LEGAL

Privacy Policy

Payments Expert Marketplace

Last updated: 17.10.2026

1. About Us

1.1
Your privacy is important to us at, Travel And Payments Consulting Service Pte. Ltd. together with its subsidiaries and affiliates (hereinafter referred to as the 'Company,' 'Us,' and/or 'PEM') policy to respect your privacy regarding any information we may collect from you across our website, App, etc. We own and operate, and other communications that PEM offers you through our communication channel and services we offer online ('Services'). This privacy policy document pertains to the types of information that is collected and recorded by Payments Expert Marketplace ('PEM') and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at legal@travelandpayments.com. This privacy policy applies only to our online activities. It is applicable to visitors on our website/App in regard to the information that they share and/or is collected by us. References to 'you,' 'your,' or 'user' means the end-user who is utilising or accessing the Services.
1.2
By using the Service, you acknowledge that you have read this Privacy Policy, which explains how we collect, use and share your personal data. Where we rely on your consent, we will request it separately and specifically at sign-up or at the relevant point of collection, and you may withdraw it at any time.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

2.1
Biography: A professional profile of an Expert, synthesised from provided credentials and experience, used to facilitate matches on the Platform.
2.2
Chatbot: The proprietary, AI-driven conversational interface through which Users submit queries and interact with the Platform's matching logic.
2.3
Expert: An individual with verified professional experience in the payments industry who provides insights and interactions via the Platform.
2.4
Matching Tool: The algorithmic module that analyzes User queries to facilitate validated, high-relevance introductions between Users and Experts.
2.5
Payment Nuggets: Brief, informational insights on payment-related topics authored by Experts and shared on the Platform for community knowledge-sharing.
2.6
Platform: Collectively refers to the Company's mobile applications, web-based portals, API interfaces, and associated backend infrastructure.
2.7
User: Any individual or entity that accesses the Platform to obtain Expert knowledge or professional insights, including Knowledge Seekers.

3. Information We Collect

While using Our Services, in order to provide features of Our Service, We collect the following categories of personal data, on the legal bases described in Section 4.5.

3.1
From Users
1. 3.1.1
  Account & Identity Data: Full name, email address, telephone number, and account credentials.
2. 3.1.2
  Engagement & Feedback Data: Ratings, reviews, and qualitative feedback submitted following Expert interactions.
3. 3.1.3
  Usage & Preference Data: Report download history, document export preferences, and saved search parameters.
4. 3.1.4
  Approximate location (derived from your IP address or time zone settings): General geographic location and time zone information to facilitate scheduling and regional compliance.
5. 3.1.5
  Chatbot Data: the queries, messages and transcripts you submit to the Chatbot and the responses generated.
6. 3.1.6
  Credits Data: Credits received, used and earned, and the questions and activity linked to them.
7. 3.1.7
  Technical Data: IP address, device and browser type, operating system, log data, and information collected through cookies and similar technologies.
3.2
From Experts
1. 3.2.1
  Professional Identity: Legal name, professional title, verified LinkedIn profile URL, and contact details (email and phone).
2. 3.2.2
  Professional Pedigree: Comprehensive career history including CV/resume content, employment milestones, educational background, technical skills, certifications, and links to professional publications.
3. 3.2.3
  Availability & Calendar Data: Metadata from connected calendars (e.g., Google Calendar or Outlook), including available time slots, booking preferences, and regional time zones to enable the Matching Tool.
4. 3.2.4
  Publicly Sourced Data: Information from public professional profiles used to supplement and verify the Biography (Total Experience Summary). We obtain this from publicly available professional profiles (e.g., LinkedIn) and use it only to verify and supplement your Biography.
5. 3.2.5
  Verification, Payout & Tax Data: KYC/AML verification information, bank or payout details and tax identifiers, as needed to verify you and pay you.

4. Use of your Personal Information

We process your information to deliver a seamless experience, ensure the integrity of our Expert network, and continuously improve our matching algorithms.

