Fintech
Privacy policy clauses for Razorpay
Razorpay is a payment gateway that processes online transactions for merchants in India and emerging markets. Websites integrate Razorpay to accept credit cards, debit cards, UPI, and bank transfers from customers, handling payment processing and settlement.
Free scan · No signup · Results in 60 seconds
What data Razorpay collects
Your privacy policy must disclose each of the following data types when you use Razorpay.
Payment card and UPI details (tokenized)
Transaction data and amounts
Customer name, email, and phone
Bank account details for settlements
When does Razorpay trigger privacy obligations?
Razorpay integration triggers privacy obligations the moment payment processing begins—specifically when customer payment card details, UPI identifiers, bank account information, and personally identifiable data (name, email, phone) flow through Razorpay's infrastructure.
Immediate triggers:
- –PCI-DSS compliance: Razorpay holds PCI-DSS Level 1 certification, but your business becomes a PCI-DSS merchant the instant you accept card payments through it. You must conduct a Self-Assessment Questionnaire (SAQ) and maintain compliance scope documentation.
