forgery. We do not run advertising or third-party analytics cookies.

8. Children

PowerAPI is intended for businesses. It is not directed at users under 18.

9. Changes to this policy

When we make material changes we will update the "Last updated" date and notify you via email or in-app banner.

10. Contact

Questions about this policy? Email support@nxtkraft.in.