Effective Date: 16.06.2025
Welcome to
Spotted (AAR Tech Ventures Private Limited) (“
Spotted”, “
we”, “
our”, or “
us”).
These
Terms & Conditions govern your access to and use of our platform, services, and applications (collectively, the "
Platform") which facilitate QR-based UPI payments and reward-based interactions between merchants and end-users.
Please read these Terms carefully before using the Platform. By accessing or using any part of the Platform, you agree to be bound by the following terms:
1.
Definitions
User: Any individual who uses the Spotted platform to make UPI-based payments, earn cashback, or engage with merchant content.
Merchant: Any business entity onboarded on Spotted for payment acceptance and consumer engagement.
Spotted Post: A user-generated content unit shared publicly upon a qualified transaction, e.g., “User was Spotted @MerchantName”.
Cashback: A defined monetary incentive (e.g., 3%) granted to the User for successful participation in a qualified transaction and opt-in to share a Spotted Post.
Transaction: A UPI payment initiated by the User via QR code scanned through the Spotted application.
2.
Scope of Service
Spotted acts as a
value-added technology platform on top of the existing UPI ecosystem. We facilitate UPI payment initiation and provide conditional rewards subject to user action and platform logic. Payments are routed through
certified Payment Service Providers (PSPs) or TPAPs.
Spotted is a
Technology Service Provider (TSP) or operates via partnership with a licensed TPAP/PSP under NPCI norms.
We do
not store, process, or transmit sensitive UPI credentials such as MPIN, OTP, or VPA authentication tokens.
3.
Payment Mechanism
Users initiate transactions by scanning
standardized UPI QR codes. The app decodes VPA and optionally initiates
UPI Intent flow or
Deep Link Payment, redirecting to an authorized UPI app. All payments are executed under the governance of the relevant
banking PSP and
UPI network protocols. Spotted validates success through PSP-provided APIs or callback events before triggering any post-transactional logic.
4.
Cashback Logic
Cashback is
only credited when the User completes the transaction
and opts to publish a Spotted Post. Cashback amount is
paid by the merchant, deducted post-transaction from the merchant’s payable balance or via settlement API integration. If the post is deleted, modified, or marked inauthentic,
Spotted reserves the right to revoke cashback. Cashback, once validated, will be held for
up to 48 hours for moderation, and then credited to the User's wallet or bank account.
5.
User Responsibilities
Users must ensure their UPI app is active and functional. Users shall
not engage in fraudulent activity to artificially trigger cashback or manipulate post logic. Any misuse of the platform, including
fake location check-ins, automation, or post tampering, will lead to immediate account suspension.
6.
Merchant Responsibilities
Merchants agree to pay:
3% of transaction value toward Customer Incentive (Cashback) [editable].
2% toward Platform Fee for social media marketing services [fixed].All merchant charges are applicable
only on qualified transactions where user posts are shared successfully. Merchants must maintain updated store data and respond to Spotted’s verification requests.
7.
Refunds & Reversals
Refunds for failed or duplicate transactions are governed by the policies of the respective UPI PSP or Bank. If cashback was granted on a later refunded transaction,
the cashback amount will be clawed back. Users and merchants agree to allow such reversals without further consent.
8.
Data & Security Compliance
We do not store UPI credentials, card numbers, PINs, or bank passwords. All data handling complies with:
PCI-DSS (for any card-linked modules)
ISO 27001:2013 standards (internal infra policies)
Data Minimization & Encryption protocols at rest and in transit Personally Identifiable Information (PII) and transaction logs are secured using AES-256 encryption and TLS 1.3 for API calls.
9.
API and Transaction Logging
All payment actions, post status, cashback triggers, and reversals are logged in an
immutable audit log system. API endpoints are
rate-limited,
auth token gated, and monitored for
abuse patterns.
10.
Compliance & Regulatory Oversight
Spotted operates in accordance with NPCI guidelines, RBI circulars, and Indian IT Act, 2000 (as amended).Any bank- or PSP-mandated change (e.g., due to circulars like DPSS.CO.PD.No.1343/02.14.003/2017-18) shall be implemented within 48 hours of notice.
11.
Limitation of Liability
Spotted is not liable for:Transaction failures due to third-party UPI app issues.Cashback denial due to user action (e.g. no post shared).Delays in bank settlements or merchant bank-related issues.
12.
Amendments and Legal Jurisdiction
These terms may be modified from time to time. Any updates will be published on our website and/or notified within the application.The governing law shall be
Indian law, with jurisdiction in the
courts of Mumbai, Maharashtra.
13.
Contact Information
For compliance queries, disputes, or technical clarification, please contact:
AAR Tech Ventures Pvt. Ltd.Email:
support@tryspotted.com