Official Policy
Privacy Policy
Last updated: September 2026 • Effective Date: September 2026
Welcome to Eclipse Gateway (available at https://payment.esclipsteam.site/), engineered and maintained by Priyam Manna. We respect your privacy and are committed to protecting the personal data and transactional integrity of all merchants, developers, and their end customers.
Important Commitment: Eclipse Gateway is a developer-first, 100% free UPI payment automation infrastructure. We never store, process, or ask for customer UPI MPINs, bank passwords, debit/credit card CVVs, or OTPs. All fund settlements occur directly in your bank/FamPay account peer-to-peer.
1. Information We Collect
When you register, create payment links, or integrate our API, we collect:
- Merchant Account Data: Name, Gmail address, phone number, API keys, and custom branding avatar.
- Transaction Metadata: Order ID, transaction amount, customer name/email (optional), bank UTR / Reference Number (RRN), and timestamp.
- Integration Settings: Encrypted app authorization credentials provided voluntarily by merchants to enable automated email-based UTR reconciliation.
2. How We Use Your Information
Your data is processed strictly for legitimate operational purposes:
- Generating dynamic, tamper-proof Bharat UPI QR codes.
- Automating instant bank confirmation and firing real-time HMAC-signed Webhooks to your callback URL.
- Rendering your analytics dashboard, transaction logs, and receipts.
- Sending critical account notifications (e.g., Email Verification and security updates).
3. Zero Platform Custody of Funds
Eclipse Gateway does not operate as an escrow or custodian wallet. Customer funds flow directly via the National Payments Corporation of India (NPCI) UPI rails straight into your designated VPA (e.g., username@fam). We have zero access to your funds, zero holding period, and zero transaction fee deduction.
4. Data Security & Encryption
We employ enterprise-grade security practices:
- All communications are strictly encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
- Sensitive merchant secret keys and authentication tokens are salted and hashed using modern cryptographic algorithms.
- HMAC-SHA256 signatures are attached to webhooks to protect against replay and man-in-the-middle attacks.
5. Sharing of Information
We do not sell, rent, or trade your data to any third-party advertisers. Data is only disclosed:
- When required by Indian laws, regulatory authorities, or judicial orders.
- To investigate fraudulent transactions, abusive API usage, or security breaches.
6. Your Rights & Account Deletion
Merchants may view, modify, or rotate their API keys, profile information, and avatars at any time through the Merchant Portal. You may also request account erasure or data purge by contacting our support team.
7. Contact & Grievance Officer
If you have any questions, suggestions, or privacy concerns, please contact our team: