Legal & Security

Privacy Policy

Last Updated: August 2026 • Effective for all merchants & users

1. Overview & Information We Collect

Lion UPI ("we", "our", or "us") is committed to protecting your privacy and security. This Privacy Policy outlines how we collect, store, encrypt, and process data when you access our payment gateway infrastructure, APIs, merchant portal, and payment links.

We collect essential information required to provision merchant services and process UPI transactions securely:

  • Merchant Profile Data: Full name, registered email address, mobile number, business name, and UPI VPA identifiers.
  • Transaction Metadata: Order IDs, transaction amounts, UTR numbers, payment status, payment method, and timestamps.
  • Technical Logs: IP address, browser type, device information, API request headers, and webhook delivery logs for fraud prevention and audit compliance.

2. How We Use Information

Your information is used strictly for payment processing, verification, security auditing, and service improvement:

  • To generate scannable UPI QR codes and payment checkout links.
  • To auto-route payment traffic across connected gateways (Paytm, BharatPe, Freecharge) and verify UTR numbers.
  • To dispatch HTTP webhook notifications and automated payment receipt emails.
  • To detect and prevent fraudulent transactions, rate-limit unauthorized API attempts, and maintain platform security.

3. Data Protection & Bank-Grade Security

Security is embedded into every layer of our platform. We employ 256-bit SSL encryption for data in transit and AES-256 encryption for sensitive database credentials. We maintain strict access controls, CSRF token validation, SQL injection protection, and rate limiting on all API endpoints.

4. Third-Party Integrations & Data Disclosure

We do NOT sell, rent, or trade merchant or customer data. Transaction data is transmitted solely to authorized payment providers (e.g. Paytm, BharatPe, NPCI UPI bank networks) necessary to execute payment verification and settlement.

5. Cookies & Session Storage

We use essential HTTP cookies and session tokens exclusively to maintain secure merchant authentication, CSRF validation, and user interface preferences. We do not use intrusive third-party tracking cookies.

6. Contacting Our Data Privacy Team

If you have any questions or concerns regarding this Privacy Policy or data security, please contact our support team at praashant24@gmail.com.