Privacy Policy

1. Introduction

Welcome to RentXPay ("we", "our", or "us"), a payment facilitation platform powered by RentXPrime Technologies. We take your privacy and financial security very seriously. This Privacy Policy outlines our procedures regarding the collection, handling, storage, and protection of information when you access our website, dashboards, REST APIs, or payment checkout screens.

2. Information We Collect

To deliver automated UPI payment detection and merchant portal tools, we collect the following types of information:

• Merchant Account Information: Name, business name, phone number, email address, password hash, and KYC verification records.
• Transaction Records: Order IDs, payment amounts, customer names, UPI reference numbers (UTR), timestamps, and transaction statuses (success, pending, failed).
• System Telemetry & Logs: Client IP address, browser user-agent, API request timestamps, response codes, and webhook dispatch records.
• We NEVER Collect or Store: Customer bank account passwords, UPI MPINs, or ATM debit card CVVs. UPI MPIN entry is completed strictly on certified banking / NPCI applications.

3. Purpose of Processing

We utilize collected data strictly for lawful business purposes, including:

• Validating and confirming UPI incoming payments in real time.
• Sending signed HTTP webhook alerts to merchant endpoints.
• Generating analytical graphs and payout histories in merchant and administrator dashboards.
• Preventing fraudulent behavior, unauthorized access, and automated abuse.
• Complying with applicable Reserve Bank of India (RBI) and Information Technology Act rules.

4. Data Protection & Encryption

All data transmitted between your browser, our servers, and merchant integration endpoints is encrypted using Transport Layer Security (TLS 1.3 / 256-bit SSL). Sensitive credentials such as webhook secrets, JWT tokens, and user password hashes (BCrypt cost factor 12) are stored securely with strict cryptographic controls.

5. Third-Party Sharing

RentXPay does not sell, rent, or trade merchant or customer personal data to advertisers or marketing intermediaries. Data is shared exclusively with verified banking aggregators (e.g. Paytm Payments Bank, NPCI UPI switch) or legal regulatory bodies when mandated by Indian court orders or statutory notices.

6. Cookies and Sessions

We utilize strictly necessary session cookies (e.g., payindia_session) to maintain administrative and merchant login authentication with HttpOnly, SameSite=Lax, and secure flags enabled.

7. Grievance Redressal & Contact Officer

In accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, for any privacy inquiries, reach out to our Grievance Officer: