[Just Launched] Introducing 'PayToPhone' - India's first, instant mobile number-based payouts for B2C businesses!Live Demo!

Privacy Policy

Last updated: January 11, 2023


Cashfree Payments India Private Limited Company is incorporated under the Companies Act, 2013 with CIN No. U72900KA2015PTC082987, having its registered office at 1st Floor, Vaishnavi Summit, No. 6/B, Summit, 80 Feet Rd, Koramangala 1A Block, Koramangala 3 Block, Koramangala, Bengaluru, Karnataka 560034 ("Cashfree", "Us", "We", or "Our"). We operate as a Payment Aggregator and provide payouts and verification services, amongst others, to e-commerce marketplaces, educational institutions, financial institutions, web aggregators, etc. We also hold an in principle approval of operating as a prepaid payment system operator in India. Our aim is to ensure a secure data processing environment and a convenient payment process infrastructure for Our customers. As the payments services are significantly dependent upon data or information shared by Our customers, We are committed to ensuring a secure environment for the processing of personal and sensitive personal information ("Personal Data" as defined hereunder) collected by Us from Our stakeholders. We implement security standards and best practices as per Applicable Laws (as defined hereunder) to protect Personal Data collected by Us from those who, directly or indirectly, use or have access to ("Users", "You" or "Your") Our website, software or mobile application, platforms hosted by Us, payment infrastructure provided by Us through Our merchant platforms/ websites or our checkout pages ("Platforms") products and all or any part of Our payment aggregation, payouts, verification and any other services (collectively "Services").Theterms and conditions of Our Services have been provided separately on Our website and shall be read with this Privacy Policy as they are an integral part of Our Services.


This Privacy Policy is applicable to Users of Our Services as well as to Our full-time, part-time, temporary employees and interns, merchants, business partners, contractors, vendors, outsourcers, consultants, contingent workers, temporary agency workers, etc. who provide services to Cashfree.


By using Our Services, You agree that You have read, understood and are bound by Our Privacy Policy and You hereby, provide Your express consent to the past, present and future collection, usage, processing, sharing and storage of Your Personal Data, including the transfer of Your Personal Data to third parties or service providers for the purposes as stated in this Policy. This Policy may be amended and updated by Us periodically, in order to be compliant with any changes in the Applicable Laws and/ or legal and regulatory developments. The Policy also enumerates Your Rights, the manner in which You can exercise these Rights and accessibility to Our point of contact for raising any concerns You may have regarding the protection of Your Personal Data.


We advise You to return to this page periodically to review the updated and current version of Our Privacy Policy.


Definitions
  1. “Applicable Laws” shall mean Information Technology Act, 2000, The Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, Payment and Settlement Systems Act, 2007, Prevention of Money Laundering Act, 2002 and any other applicable rules and regulations issued thereunder, including any guidelines, circulars, ordinance, order, judgment, notification, decree, bye-law, governmental restriction, or any similar form of decision of, or determination by, or any interpretation, policy or administration, having the force of law in India, whether in effect as of the date of this Policy or thereafter, as applicable to Us.
  2. "Biometrics" means the technologies that measure and analyze human body characteristics, such as 'fingerprints', 'eye retinas and irises', 'voice patterns', 'facial patterns', 'hand measurements' and 'DNA' for authentication purposes.
  3. “Password” means a secret word or phrase or code or passphrase or secret key, or encryption or decryption keys that one Uses to gain admittance or access to information.
  4. “Reasonable security practices and procedures” means security practices and procedures designed to protect Personal Data from unauthorized access, damage, use, modification, disclosure or impairment, as may be specified in an agreement between the parties or as may be specified under Applicable Laws.
  5. “Personal Data” means any information that relates to You, which, either directly or indirectly, in combination with other information available or likely to be available with Us is capable of identifying You, including Your:
    • Password
    • Financial information such as Bank account or credit card or debit card or other payment instrument details
    • physical, physiological and mental health condition
    • sexual orientation
    • medical records and history
    • Biometric information
    • any detail relating to the above clauses as provided by You to Us for the purpose of obtaining Our Services
    • any of the information received by Us as mentioned above for processing, storing the same under lawful contract or otherwise
  6. “Processing” in relation to Personal Data means an automated operation or set of operations performed on Personal Data, and may include operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

Exception to Personal Data: If any information provided by You is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other Applicable Laws, such information shall not be regarded as Personal Data.