4.1
To Provide and Operate the Platform
1. 4.1.1
  Account Management: Authenticating your identity and maintaining your user preferences.
2. 4.1.2
  Service Delivery: Powering the AI Chatbot to process queries against our proprietary knowledge bases.
3. 4.1.3
  Expert Curation: Synthesising provided data to generate Biographies and maintaining the Expert Data Source.
4. 4.1.4
  Intelligent Matching: Operating the Matching Tool to rank Experts based on relevance and synchronising real-time calendar availability for bookings.
5. 4.1.5
  Fulfilment: Generating, formatting, and delivering downloadable Reports and "Payment Nuggets" requested by Users.
4.2
To Improve and Personalise
1. 4.2.1
  Algorithmic Optimisation: Utilising aggregated, de-identified outcome signals to improve the accuracy and relevance of the Matching Tool. 'De-identified' means data from which direct identifiers have been removed, which we do not attempt to re-identify and which we contractually prohibit recipients from re-identifying.
2. 4.2.2
  Tailored Experience: Personalizing Expert recommendations and content discovery based on your historical query patterns (subject to your explicit consent).
3. 4.2.3
  Platform Analytics: Analysing usage trends to fix bugs, optimise the user interface, and develop new features for the payments community.
4.3
For Safety, Compliance, and Fraud Prevention
1. 4.3.1
  Verification: Conducting rigorous background checks on Expert credentials to prevent fraudulent profiles and ensure the "Expert" designation remains validated.
2. 4.3.2
  Integrity Monitoring: Scanning for prohibited content, platform abuse, and violations of our Terms of Service.
3. 4.3.3
  Regulatory Compliance: Adhering to Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations, and fulfilling mandatory tax and financial reporting requirements.
4. 4.3.4
  Audit Trails: Maintaining comprehensive records as required by global data protection laws and rules thereunder.
4.4
For Communications
1. 4.4.1
  Administrative Updates: Critical communications regarding material changes to this Privacy Policy or our Terms of Service. These are necessary for the continued use of the Platform and cannot be opted out of.
2. 4.4.2
  Promotional Communications: Subject to your preferences, we may send insights on new "Payment Nuggets," featured Experts, or Platform features. You may opt out of these at any time via the "Unsubscribe" link in the email or through your account settings.
4.5
Legal Bases for Processing
1. 4.5.1
  India (DPDPA): we process personal data on the basis of your consent or for the 'certain legitimate uses' permitted under section 7 of the DPDPA.
2. 4.5.2
  Singapore (PDPA): we process personal data with your consent (including deemed consent where permitted) or under the legitimate interests and other exceptions in the PDPA.
3. 4.5.3
  EEA/UK (GDPR): the bases below apply. Where we rely on consent (for example, direct marketing and personalised recommendations from your query history), you may withdraw it at any time through account settings / email, without affecting processing already done.
4.6
GDPR/UK bases
1. 4.6.1
  Performance of a Contract: Necessary to provide the service you signed up.
2. 4.6.2
  Legitimate Interests: Processing for purposes that are reasonably expected, such as fraud detection, verifying Expert credentials, improving our AI models through de-identified data, and general Platform analytics (balanced against your individual privacy rights).
3. 4.6.3
  Legal Obligation: Compliance with mandatory statutory requirements, including Anti-Money Laundering (AML) checks, "Know Your Customer" (KYC) verification, tax reporting, and data breach notification protocols.
4. 4.6.4
  Consent: Where we require your explicit permission, specifically for direct marketing and precise geolocation tracking.

5. We may share your Personal Information under the following situations

5.1
Service Providers: We share personal data with service providers who process it on our behalf and on our instructions, such as cloud hosting, payment processing, KYC and credential verification, analytics, communications and AI/LLM providers. They are bound by contract to protect the data and to use it only to provide services to us.
5.2
Affiliates: We may share personal data with our parent company and subsidiaries or other companies under common control with us, who must honour this Privacy Policy. Affiliates include our parent company and any other subsidiaries, or other companies that we control or that are under common control with Us.
5.3
With business partners: With your prior explicit permission, we may share your information with our business partners to offer you certain products, services, or promotions.
5.4
When you are matched with or book an Expert, we share with that Expert [your name, query or topic, contact details and scheduling information]. An Expert's name, professional title, Biography, Payment Nuggets, ratings and reviews are visible to Users. Reviews you submit may be displayed to Experts / other Users without your name.

6. Data Retention

We retain your personal information only for as long as is strictly necessary to fulfil the purposes outlined in this Policy, or as required to comply with our legal, tax, and regulatory obligations.

6.1
Active Account & Profile Data: Information required to maintain your account is retained for as long as necessary, as per the applicable law.
6.2
Expert Biographies & Content: Biographies are retained while an Expert account is active. Upon account closure, these are deleted within 24 hours of account closure.
6.3
Disaster Recovery Backups: Encrypted backups are retained for up to 30 (thirty) days. Data deleted from production systems is overwritten in the backup cycle within that period.
6.4
User accounts: when you close your account we delete or anonymise your personal data within [●] days, except where we must retain it by law.

7. Cross-Border Data Transfer

Our Platform is operated globally, and your personal information may be processed in countries other than your country of residence.

7.1
Transfer Mechanisms: Where cross-border data transfers are subject to restricted transfer laws, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:
1. 7.1.1
  Adequacy: Transferring data to countries that have been deemed to provide an adequate level of protection for personal data.
2. 7.1.2
  Standard Clauses: Utilising specific contracts approved for use in your jurisdiction (such as Standard Contractual Clauses) which give personal data the same protection it has in its home country.
7.2
Explicit Consent: Where required by applicable law, we will obtain your consent or implement appropriate safeguards before transferring your personal data outside your country of residence.

