1. Introduction

godpay.me ("we", "our", or "us") provides decentralized peer-to-bank UPI payment processing and gateway verification technology for businesses and developers. We respect your privacy and are committed to protecting the personally identifiable information of merchants and their end customers.

2. Information We Collect

To enable automated UPI payment routing and UTR verification, we collect:

• Merchant Account Information: Full name, business trade name, mobile phone number, email address, and encrypted passwords.
• Gateway Configuration Data: Connected merchant VPAs, UPI handles, and access tokens for connected payment provider accounts (e.g. Paytm, PhonePe, BharatPe, Freecharge).
• Transaction Metadata: Order IDs, amounts in INR, customer names, timestamps, and 12-digit UTR reference numbers issued by the National Payments Corporation of India (NPCI).

3. How We Use Collected Data

Collected information is used exclusively for:

• Generating dynamic QR codes and deep-linking UPI payment URLs.
• Auto-routing payment traffic across connected gateways and verifying UTR numbers in real time.
• Dispatching secure webhook alerts to merchant callback endpoints.
• Preventing fraudulent duplicate transactions and unauthorized API access.

4. Zero-Escrow Architecture & Data Security

Unlike traditional payment aggregators, godpay.me operates under a Direct Settlement Architecture. We do NOT hold, store, or escrow merchant funds in intermediary accounts. Customer payments settle directly into the merchant's linked bank account.

All data transmission between your application and our gateway is secured using 256-bit TLS/SSL encryption, SHA-256 HMAC request signing, and role-based API key access controls.

5. Contact Us Regarding Privacy

If you have inquiries regarding our data handling or privacy practices, please contact our Data Protection Desk at: support@godpay.me.