Privacy Policy

ExyPay is a B2B payment collection platform designed to help Indian businesses manage recurring payments, mandates, and billing workflows. This policy applies to all users of the ExyPay platform, including business owners, administrators, and their customers who interact with payment flows powered by ExyPay.

Information you provide directly:

• ●Business name, owner name, and contact details (email, phone number)
• ●Business registration documents and KYC information
• ●Bank account details for settlement purposes
• ●Customer information entered into the platform (name, email, phone)

Information collected automatically:

• ●Device type, browser, and operating system
• ●IP address and approximate location
• ●Pages visited, session duration, and interaction data
• ●Cookies and similar tracking technologies

Payment-related information:

• ●Transaction amounts, dates, and statuses
• ●UPI IDs, mandate references, and payment method tokens (no raw card numbers stored)
• ●Payment gateway responses and error logs

We use the information we collect for the following purposes:

• ●To provide, operate, and improve the ExyPay platform
• ●To process payments and manage recurring billing workflows
• ●To send transactional notifications, payment reminders, and receipts
• ●To verify business identity and comply with RBI/NPCI KYC requirements
• ●To detect and prevent fraud or unauthorized activity
• ●To provide customer support and resolve disputes
• ●To analyse platform usage and improve user experience
• ●To comply with applicable legal and regulatory obligations

Your data is stored on secure servers located in India, in compliance with applicable data localisation norms. We implement the following security measures:

• ●AES-256 encryption for data at rest
• ●TLS/HTTPS encryption for all data in transit
• ●Role-based access controls limiting data access to authorised personnel
• ●Regular security audits and vulnerability assessments
• ●PCI-DSS compliant payment flows

ExyPay uses cookies and similar technologies to enhance your experience on our platform. These include:

• ●Essential cookies: Required for the platform to function correctly (session management, authentication)
• ●Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• ●Preference cookies: Remember your settings and preferences for a better experience

You can control or disable cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

As a user of ExyPay, you have the following rights regarding your personal data:

• ●Access: Request a copy of the personal data we hold about you
• ●Correction: Ask us to correct inaccurate or incomplete information
• ●Deletion: Request deletion of your data, subject to legal retention requirements
• ●Portability: Receive your data in a structured, machine-readable format
• ●Withdrawal of Consent: Opt out of non-essential data processing at any time

To exercise any of these rights, please contact us at support@exypay.in. We will respond within 30 days.

ExyPay is intended for use by businesses and their authorised representatives. Our platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal information, we will promptly delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify registered users via email or a prominent notice on the platform.

Your continued use of ExyPay after any changes take effect constitutes your acceptance of the revised policy. We encourage you to review this page periodically.