Who we are
AlertPaisa is run by Yagyesh Bobde, an individual sole proprietor trading as AlertPaisa, at 8, 3rd Cross Rd, Venkappa Garden, 6th Block, Ejipura, Bengaluru, Karnataka 560095, India. In this policy, "we" and "us" mean Yagyesh Bobde. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary for your personal data.
For anything about privacy, write to contact@alertpaisa.in.
The short version
- The app reads notifications only from supported payment apps: PhonePe, PhonePe Business, Google Pay, Google Pay for Business, Paytm, Paytm for Business and BHIM.
- It never asks for SMS permission. It does not read your SMS, OTPs, chats, contacts, photos, location or notifications from other apps.
- The payment notification is read on your phone, and the amount is spoken by your phone.
- We store your shop details and payment list on our servers so you get reports and your team gets alerts.
- We do not sell your personal data.
- You can see, correct or delete your data. To delete your account, see Delete your account.
Data we collect
"Our servers" means our backend, hosted by Convex. "Your phone" means the app's own storage on your phone. App storage is not backed up to your Google account.
| What | Why | Where it is stored |
|---|---|---|
| Your phone number | To sign you in with an OTP, identify your account and let you join a team. | Our servers, your phone |
| Shop name, city and UPI ID (UPI ID is optional) | To set up your shop profile and show it in the app and reports. | Our servers, your phone |
| Each detected payment: the payment app, amount, time, and the payer's name as shown in the notification | To announce the payment, keep your collection list and daily and weekly reports, and alert your team. | Our servers, your phone |
| The payment notification text (title and message, up to 500 characters). This can include UPI IDs or reference numbers. | To record the payment correctly, help with support questions and improve how the app reads payment notifications. | Our servers, your phone |
| Device details: which device reported each payment, push notification token, app version, last-seen time and app health checks (permissions, battery and voice) | To send alerts to the right phones, show whether each phone is ready to announce, and help with support. | Our servers |
| Settings: alert language, voice settings, thank-you message and which payment apps are switched on | To run the app the way you set it up. | Our servers, your phone |
| Team: phone numbers and names of team members, and invites (phone number and a 6-digit code valid for 24 hours) | To let staff join your shop and see its payments. | Our servers |
| OTP request log: phone number and time of each OTP request | To keep sign-in secure and stop misuse. | Our servers |
| Subscription details: plan, status, dates, amounts and the payment references our payment partner sends us | To run your subscription, handle refunds and keep records the law requires. | Our servers, our payment partner |
| App usage events: screens viewed, sign-in, payment detected (with amount and payment app), and alerts delivered or failed | To understand how the app is used and fix problems. | PostHog (USA) |
| Messages you send us | To answer you. | Our email |
If the payer name in a notification looks like a phone number or UPI ID, the app drops it and does not save it as a name.
We treat payment data as sensitive. We never see your UPI PIN, and we do not collect bank account passwords or card details.
Notification access, explained
AlertPaisa uses Android's notification access (a feature called NotificationListenerService). Android shows every app's notifications to the app you allow, so here is exactly what AlertPaisa does with that access:
- It looks only at notifications from the supported payment apps listed above, and only the ones you switch on in AlertPaisa.
- It ignores notifications from every other app. It does not read or store them.
- It reads the payment notification on your phone to find the amount, app and payer name.
- It speaks the amount using your phone's Google Text-to-Speech engine, on the phone.
- It then saves the payment details listed in the table above.
Before Android asks you to allow notification access, the app shows a screen that explains what it reads and why. You decide whether to allow it. You can turn it off at any time in your phone's settings.
Phone permissions
- Notification access: to read payment notifications from supported payment apps.
- Post notifications: to show you alerts and the ongoing "announcing" notification.
- Foreground service: to keep announcing payments while the app is in the background.
- Ignore battery optimisation (request): so the phone does not stop announcements to save battery.
- Run at startup: to start announcing again after the phone restarts.
- Internet and network state: to sign in, sync payments and send team alerts.
- Wake lock, vibrate and exact alarms: to announce on time and run scheduled checks and reports.
The app does not ask for SMS, contacts, photos, location, microphone or camera permission.
How we use your data
We use your data only for these purposes:
- Announcing payments and keeping your collection list and daily and weekly reports.
- Sending each payment to your team members' phones.
- Signing you in and keeping your account secure.
- Running your subscription and billing.
