Back to Paras CashBack

Privacy Policy

Last updated: June 2026

Paras CashBack is operated by Paras Reward Technologies Private Limited ("Paras Reward Technologies", "Company", "we", "us", or "our"). This Privacy Policy explains how we collect, use, store, protect, and process information when you use the Paras CashBack website, web application, mobile application, and related services (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. About Paras CashBack

Paras CashBack is a merchant loyalty and promotional rewards platform that connects participating merchants and customers. The Service may allow customers to:

  • Receive promotional cashback tokens from participating merchants
  • Scratch eligible tokens
  • Receive cashback rewards or promotional Lucky Draw tickets
  • View wallet balances and transaction history
  • View Lucky Draw tickets and results
  • Participate in eligible promotional campaigns
  • Submit redemption requests where available

2. Information we collect

We collect only information reasonably required to operate, secure, maintain, and improve the Service. Merchants may register their business, purchase eligible token plans, and issue tokens to customers in accordance with the applicable merchant terms.

2.1 Customer information

Depending on the features used, we may collect:

  • Full name
  • Mobile number
  • Email address
  • Login credentials or authentication-related information
  • Customer account ID
  • Profile information voluntarily provided by the customer
  • Transaction and reward history
  • Cashback token information
  • Lucky Draw ticket information
  • Wallet and redemption information

2.2 Merchant information

For merchant registration and operation, we may collect:

  • Merchant name
  • Business name
  • Mobile number
  • Email address
  • Business information
  • GST/business identification information where required
  • PAN or other business verification information where required
  • KYC-related information where applicable
  • Bank/payment information required for merchant transactions
  • Subscription and token purchase information
  • Merchant token issuance records

2.3 Transaction information

We may collect and maintain records relating to transactions and Service activity, including subscription plan selected, payment/order reference, token issuance information and status, cashback result, Lucky Draw ticket number and participation, reward amount, wallet transaction records, redemption request details, timestamps, and refund or reversal records. We do not use transaction information for purposes unrelated to the operation, security, accounting, support, or improvement of the Service unless permitted by applicable law or with appropriate user consent.

2.4 Redemption / payment information

Where a customer requests a wallet redemption, we may collect the information required to process it, such as UPI ID (where applicable), bank account information (where applicable), account holder information, redemption amount, payment/reference information, and status/processing records. We do not request banking credentials, UPI PINs, card PINs, OTPs, or other authentication secrets that are not necessary for our Service. Users should never share their UPI PIN, card PIN, banking password, or payment authentication credentials with Paras CashBack personnel.

3. Payment service providers

Payments for applicable merchant subscriptions and other supported transactions may be processed through third-party payment service providers (for example, Razorpay or another authorized provider) under their own privacy policies and applicable security standards. Paras CashBack may receive transaction identifiers, payment status, amount, and other information necessary to confirm and reconcile a transaction. We do not intend to store complete card payment credentials such as full card numbers, CVV, or payment passwords on our own systems unless specifically required and legally permitted.

4. How we use information

We may use collected information to:

  • Create and maintain customer and merchant accounts
  • Authenticate users and secure accounts
  • Provide cashback and reward services
  • Issue, validate, and manage tokens
  • Manage Lucky Draw participation and results
  • Maintain customer wallet and transaction records
  • Process redemption requests
  • Process merchant subscriptions and payments
  • Provide customer and merchant support
  • Detect and prevent fraud, abuse, and manipulation of the Service
  • Maintain financial and operational records
  • Investigate disputes, refunds, and transaction issues
  • Comply with applicable laws and lawful requests
  • Improve performance, security, and usability
  • Communicate important Service-related information
  • Send promotional communications where permitted and appropriate consent or legal basis exists

5. Cashback and reward information

When a customer uses an eligible token, the Service may record token ID/code, customer account, participating merchant, token status, cashback result, Lucky Draw ticket code (where applicable), campaign or draw reference, and date/time of activity. This information is maintained to provide the Service, maintain transaction history, prevent duplicate claims, and support auditing and customer service.

6. Lucky Draw information

If a customer receives an eligible Lucky Draw ticket, we may store the unique ticket code, customer account reference, draw/event reference, ticket status, participation date, draw result, and prize/reward processing information. Where winners are publicly announced, we may display limited information such as a masked name or partially masked ticket identifier. We will not intentionally publish sensitive personal information such as a customer's full mobile number, UPI PIN, banking password, or complete bank account credentials.

7. Wallet information

The Service may maintain records of cashback credits, reward credits, redemption requests, refunds, reversals, and other authorized wallet transactions. Wallet and financial records may be retained as necessary for transaction verification, fraud prevention, accounting, legal compliance, dispute resolution, and legitimate business purposes.

8. Device and technical information

When you access the Service, we may automatically collect limited technical information, which may include:

  • IP address
  • Browser type
  • Operating system
  • Device type
  • App/web version
  • Language or regional settings
  • Approximate technical location derived from IP (where applicable)
  • Device identifiers or similar technical identifiers where required
  • Login/session information
  • Error and diagnostic information
  • Security and fraud-prevention signals

8.1 Use of technical information

We use this information primarily for security, authentication, fraud prevention, troubleshooting, performance monitoring, service reliability, and analytics/improvement. We will not request access to device permissions that are unnecessary for the relevant functionality.

