Legal Center/Privacy Policy

Privacy Policy

Effective Date: September 11, 2026•Version 2.4•DPDP Act (2023) & IT Rules Aligned

1. Information We Collect

We collect information you provide directly to us when you create a merchant account, link your bank details, or make a payment checkout. This includes your name, email, contact number, business category, KYC verification documents, and transaction details.

2. How We Use Your Information

Your data is used to facilitate digital checkouts, process merchant payouts, verify identity (KYC compliance), mitigate fraud, and communicate transaction status updates. We do not sell, rent, or lease your personal information to third parties.

3. Data Protection & Security Standards

We implement industry-standard 256-bit SSL encryption for all data processed in transit and at rest. Your financial transactions are securely managed via certified PCI-DSS compliant payment provider gateways (Cashfree, Razorpay, Easebuzz, Instamojo), and sensitive merchant bank records are encrypted. MerchFlow never stores raw credit/debit card numbers or CVVs.

4. Cookies & Tracking Technology

We use session cookies to verify authenticated dashboard sessions. We also offer features for tracking pixels (Meta Pixel / Google Analytics) which merchants can toggle on or off inside their individual service links settings.

5. Grievance Redressal & Contact Desk

In accordance with the Information Technology Act 2000 and Digital Personal Data Protection Act 2023, contact our Grievance Officer at:

Grievance Officer
Privacy Desk / MerchFlow Technologies
Resolution SLA
Acknowledged in 24 hrs • Max 15 days