- Answering your support requests.
- Improving the app, for example fixing missed or wrong announcements.
- Meeting our legal duties, such as tax records or a lawful request from authorities.
We do not use your data for advertising, and we do not sell it.
Who we share it with
Your team
If you create a team, every active member can see your shop's payment list and reports, and gets each payment (amount, payment app and payer name) as a push notification. The shop owner decides who joins and can remove members at any time.
Service providers who work for us
These companies process data only to run AlertPaisa for us:
- Convex: our backend database and server functions. Stores the server data listed above.
- Google Firebase Cloud Messaging: delivers push notifications. Payment alerts include the amount, payment app and payer name.
- MSG91: sends the OTP SMS to your phone number.
- PostHog: product analytics, with servers in the USA. Receives the app usage events listed above. Automatic tracking of taps and screens (autocapture) is off.
- Our payment partner: an RBI-authorised payment aggregator that runs UPI AutoPay for subscriptions. It handles your payment and mandate details under its own legal duties.
- Google: the Text-to-Speech engine runs on your phone, and Google Play distributes the app.
- Vercel: hosts this website and keeps standard server request logs.
When the law requires it
We share data with the government, courts or police only when the law requires it, or to protect our users or the service from fraud or harm.
Data outside India
Some of our providers, including Convex, PostHog and Google, may store or process data outside India. PostHog stores data in the USA. We will only transfer data to countries the Government of India has not restricted under the DPDP Act, and we will change our setup if that list changes.
How long we keep it
- Account, shop, payments, devices, settings and team data: while your account is open. When you delete your account, we delete it within 30 days.
- Team invites: the code stops working after 24 hours.
- OTP request logs and security logs: 1 year, then deleted.
- Billing and tax records: as long as tax law requires (currently up to 8 years), then deleted.
- App usage events: we ask PostHog to delete them when you delete your account.
- Data on your phone: stays until you clear the app's data or uninstall the app.
How we protect it
We follow reasonable security practices, as required by the Information Technology Act, 2000:
- Data between the app and our servers is encrypted in transit (HTTPS).
- Access to server data is limited to people who need it to run AlertPaisa.
- Device secrets are stored hashed, not as plain text.
- Sign-in needs a one-time code sent to your phone number.
No system is perfectly secure. Please keep your phone locked and do not share your OTP with anyone.
If there is a data breach
If a breach affects your personal data, we will tell you without delay: what happened, what it could mean for you, what we are doing about it, and what you can do. We will also report it to the Data Protection Board of India and other authorities as the law requires.
Your rights
Under the DPDP Act, you can ask us to:
- Give you a summary of the personal data we hold about you, how we use it, and who we have shared it with.
- Correct, complete or update your data. You can change your shop details and settings in the app yourself.
- Erase your data. See Delete your account.
- Resolve a grievance about how we handle your data.
- Nominate someone to use these rights for you if you die or become unable to act.
To use any of these rights, email contact@alertpaisa.in from anywhere and include your registered phone number. We will confirm the request comes from you, for example by checking with that phone number, before we act. We reply within 30 days.
If you are not happy with our answer, you can complain to the Data Protection Board of India. Please use our grievance process first, as the law requires.
Withdrawing consent
You can withdraw consent as easily as you gave it:
- Stop reading notifications: turn off notification access for AlertPaisa in your phone's settings.
- Stop reading one payment app: switch that app off in AlertPaisa settings.
- Stop everything: delete your account.
Withdrawing consent does not affect what we did before. Some features stop working without it, for example announcements stop if notification access is off.
Children
AlertPaisa is for business owners and their staff aged 18 or over. It is not meant for children. If we learn that a person under 18 has an account, we will delete it.
This website
This website uses no cookies, no analytics and no forms. It saves one item in your browser's local storage, alertpaisa.locale, to remember your language choice. It never leaves your browser. Our host, Vercel, keeps standard server request logs, such as IP address, browser type, page and time.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is important, we will tell you in the app before it applies and ask for your consent again where the law requires.
Grievance Officer
For privacy questions, requests or complaints, contact:
Grievance Officer, AlertPaisa
8, 3rd Cross Rd, Venkappa Garden, 6th Block, Ejipura, Bengaluru, Karnataka 560095, India
Email: contact@alertpaisa.in
Phone: +91 90192 78212
We acknowledge every complaint within 48 hours and resolve it within 30 days. See Contact & Grievances for more.