Privacy Policy

1. Introduction

iPaylight is a payment infrastructure platform operated by Ipaylight Technologies Pvt. Ltd. ("iPaylight", "Company", "we", "our" or "us").

We provide technology and related services that may support digital payment collection, payouts, payment integrations, APIs, dashboards and transaction reconciliation for eligible businesses.

We recognise that privacy and the protection of personal information are important. We aim to process information in a lawful, fair and transparent manner and apply appropriate safeguards based on the nature of the information and the services provided.

This policy should be read together with our Terms and Conditions and any additional privacy notices or agreements applicable to a particular service.

2. Scope of This Policy

This policy applies, as relevant, to information processed in connection with:

• Visitors to our website.
• Businesses and merchants enquiring about our services.
• Merchant representatives and authorised account users.
• Customers whose payment information is processed through an applicable service.
• Individuals contacting our support or sales teams.
• Developers using our APIs, integration tools or documentation.

Some information may be processed by banks, payment aggregators or other service providers under their own privacy policies and legal responsibilities.

Where iPaylight processes personal information on behalf of a merchant or another organisation, the relevant contractual arrangements and applicable law will determine the respective responsibilities of the parties.

3. Information We Collect

The information we collect depends on how you interact with our website and services. We seek to collect information relevant to the purposes described in this policy.

3.1 Personal and Contact Information

We may collect information such as:

• Name and business designation.
• Business email address and telephone number.
• Business name, address and website.
• Information submitted through contact, sales or support forms.
• Communication and support request details.

3.2 Business and Verification Information

For merchant onboarding or compliance purposes, we may collect relevant business registration details, tax information, authorised representative details, verification documents and business bank account information.

The specific documents requested depend on the service, applicable law and the requirements of relevant payment or financial partners.

3.3 Transaction Information

Where relevant to a service, information may include transaction references, payment amounts, timestamps, transaction status, payment method, refund details, payout instructions and reconciliation records.

The information available to iPaylight depends on the payment integration and the role we perform in the transaction.

3.4 Technical Information

When you access our website or technology services, we may collect technical information, including:

• IP address and general connection information.
• Browser type, operating system and device information.
• Pages viewed, referring URLs and interaction data.
• Access timestamps, diagnostic records and error logs.
• Security events and information needed to investigate suspicious activity.

3.5 Information From Other Sources

Where legally permitted and necessary, we may receive information from merchants, payment partners, verification providers, fraud prevention services and other authorised sources.

We do not intend to collect more information than is reasonably necessary for the relevant purpose, subject to legal, contractual and operational requirements.

4. How We Use Your Information

We may use information for the following purposes, where applicable and legally permitted:

• Responding to enquiries and providing customer support.
• Creating, managing and maintaining merchant accounts.
• Providing payment technology, integration and reporting services.
• Processing and reconciling transactions through applicable arrangements.
• Conducting onboarding, identity verification and business checks.
• Detecting, investigating and preventing fraud, misuse and security incidents.
• Maintaining, troubleshooting and improving our website and services.
• Sending important service, security and operational communications.
• Managing billing, fees and contractual obligations.
• Complying with applicable laws, lawful requests and regulatory requirements.
• Establishing, exercising or defending legal claims where necessary.

Where required by applicable law, we will obtain consent or identify another valid legal basis before processing personal information for a particular purpose.

We will not use personal information for materially unrelated purposes without an appropriate legal basis or any notice or consent required by law.

5. Payment and Financial Information

Payment-related information requires appropriate safeguards. Depending on the service, iPaylight may process transaction identifiers, payment status, amounts, beneficiary details and information required for reconciliation.

Sensitive payment credentials and financial authentication information are handled according to the relevant payment integration, security requirements and applicable law.

We do not ask users to disclose passwords, PINs, one-time passwords (OTPs) or other authentication secrets through ordinary email or unsolicited communications.

Depending on our role and the applicable integration, certain payment information may be collected or processed directly by a bank, authorised payment aggregator or other payment service provider.

Users should review the privacy notices of the relevant payment provider where that provider independently collects or processes their information.

6. Cookies and Similar Technologies

Our website may use cookies, session storage or similar technologies to support website functionality, maintain sessions, remember preferences, improve performance and protect against security threats.

Depending on the tools actually implemented, these technologies may be used for analytics or to understand how visitors interact with our website.

Essential cookies may be required for certain website features to function. Where required by law, we will seek consent before using non-essential cookies or similar technologies.

