Privacy Policy

Overview

iPayu ("we," "our," or "us") is a payment management platform developed and owned by Ikodes Technology, our parent company. We provide other merchants with tools to manage collections and generate secure payment links. All payments made through these links are settled directly into the merchant’s account. We are committed to protecting your privacy in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. This Privacy Policy explains how we collect, process, use, disclose, and safeguard your personal data when you use our payment services.

By using iPayu, you consent to the collection and use of your information as described herein. If you do not agree, please do not use our services.

Information We Collect

Personal Information

Contact details such as name, email, phone number
Business information including legal entity and tax IDs
Bank account and payment details required for transactions
Identity verification documents to comply with KYC regulations
Transaction history and payment activity

Automatically Collected Information

IP address and device identifiers
Browser and operating system information
Usage and analytics data to improve services
Cookies and similar tracking for session management
Location information where permitted by you

How We Use Your Data

Your personal data is used strictly for providing and improving payment services, ensuring security and compliance, and communicating important updates:

To process payments and prevent fraud
To comply with regulatory and legal obligations
To provide customer support and service notifications
To analyze service usage and improve platform features
With your consent, to send marketing and promotional materials with easy opt-out options

Data Sharing & Disclosure

We share your data only for legitimate business purposes, including:

Third-party service providers assisting in transaction processing and infrastructure
Regulatory and legal authorities as required under Indian laws
Payment gateways, banks, and financial institutions to facilitate payments
In connection with corporate transactions such as mergers or acquisitions
Where you provide explicit consent for specific uses

We will never sell your personal information for marketing or other non-legitimate purposes.

Security Measures

We follow industry-recognized security protocols to protect your data:

Technical Controls

SSL/TLS encryption for data in transit
PCI DSS compliance for payment data
Regular vulnerability assessments and audits
Multi-factor authentication and access control

Operational Controls

Strict data access policies
Employee privacy and security training
Data minimization and retention policies aligned with law
Regular backups and disaster recovery plans

Your Rights

Under Indian privacy laws, you have the right to:

Access

Request a copy of your personal data we hold

Correction

Request correction of inaccurate or incomplete personal data

Deletion

Request deletion of personal data, subject to applicable law

Portability

Request export of your data in machine-readable format

Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact our Data Protection Officer:

Email: [email protected]