Privacy Policy

1. Who We Are

Oto Joto operates a daily fresh juice subscription service at otojotto.com. For payment processing we use Razorpay Software Private Limited, a PCI-DSS compliant payment gateway regulated by the Reserve Bank of India.

2. Information Collected for Payments

When you make a payment through our platform we collect:

• Name and email address linked to your account.
• Contact number (required by Razorpay for transaction verification).
• UPI ID, card details, or net banking credentials — entered directly on Razorpay's secure checkout page and never transmitted to or stored on our servers.
• Transaction ID and payment status returned by Razorpay after a successful payment.

3. How Razorpay Processes Your Data

All payment transactions are processed by Razorpay. By making a payment you also agree to Razorpay's Privacy Policy. Specifically:

• Razorpay collects and processes your payment credentials under its own PCI-DSS Level 1 certified infrastructure.
• For recurring subscriptions Razorpay stores a secure payment token (e-NACH/UPI AutoPay mandate or card token) — not your raw credentials — to process future charges without you re-entering details.
• Razorpay may share your transaction data with banks, card networks (Visa/Mastercard/RuPay), the National Payments Corporation of India (NPCI), and the Reserve Bank of India as required to process payments and comply with applicable law.
• Razorpay may use your data for fraud detection and risk assessment.

4. How We Use Payment Information

• To activate and manage your juice subscription.
• To generate and send payment receipts and invoices.
• To process refunds if applicable.
• To detect and prevent fraudulent transactions.
• To comply with tax, audit, and regulatory requirements (transaction records are retained for 7 years as required by Indian law).

5. Data Sharing

We do not sell your payment data. We share it only with:

• Razorpay — to process and settle your payment.
• Tax and legal authorities — when required by Indian law (GST, Income Tax Act).

6. Security

Payment pages are served over HTTPS/TLS. Card and UPI data is handled exclusively by Razorpay's PCI-DSS certified servers. We do not log, store, or transmit raw payment credentials at any point.

7. Cancellation & Refunds

You may cancel your subscription at any time from your dashboard. Refund eligibility is subject to our cancellation policy. Approved refunds are processed through Razorpay back to your original payment method within 5–7 business days.

8. Your Rights

Under the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000 you have the right to access, correct, or request deletion of your personal data. To exercise these rights email us at hello@otojotto.com. We will respond within 30 days.

9. Contact