You may be able to manage cookies through your browser settings. Blocking certain cookies may affect the availability or functionality of some features.

The categories and duration of cookies used should be described in a cookie notice or cookie preference tool if such functionality is implemented on our website.

7. How We Share Information

We do not treat personal information as a product for sale. We may disclose information where necessary for the purposes described in this policy and as permitted by law.

Depending on the circumstances, recipients may include:

• Payment partners: Banks, authorised payment aggregators, payment networks and relevant transaction processing providers.
• Technology providers: Hosting, infrastructure, security, monitoring, communications and support providers.
• Verification and fraud prevention providers: Providers supporting identity checks, risk assessment and transaction security.
• Professional advisers: Lawyers, auditors, accountants and other advisers where reasonably necessary.
• Authorities and regulators: Where disclosure is required or permitted under applicable law or a lawful request.
• Business transfers: Relevant parties in connection with a merger, restructuring, acquisition or transfer of business, subject to applicable legal safeguards.

We expect service providers handling personal information on our behalf to be subject to appropriate contractual, confidentiality and security obligations, as applicable.

We may also share information where necessary to protect users, investigate suspected fraud, enforce our agreements or establish and defend legal claims.

8. Data Security

We seek to implement reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse, alteration and disclosure.

Depending on the nature of the service and associated risks, safeguards may include:

• Access controls and authentication measures.
• Secure communication and transmission mechanisms.
• Monitoring, logging and security reviews.
• Credential management and restricted system access.
• Backup and recovery procedures where appropriate.
• Processes for identifying and responding to security incidents.

No website, network or electronic storage system can be guaranteed to be completely secure. We cannot promise absolute security, but we aim to maintain safeguards appropriate to the information we process.

If a personal data breach occurs, we will assess and respond to it in accordance with applicable legal obligations.

Users and merchants should protect their passwords, API keys, devices and account credentials and promptly report suspected unauthorised access.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Retention periods may depend on the type of information, the services provided, contractual requirements, payment-related recordkeeping obligations, dispute resolution and legal requirements.

When information is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise handle it in accordance with applicable law and our retention procedures.

Certain information may remain in secure backups or records for a limited period before being removed in accordance with applicable procedures.

10. Your Privacy Rights and Choices

Depending on applicable law and the context in which we process your information, you may have rights relating to your personal data. These may include:

• Requesting information about personal data processing.
• Requesting access to or a copy of eligible personal information.
• Requesting correction or updating of inaccurate information.
• Requesting erasure where legally applicable.
• Withdrawing consent where processing is based on consent.
• Raising a grievance or privacy-related complaint.
• Exercising other rights available under applicable law.

These rights may be subject to legal exceptions, record-retention obligations, transaction requirements and the rights of other individuals.

To protect your information, we may need to verify your identity or authority before responding to a request.

Where another organisation controls the relevant processing, we may direct you to that organisation or coordinate with it as appropriate.

You may submit a privacy request or grievance using the official contact details published on our website. We will handle eligible requests in accordance with applicable law.

11. Children's Privacy

Our merchant-facing payment infrastructure services are intended for businesses and authorised users rather than for independent use by children.

We do not knowingly seek to collect children's personal information through our website unless such collection is appropriate for the relevant service and complies with applicable law.

If you believe that personal information relating to a child has been submitted inappropriately, please contact us so that we can assess the matter and take appropriate action as required by law.

12. Data Processing and Transfers

Information may be processed or stored in locations where we or our authorised service providers operate, subject to applicable legal requirements.

Where information is transferred across jurisdictions, we will apply safeguards required by applicable law and relevant contractual arrangements.

Cross-border transfers of personal data will be handled in accordance with applicable Indian data protection requirements and any other laws that apply to the relevant processing activity.

13. Third-Party Websites and Services

Our website may contain links to third-party websites, payment providers, documentation or other external services.

These third parties may have their own privacy policies, terms and data handling practices. We encourage you to review those policies before providing information to them.

The inclusion of a link does not necessarily mean that iPaylight endorses the third party or controls its privacy practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, information handling practices, technology or applicable legal requirements.

Updated versions will be published on this page with a revised last-updated date.

Where required by law, we will provide additional notice or obtain consent before implementing changes that require it.

We encourage you to review this page periodically to remain informed about our privacy practices.

15. Contact Us and Privacy Grievances

If you have questions about this Privacy Policy, wish to exercise a privacy right or want to raise a complaint concerning personal information, please contact Ipaylight Technologies Pvt. Ltd. using the official contact details published on our website.