Purpose

The purpose of this Privacy Policy is to inform You, about the reasons for Our collection, usage, processing, storage, transfer and sharing of Your Personal Data while using or accessing Our Services. We will also provide details as to the manner in which We collect, use, process, store, transfer and share Your Personal Data when You use or have access to Our Services.


We may ask You to provide Us with Your Personal Data that We may use to contact or identify You. We may also collect Your Personal Data for improving Our Services.


You may choose to not share such information with Us, however, that will restrict Your registration on Our Website or availability of certain features. If Your information is used for any different purpose than the ones listed in this Privacy Policy, We will ask You for Your consent in advance for such purposes. You acknowledge that information provided to third-party accounts by You may be transmitted into Your account with Us on Your authorization for such transmissions and such third-party account Information will be covered under this Privacy Policy.


Your Personal Data is collected, processed, used, stored, disclosed, or shared as described in Our Privacy Policy, and we hereby through this Privacy Policy, seek Your consent through this notice regarding the collection, processing, use, storing and sharing Your Personal Data for one or more of the purposes detailed herein. If Your specific consent is required to obtain for any other purposes or under Applicable Laws of India, We will procure such specific consent from You. Your Personal Data is used, processed, stored and/or disclosed in accordance with this Privacy Policy and in compliance with the Applicable Laws.


We may collect following types of Your Personal Data:


Types of Personal DataPurposeDetails of Personal Data
Name and Contact InformationFor providing payment aggregation, payouts and verification services to Our merchants, business partners and end-customers.Full name(s), title, age, user ID, gender and Your date of birth. Telephone/mobile number(s), address(es), state/city of residence, country, pin code, email address(es), and chosen billing address(es).
Financial InformationAccount RegistrationPersonal bank account numbers, including e-nach, NEFT, IMPS and UPI ID details, tokenized card information, card type, expiry date on the credit or debit card, and name on the card.
Identification InformationFor providing payment aggregation, payouts and verification services to Our merchants and business partners and to comply with screening requirements as per Applicable Laws.Know Your Customer (KYC) documents including all proofs of identity and address, photograph, Permanent Account Number (PAN), GST Number, etc.
Payments related dataFor providing payment aggregation, payouts and verification services to Our merchants, business partners and end-customers and to comply with screening requirements as per Applicable Laws.Payment gateway ID, name of issuing bank, merchant’s name, category and other identifiers along with the details of products or services purchased or paid for, mode of payment, the date, currency and amount of the transaction(s), whether the payment was successful, and other information provided by You directly or indirectly to Us or provided to Us by banks, merchants or other service providers or business partners.
Log DataStatistical analyses of User behavior and characteristics in order to measure interest in and use of the various areas of Our Services provided to You.Browser type, IP address, location, requested URL, referring URL, timestamp information, application, device, versions and configurations, operating systems, device brand and model, geo-location information, unique identifiers associated with Your device(s) and pages that You access on the website(s) to access or avail Our Services and paths taken.
Credit related InformationFor providing payment aggregation, payouts and verification services to Our merchants that are financial institutions or account aggregators under Applicable Laws, Our business partners and third party service providers and end-customers.Your credit related information or assessment provided by third parties such as financial institutions or account aggregators under Applicable Laws including Our business partners and third party service providers.
Information provided by You directly to Us or received through Our merchants, business partners and third party service providersWe may use third party services such as Google Analytics, who may collect, monitor and analyze this type of information in order to facilitate Our Services, to provide the Service on Our behalf, to perform Service-related services or to assist us in analyzing how Our Services are used. Your information may also be used to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email that We send.Account usernames and passwords; Your email address; Your preferred settings and themes, Communications with customer support, promotional and marketing campaigns, surveys, and records of Your subscriptions to marketing materials, or withdrawal, as the case maybe.(Note: We use "cookies" to collect information. You can instruct Your browser to refuse all cookies or to indicate when a cookie is being sent. However, if You do not accept cookies, You may not be able to use some portions of Our Service. We do not control the use of cookies by third parties. The third party service providers have their own privacy policies addressing how they use such information.)
Your Device InformationWe may collect Your device information in order to gain insights about Your use of Our website or Services, to provide a customized experience, and to show targeted advertisements.Your contact list, call records, SMS, media files and location data in Your devices to enable You to access Our Services after seeking necessary permissions.

