Privacy Policy

1. Information we collect

• Information you provide: your name, work email, company name, phone number, enquiry details, support messages, and other information you choose to share.
• Business and onboarding information: business registration records, authorised-signatory details, bank-account information, KYC materials, and documents required by applicable law or our regulated partners.
• Payment and transaction information: identifiers, amounts, payment modes, beneficiary or settlement details, statuses, timestamps, and reconciliation records processed for merchants and partners.
• Technical and security information: IP address, browser and device data, authentication events, session information, request logs, and operational telemetry used to secure and maintain the Services.

2. How we use information

• To respond to enquiries and provide onboarding, support, and account services.
• To operate, secure, monitor, troubleshoot, and improve the Services.
• To conduct business verification, KYC, risk, fraud-prevention, and compliance checks.
• To process transactions and provide reconciliation, settlement, and audit records.
• To send service, security, compliance, and operational notifications.
• To comply with applicable law and lawful requests from competent authorities.

3. Legal bases and consent

We process information where it is necessary to provide contracted Services, meet legal and regulatory obligations, protect legitimate business and security interests, or where you have given consent. Where processing is based on consent, you may withdraw it subject to applicable law and any continuing legal record-keeping requirements.

4. Sharing of information

We do not sell personal information. We may share information with banking partners, payment networks, regulated financial institutions, technology and professional service providers working under confidentiality obligations, and regulators or law-enforcement authorities where required. We may also transfer information as part of a corporate restructuring, subject to appropriate safeguards.

5. Data security

We use safeguards designed for payment operations, including encryption in transit and at rest, scoped access, role controls, protected credentials, audit logging, monitoring, and resilient processing. No system is completely secure, so we continuously review and improve these controls.

6. Retention and deletion

We retain information only for as long as needed to provide the Services, resolve disputes, enforce agreements, maintain security and audit evidence, and meet legal, tax, accounting, banking, and payment-record obligations. Information is deleted, anonymised, or securely archived when it is no longer required.

7. Cookies and local storage

Our website and merchant applications may use essential cookies and browser storage for secure sessions, preferences, fraud prevention, and core functionality. We do not use third-party advertising cookies on the Nikspay website.

8. Your rights

Subject to applicable law, you may request access to or correction of your personal information, ask for deletion where permitted, withdraw consent, or raise a concern about our handling of your information. Submit a request through the contact section on our home page or write to the registered office listed above.

9. Grievance contact

Privacy grievances may be addressed to the Grievance Officer, Quepay Solutions Private Limited, through the Nikspay contact number, the Nikspay contact form, or by post at our registered office. We will acknowledge and resolve grievances within the timelines required by applicable Indian law.

10. Children’s privacy

The Services are intended for businesses and authorised adult users. They are not directed to children, and we do not knowingly collect children’s personal information through the website.

11. Changes to this policy

We may update this policy as our Services, practices, or legal obligations change. The date above identifies the latest published version. Material changes will be communicated through the website or another appropriate channel.