Privacy Policy

Last updated: April 2026

InDhan PayGate Private Limited ("InDhanPay", "we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, payment services, and related platforms (collectively, the "Services").

By accessing or using our Services, you consent to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information when you register for an account, use our Services, or interact with us:

  • Identity Information: Full name, date of birth, PAN number, Aadhaar number (where legally required), photographs, and government-issued identification documents.
  • Contact Information: Email address, phone number, postal address, and communication preferences.
  • Business Information: Business name, business type, GST number, fuel station license details, and related regulatory information.
  • Financial Information: Bank account details, UPI IDs, payment card information, and transaction history.
  • KYC Information: Know Your Customer documents and verification data as required by RBI regulations and applicable laws.

1.2 Automatically Collected Information

When you access our Services, we may automatically collect certain information, including:

  • Device Information: Device type, operating system, browser type, unique device identifiers, and mobile network information.
  • Usage Data: Pages visited, features used, time spent on pages, click-through rates, and navigation patterns.
  • Location Data: Approximate geographic location based on IP address or, with your consent, precise GPS location data.
  • Log Data: IP address, access dates and times, server logs, and error reports.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our payment processing, reconciliation, and retail automation services.
  • Account Management: To create and manage your account, verify your identity, and process KYC requirements.
  • Transaction Processing: To process payments, settlements, refunds, and generate transaction reports and invoices.
  • Communication: To send service-related notifications, transaction alerts, security updates, and promotional materials (with your consent).
  • Security & Fraud Prevention: To detect, prevent, and investigate fraudulent transactions, unauthorized access, and other illegal activities.
  • Legal Compliance: To comply with applicable laws, regulations, and regulatory requirements including RBI guidelines, PMLA, and IT Act provisions.
  • Analytics & Improvement: To analyze usage patterns, improve our Services, and develop new features and products.

3. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Payment Partners: With banks, payment gateways (such as Razorpay), and financial institutions to process transactions.
  • Service Providers: With trusted third-party service providers who assist us in operating our platform, including cloud hosting, analytics, communication services, and customer support.
  • Regulatory Authorities: With government agencies, regulators (including RBI, NPCI), law enforcement, or other authorities when required by law or in response to legal processes.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • End-to-end encryption for payment transactions and sensitive data in transit and at rest.
  • Secure server infrastructure with firewalls, intrusion detection systems, and regular security audits.
  • Access controls limiting data access to authorized personnel on a need-to-know basis.
  • PCI-DSS compliant payment processing through our certified payment partners.
  • Regular vulnerability assessments and penetration testing of our systems.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These may include:

  • Essential Cookies: Required for the operation of our website and Services, including authentication and session management.
  • Analytics Cookies: Used to understand how visitors interact with our website, helping us improve functionality and user experience.
  • Preference Cookies: Used to remember your settings and preferences for a more personalized experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  • For the duration of your active account with us and for a reasonable period thereafter.
  • As required by applicable laws, including financial record-keeping requirements (minimum 5 years for transaction records as per RBI guidelines).
  • To resolve disputes, enforce our agreements, and for legitimate business purposes.

7. Your Rights

Under applicable Indian data protection laws (including the Digital Personal Data Protection Act, 2023), you may have the following rights:

  • Right to Access: Request information about the personal data we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer or the relevant Data Protection Board.
  • Right to Withdraw Consent: Withdraw your consent for data processing at any time, which may affect your ability to use certain Services.

8. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

9. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to read the privacy policies of any third-party services you access through our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Grievance Officer: For any grievances related to data processing, you may write to us at support@indhanpay.com. We will acknowledge your complaint within 24 hours and resolve it within 30 days from the date of receipt.