Privacy Policy

1. Introduction

This Privacy Policy explains how FamGateway collects, uses, encrypts, and protects your information when you access our payment gateway, API dashboards, or website at https://famgateway.in.

2. Information We Collect

To provide automated payment processing services, we collect only necessary developer and account data:

• Account Details: Name, email address, password hash (salted and hashed via bcrypt), and unique Merchant ID.
• Payment Configuration: Your public FamPay UPI ID (e.g. username@fam) to generate QR codes.
• Email Verification Credentials: Dedicated single-purpose Google App Passwords provided by you for automated transaction receipt matching.
• Transaction Metadata: Order amounts, timestamps, transaction statuses (Paid/Pending/Expired), and customer IP logs for anti-fraud detection.

3. How We Protect Your Credentials (AES-256-GCM Encryption)

Security is the cornerstone of FamGateway's architecture:

1. AES-256-GCM Encryption: All sensitive credentials (such as Google App Passwords) are encrypted using authenticated 256-bit AES encryption before being saved to the database.
2. Stateless IMAP Parsing: Incoming FamPay transaction emails are inspected in real-time server memory solely to match payment amounts and timestamps. Email contents, inbox history, and personal messages are never stored, copied, or logged.
3. Zero Primary Password Access: We strictly prohibit and never ask for your primary Google account password. Only isolated, revocable 16-character App Passwords are used.

4. Non-Custodial Architecture: No Financial Data Storage

FamGateway is an automated software bridge. We do not store credit card numbers, debit card PINs, CVVs, or bank net-banking credentials. 100% of the financial transaction occurs over the secure, encrypted NPCI UPI network directly into your personal account.

5. How We Use Collected Information

We use your information exclusively for the following purposes:

• To generate dynamic UPI QR codes and branded payment links for your customers.
• To verify transaction receipts and dispatch automated JSON webhooks to your designated server endpoint.
• To generate real-time revenue analytics and transaction history in your merchant dashboard.
• To monitor and prevent malicious activity, DDoS attacks, and unauthorized misuse.

6. Information Sharing & Third-Party Disclosure

We do not sell, rent, trade, or share your personal data with third-party advertisers.

Information is only shared under the following limited circumstances:

• Essential Infrastructure: Secure cloud server hosting providers operating under strict confidentiality and encryption agreements.
• Legal & Compliance: If required by applicable Indian Law, court order, or authorized government agencies pursuant to valid legal process.

7. User Control & Data Rights

You maintain complete control over your data on FamGateway:

• Revoke App Passwords: You can disconnect your Gmail or delete your App Password at any time from the Settings dashboard or directly inside your Google Account security center.
• Regenerate API Keys: You can cycle or delete your API credentials with one click if you suspect unauthorized access.
• Account Deletion: You may request complete account deletion and data scrubbing by contacting our support team.

8. Cookies & Session Security

FamGateway uses strict, secure session cookies (configured with HttpOnly, SameSite=Strict, and Secure flags) exclusively to keep you safely logged in. We do not use third-party cross-site advertising cookies.

9. Contact the Privacy Officer

For any privacy inquiries, data deletion requests, or security reports, please reach out to our team:

• Operating Entity: Aryanispe (Founder: Aryan Gupta)
• MSME Registration: UDYAM-BR-28-0050000
• Official Website: https://famgateway.in
• Official WhatsApp Support: Chat on WhatsApp (+91 9771348544)

Back to Homepage →