Exception to Our Collection of Your Personal Data

We do not collect certain categories of Personal Data, such as, Your details relating to Your race or ethnicity, religious or philosophical beliefs, biometric information, sexual orientation, political opinions, or information about your physical, physiological, mental health condition, medical records and history or any genetic information.

Your Rights

Right to Review Your Personal Data - You may review the Personal Data provided by You and any Personal Data found to be inaccurate or deficient will be corrected or amended by Us, as feasible. However, please note, that We will not be responsible for the authenticity of the Personal Data provided by You.


Withdrawal of Your Consent - You may choose not to provide Your Personal Data, at any time while availing the Services or otherwise, or withdraw Your consent provided to Us earlier, in writing to our email ID:grievances@cashfree.com


However, in case You choose to not provide or later withdraw Your consent, We may not be able to provide to You some or all of the features and functionalities of Our Services. This may also affect Our ability to process Your Personal Data and lead to the discontinuation of Our Services for which such Personal Data was required to be used or was being used, at Our sole discretion.


Please note that these rights are limited in instances where We are legally required to retain Your Personal Data in order to be compliant with the Applicable Laws.

Security

We adhere to the international security standards and certifications issued by International Organization for Standardization, the Payment Card Industry Data Security Standards (PCI DSS) Council and Cybersecurity Standards by the American Institute of Certified Public Accountants (AICPA) such as ISO/IEC 27001: 2013, PCI DSS v3.2.1 and Service Organization Control Type 2 (SOC 2), respectively. We have regular audits of Our Information System that is carried out by CERT-In empanelled auditors as required under the Applicable Laws.


The security of Your Personal Information is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use e commercially acceptable means to protect Your Personal Information, We cannot guarantee its absolute security.

International Transfer

Your Personal Data may be transferred to and maintained on computers located outside of Your state, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.


If You are located outside India and choose to provide information to Us, please note that We transfer the information, including Personal Data, to India and process it there. Your consent to this Privacy Policy followed by Your submission of Your Personal Data represents Your agreement to that transfer.

Links To Other Sites

Our Service may contain links to other sites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 13 ("Children").

We do not knowingly collect personally identifiable information from children under 13. If You are a parent or guardian and You are aware that Your child has or children have provided Us with Personal Data, please contact Us atgrievances@cashfree.com . If We become aware that We have collected Personal Data from children under age 13 without verification of parental consent, We take steps to remove that information from Our servers.

Retention of Your Personal Data

We retain Your Personal Data for no longer than is required for the purposes for which Your Personal Data is collected or for the period required to be maintained under the Applicable Laws.

Exception to Consent for Disclosure of Personal Data

We seek Your express consent for the disclosure of Your Personal Data for the purposes stated in this Privacy Policy, unless such disclosure is necessary for compliance of a legal obligation under the Applicable Laws or any law for the time being in force.


Your Personal Data may be shared, without obtaining prior consent, with Government agencies mandated under the Applicable Laws or any law in India to obtain Your Personal Data for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences. In which case, the Government agency or authority sends a request to Us stating the purpose of seeking Your Personal Data.


Your Personal Data so obtained by the Government agency or authority is not published or shared with any third party, unless the disclosure to any third party is required by an order under the Applicable Laws or any law in India for the time being in force.


By Using Our Services and/or by providing Your Personal Data, You consent to the collection and Use of the information You disclose on Us in accordance with this Privacy Policy, including but not limited to Your consent for sharing Your information as per this Privacy Policy. As per Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below:

Mr. Fasih Abbas M

Cashfree Payments India Pvt Ltd,

Vaishnavi Summit, No. 6/B, Summit,

80 Feet Rd, Koramangala 1A Block,

Koramangala 3 Block, Koramangala,

Bengaluru, Karnataka 560034

Email ID:grievances@cashfree.com

Ready to get started?

Collect customer payments, make payouts, manage international payments and so much more! Create your account or contact our experts to explore custom solutions.

  • Easy onboarding

  • Dedicated account manager

  • API access

Create Account