XORPAYXORPAY

Privacy Policy

Last updated: 21 July 2026

BARG INFO SOLUTIONS ("we", "us") operates the XORPAY platform. This Privacy Policy explains how we collect, use, disclose and protect your personal data in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

1. Data we collect

  • Identity & contact: name, mobile, email, address.
  • KYC: selfie photograph, Aadhaar, PAN, bank proof.
  • Transaction: customer name, mobile, amount, card type, gateway reference IDs.
  • Device & log: IP address, browser, device identifiers, access logs.

We do not collect or store full card numbers, CVV or PIN. Card data is captured directly by our PCI-DSS certified payment partners on their hosted checkout.

2. How we use it

  • To provide, operate and improve the Service.
  • To verify identity and comply with KYC / AML obligations.
  • To process transactions and settle funds.
  • To prevent fraud, detect misuse and enforce our Terms.
  • To communicate service updates, transaction alerts and support responses.
  • To comply with legal, regulatory and audit requirements.

3. Sharing

We share data only with: (a) RBI-licensed payment aggregators and payout partners (e.g. Razorpay, Cashfree) strictly to process transactions; (b) cloud infrastructure and analytics providers under confidentiality; (c) law enforcement or regulators when required by law.

4. Retention

KYC and transaction records are retained for a minimum of 5 years or such longer period as required by applicable law (RBI, PMLA). You may request deletion of non-mandatory data by writing to us.

5. Security

We implement industry-standard technical and organizational measures including TLS in transit, encryption at rest, access controls, audit logs and row-level security in our database. No system is 100% secure; you agree to notify us of any suspected breach.

6. Your rights

Subject to applicable law, you may request access, correction, or deletion of your personal data, withdraw consent, or lodge a complaint with the Data Protection Board of India. Contact privacy@xorpay.online.

7. Cookies

We use strictly necessary cookies for authentication and functional cookies for user preferences. We do not use third-party advertising cookies.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors.

9. Changes

We may update this Policy from time to time. Material changes will be notified via email or dashboard notice.

10. Contact

Privacy queries: privacy@xorpay.online · Grievance Officer: grievance@xorpay.online