Privacy Policy & Data Protection Standards
Our commitment to safeguarding personal data, financial tokens, and customer privacy in strict compliance with the Reserve Bank of India (RBI) and Information Technology frameworks.
1. Scope and Applicability
This Privacy Policy explains how MSPay Technologies Private Limited (“MSPay”, “we”, “our”, or “us”) collects, processes, encrypts, and retains personal and financial information when you access our payment gateway, API infrastructure, merchant portals, and BBPS utility switches.
2. Card Data and RBI Tokenization Compliance
In accordance with Reserve Bank of India (RBI) circulars on Card-on-File Tokenization (CoFT):
- MSPay does not store raw 16-digit Primary Account Numbers (PAN), CVVs, or card PINs on merchant or corporate servers.
- Customer card data is replaced with unique, cryptographically bound network tokens issued directly by Visa, Mastercard, and NPCI RuPay.
- All token requests require explicit two-factor authentication (AFA) approval by the cardholder.
3. Data Localization
All payment transaction data, system logs, customer information, and financial audit trails are stored strictly on secured servers located within the territorial borders of India, in full compliance with RBI data localization mandates.
4. Encryption and Security Architecture
Our infrastructure maintains PCI DSS Level 1 certification. All data transmitted between merchant storefronts, customer devices, and MSPay servers is encrypted using TLS 1.3 with 256-bit AES encryption at rest.
5. Grievance Redressal and Contact
For privacy-related queries or data subject access requests (DSAR), please contact our designated Grievance Officer: