Skip to content
Home / Legal / Privacy

Privacy Policy

What we collect, why we collect it, and the choices you have.

Effective date: October 2026 · Controller: [LEGAL ENTITY NAME], [COMPANY ADDRESS] · Contact: [SUPPORT EMAIL]

1. Data we collect

  • Account data: name, mobile number, email, business name, password hashes, verification state.
  • Order data: order IDs, amounts, customer names/mobiles you provide, UTRs, payment method, provider references, timestamps, IP address and user-agent from checkout sessions.
  • Operational data: API usage, webhook deliveries, audit and activity logs, device/session security tokens.
  • Support data: messages you send us and application details.

2. Why we use it

To operate the Service (create and verify orders, run checkout pages), prevent fraud and abuse, provide support, meet legal obligations, and improve reliability. We do not sell your personal data.

3. Sharing

We share data only as needed to run the Service: payment providers that process the underlying UPI transactions, infrastructure providers (hosting, SMS/OTP delivery), and authorities when required by law. Webhook payloads go only to URLs you configure.

4. Retention

Transaction and audit records are retained as required for financial reconciliation, dispute handling and legal compliance, then deleted or anonymised where possible. You may request deletion of marketing/support data via [SUPPORT EMAIL]; records we must legally keep will be identified in our reply.

5. Security

We apply authenticated API access, hashed credentials, CSRF protection, rate limiting and access logging. No system is perfectly secure; use unique passwords and keep API secrets server-side.

6. Your rights

Subject to applicable Indian law, you may request access, correction or deletion of your personal data, and withdraw optional consents, by writing to [SUPPORT EMAIL]. Merchants are independently responsible for privacy notices to their own customers.

7. Cookies and third-party assets

We use essential session cookies for login and checkout. Pages load fonts and libraries from third-party CDNs (see Licensing), which may log standard request data under their own policies.