8. Data Security we follow

We implement technical and organisational measures appropriate to the risk, including:

8.1
Encryption: Data is encrypted at rest and in transit.
8.2
Access controls: role-based access, multi-factor authentication for internal systems;
8.3
Vulnerability management: patch cycles aligned with industry standards;
8.4
Incident response: a documented breach response plan with regulatory notification procedures;
8.5
Employee training: mandatory privacy and security training for all staff with data access.
8.6
If a personal data breach occurs, we will notify affected individuals and the relevant regulators (including the Data Protection Board of India, the PDPC Singapore and EU/UK supervisory authorities) as required by applicable law and within the applicable timelines.

No system is completely secure. If you suspect a security issue or your account has been compromised, contact legal@travelandpayments.com immediately.

9. Payment Nuggets and Content

9.1
Ownership of, and the Expert's warranties and responsibilities for, Payment Nuggets are governed by the Expert Terms. This Privacy Policy explains only how personal data connected with Payment Nuggets (such as Expert name and Biography attribution) is processed. Content on the Platform, including Chatbot output, is for general information only and is not legal, regulatory, financial or other professional advice.

10. Your Rights and Choices

10.1
You have the right to access, correct, delete, receive a copy of (portability), restrict, or object to the processing of your personal data; to withdraw your consent at any time; and, under the DPDPA, to nominate another person to exercise your rights in the event of your death or incapacity. To exercise these rights, contact support@travelandpayments.com or use your account settings. We will verify your identity and respond within thirty (30) days (or any shorter period required by law). We may retain certain information where we have a legal obligation or lawful basis to do so.

11. Disclosure of your Personal Data

11.1
Business Transfers: If the Company is involved in a merger, acquisition or asset sale, your personal data may be transferred to the successor. We will give you notice before your personal data is transferred and becomes subject to a different privacy policy.
11.2
Law enforcement: Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
11.3
Other legal requirements: The Company may disclose Your Personal Data in good faith, believing that such action is necessary to:
11.4
Comply with a legal obligation
11.5
Protect and defend the rights or property of the Company
11.6
Prevent or investigate possible wrongdoing in connection with the Service
11.7
Protect the personal safety of Users of the Service or the public
11.8
Protect against legal liability

12. Children's Privacy Rights

The Platform is intended for a professional audience and is not directed to, or intended for use by, individuals under the age of 18 (or the applicable age of majority in your jurisdiction).

12.1
Age Restriction: We do not collect, solicit, or maintain personal information from individuals under the age of 18. If you are under 18, please do not attempt to register for the Platform or send any personal information about yourself to us.
12.2
Company Action: If we learn that we have collected personal information from a person under 18, we will promptly deactivate the account and delete that information, unless retention is required by law.
12.3
Reporting: If you have reason to believe that a child under the age of 18 has provided personal information to us, please contact us at legal@travelandpayments.com.

13. Third Party Links and Services

For your convenience and the functionality of the Platform, we may integrate with and provide links to third-party services.

13.1
Scope of Integration: This includes professional networking platforms (e.g., LinkedIn) for profile verification and banking services used to pay Experts.
13.2
No Endorsement or Control: These third-party services operate independently of the Platform. We do not exercise control over, and assume no responsibility for, the content, privacy policies, or data processing practices of any third-party websites or services. Service providers we engage to process data on our behalf (such as payment processors and verification providers) act on our instructions and are bound by contract, and we remain responsible for them as required by law. Independent third-party websites and services are not under our control, and we are not responsible for their content or practices.
13.3
User Responsibility: We strongly encourage you to review the privacy statements of any third-party service you access through the Platform. Any data you provide to a third party is governed by that party's specific privacy policy, not this one.

14. Changes to this Policy

We may update this Policy from time to time. The 'Last Updated' date and version history are shown at the top. We will notify you of material changes by email and by in-app notice. If a change materially alters the purposes for which we use your personal data, we will seek fresh consent where required by law.

15. Grievance Redressal

In accordance with the applicable data privacy law and rules made thereunder, the contact details of the Grievance Officer are provided below:

15.1
Email Id - legal@travelandpayments.com
15.2
When you have a complaint, we prefer to solve it directly with you. We will acknowledge your complaint within [24 hours] and aim to resolve it within [15 days], or such period as required by applicable law, will advise you of the general reasons for the outcome of the complaint.
15.3
If you are not satisfied with our response, you may contact the Data Protection Board of India, the Personal Data Protection Commission (Singapore) or the relevant EU/UK supervisory authority, as applicable.

16. Contact Us

For any queries or concerns related to your data please reach out to us at legal@travelandpayments.com

THE RIGHT EXPERT. RIGHT NOW.

Ready to connect with payment experts?

Get matched with vetted specialists in minutes, not days.