9. Cookies and similar technologies

We may use cookies, local storage, session technologies, analytics technologies, and similar technologies to keep users signed in, maintain sessions, remember preferences, improve website functionality, understand usage and performance, and protect the Service against abuse. For more information, please refer to our Cookie Policy.

10. Information sharing

We do not sell users' personal information as a business product. We may share limited information with trusted third parties when reasonably necessary to operate the Service, including:

  • Payment processors
  • Hosting and cloud service providers
  • Authentication/service providers
  • Email, SMS, or notification providers
  • Analytics and technical service providers
  • Security and fraud-prevention providers
  • Professional advisers, auditors, or legal service providers
  • Government authorities or law-enforcement agencies where legally required

11. Payment and financial data security

We take reasonable technical and organizational measures to protect financial and account-related information, which may include HTTPS/TLS encrypted transmission, access controls, authentication mechanisms, role-based access, server-side validation, transaction controls, audit logging, fraud monitoring, secure credential management, restricted administrative access, and database security and backups. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Account security

You are responsible for keeping your account credentials and login information confidential. Please contact us immediately if you believe your account has been accessed without authorization, your credentials have been compromised, your wallet activity appears suspicious, or a transaction appears unauthorized. We may temporarily restrict an account or transaction where reasonably necessary to protect users or the Service from fraud, abuse, or unauthorized activity.

13. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods may depend on the nature of the information, the purpose of collection, the user's relationship with the Service, transaction and accounting requirements, fraud and security requirements, dispute resolution, and legal/regulatory obligations. Some transaction, payment, accounting, fraud-prevention, and audit records may be retained for a longer period where required by law or legitimate business requirements. When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable legal retention requirements.

14. Account deletion and data deletion

Users may request deletion of their account and associated personal data through the account deletion mechanism provided within the Service (Profile → Delete Account, or the page at /delete-account) or by contacting our Privacy Contact. Requests are handled in accordance with applicable law and our legitimate retention obligations. Information that is not required to be retained for legal, security, fraud-prevention, accounting, transaction, or dispute-resolution purposes will be deleted or anonymized as appropriate; certain records may remain for the period required by law or legitimate operational requirements even after account deletion.

15. Children's privacy

Paras CashBack is not intended to knowingly collect personal information from children in violation of applicable laws. If you believe a child has provided personal information without appropriate authorization, please contact us so we can review and take appropriate action. Where required, age-related access restrictions or additional safeguards may be implemented in accordance with applicable law and platform requirements.

16. Marketing communications

We may send service-related communications necessary for account operation, transactions, security, rewards, redemption status, and important policy updates. Where required, promotional communications will be sent in accordance with applicable law and consent requirements. Users may opt out of promotional communications using the unsubscribe or communication-preference mechanism provided, where available. Transactional or security-related communications may still be sent when necessary to provide the Service.

17. Third-party links and services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites or services. Users should review the privacy policies of third-party services before providing them with personal information.

18. International / cross-border data processing

Depending on our service providers, infrastructure, or business operations, information may be processed or stored in locations outside your state or country. Where applicable, we will take reasonable steps to ensure that such processing is carried out with appropriate contractual, technical, and organizational safeguards and in accordance with applicable law.

19. Fraud, security and abuse prevention

We may process account, device, transaction, token, wallet, and technical information to identify and prevent:

  • Unauthorized account access
  • Duplicate transactions
  • Token manipulation
  • Automated abuse
  • Fraudulent activity
  • Suspicious redemption activity
  • Payment-related abuse
  • Other attempts to misuse the Service

20. Your privacy rights

Subject to applicable law, you may have rights relating to your personal information, including:

  • Requesting access to personal information
  • Requesting correction of inaccurate information
  • Requesting deletion of personal information
  • Requesting information about how your data is processed
  • Withdrawing consent where processing is based on consent
  • Raising a privacy-related complaint or inquiry

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, technology, legal or regulatory requirements, our data practices, or improvements to privacy and security practices. When we make material changes, we may provide appropriate notice through the Service or other reasonable channels. The updated Privacy Policy will display the revised "Last updated" date.

22. Privacy contact

For privacy-related questions, requests, complaints, or account/data deletion requests, please contact Paras Reward Technologies Private Limited at info@parasreward.com using the subject line "Privacy Request – Paras CashBack". Official registered address, phone and website details are available on request and on our Contact page.

23. Governing terms

This Privacy Policy should be read together with the applicable Terms & Conditions, Merchant Terms, Cookie Policy, and other policies published by Paras Reward Technologies Private Limited. In case of any conflict, applicable law will govern to the extent required.

24. Important notice

Paras Reward Technologies Private Limited is committed to responsible data handling, transparency, and reasonable security practices. We collect and process information for legitimate purposes connected with providing and protecting the Paras CashBack Service. We do not ask users to provide confidential authentication information such as UPI PINs, card PINs, banking passwords, or similar security credentials. Users should never share such credentials with anyone claiming to represent Paras CashBack.

© 2026 Paras CashBack™ · Privacy · Cookies · Terms · Refund · Cashback Rules · Delete Account

We use cookies for essential functionality, login sessions, security and analytics. Learn more.