Last modified: July 9, 2018 (archived versions)

WhatsApp Payments Privacy Policy - India

Table of Contents

• Information We Collect
• How We Use Information
• Information You And We Share
• Managing And Deleting Your Information
• Updates To Our Policy

The WhatsApp Privacy Policy helps explain our information practices. Our Services may include enabling you to send and receive payments (“Payments”), a service we provide through, and in coordination with, designated payment service provider (“PSP”) banks.

This Payments Privacy Policy helps explain our information practices when you use Payments. We use all the information we have to operate, provide, improve, understand, customize, support, and market our Services. PSPs may also collect, use, and share information as set forth in their privacy policies, in conjunction with helping to provide Payments to you.

This Payments Privacy Policy supplements our Privacy Policy, which applies to the use of our Services, including Payments. Please also see WhatsApp’s Terms of Service (“Terms”), which describe the terms under which you use our Services including Payments, and the WhatsApp Payments Terms of Service (“Payments Terms”), which supplement the Terms, govern your use of Payments, and describe Payments in more detail. Please read all of these documents carefully.

Back to top

In addition to what is described in our Privacy Policy, we receive information when we provide Payments.

Information You Provide

• Registration and BHIM UPI PIN Setup Information. When you register to use Payments, you provide your bank’s name and confirm the bank account for use with Payments. If you do not have a BHIM UPI PIN already for your bank account, you can set one using your partial debit card number, expiry date, PIN (if required by your bank), and bank-issued one-time password (OTP) to set up a BHIM UPI PIN. We do not retain Customer Payment Sensitive Data (partial debit card number, expiry date, PIN, OTP, or BHIM UPI PIN). WhatsApp does not have access to the BHIM UPI PIN because it is encrypted by Common Library (CL) software provided by National Payment Corporation of India.
• Payment Transaction Information. When you send, receive, or request payments, you provide or confirm transaction information such as the receiver’s name and BHIM UPI ID (virtual payment address), and payment amount. To authorize every payment you make, you need to use your BHIM UPI PIN. This payment transaction information is handled securely. WhatsApp messages sent with payments are delivered once the transaction has processed and are treated as described in our Privacy Policy.

Automatically Collected Information

• Information To Enable Payments. We collect information when you send, receive, or request a payment, including the date and time and reference transaction number. When the sender makes a payment to a WhatsApp contact, we collect the sender and receiver’s names and BHIM UPI IDs.

Information We Receive From Service Providers, PSPs, And NPCI

• Service Providers. We work with service providers to help us operate, provide, improve, understand, customize, support, and market Payments; provide customer support; and keep our system safe and secure. For example, we work with companies to assist with customer support, and we receive information from them that you provide over the phone or email.
• PSP Banks and NPCI. We enable Payments by working with multiple PSP banks and the National Payments Corporation of India (NPCI) to facilitate the movement of funds between the sender and receiver’s bank accounts. They provide us information about you or your Payments transactions in certain circumstances; for example, we may receive information about you or your transactions from a PSP such as information to confirm your registration, the payment sender or receiver’s name, account status and balance sufficiency, transaction reference IDs, risk or fraud alerts, and the like. BHIM UPI transaction information is stored in encrypted format. Please note that the PSP or NPCI’s terms and privacy policies will govern your use of its services.

Back to top

We use all the information we have to operate, provide, improve, understand, customize, support, and market our Services. This includes using the information to provide Payments and customer support, to protect you and others using our Services from fraud, abuse, or other misconduct, and to review your account activity to determine whether you continue to meet our Terms and Payments Terms. WhatsApp works with the other Facebook Companies to provide Payments, including to send payment instructions to PSPs.

Back to top

In addition to what is described in our Privacy Policy, you share your information when you use Payments, and we share your information to help us operate, provide, improve, understand, customize, support, and market Payments.

• Payment Senders And Recipients. You and people with whom you send or receive payments may store or reshare your BHIM UPI ID, name, or transaction information with others on or off our Services.
• Service Providers. In conformance with our relationship with PSPs, WhatsApp works with service providers including Facebook. To send payment instructions to PSPs; maintain your transaction history; provide customer support; improve, understand, customize, support, and market Payments; and keep our Services safe and secure, including to detect, prevent, or otherwise address fraud, safety, security, abuse, or other misconduct, we share information we collect under this Payments Privacy Policy with service providers including Facebook. Facebook will have no access to encrypted BHIM UPI transaction information in clear format. When we share information with service providers, we require them to use your information on our behalf in accordance with our instructions and terms.
• PSP Banks and NPCI. We share information with PSPs and NPCI to help us operate Payments. The PSP and NPCI receive transaction information such as payment amount and BHIM UPI IDs, so they can facilitate the movement of funds between the sender’s and receiver’s bank accounts. Please note that when you use PSP and NPCI services, their own terms and privacy policies will govern your use of those services.

Back to top

If you would like to manage, change, limit, or delete your Payments information, we allow you to do that through your payment settings or by deleting your WhatsApp account. With your payment settings, you may register additional bank account(s), deregister existing bank account(s) from your BHIM UPI ID, change the PSP bank, and clear your transaction history. When you delete your WhatsApp account, your bank account will be deregistered from your BHIM UPI ID automatically.

Back to top

We will notify you before we make changes to this Payments Privacy Policy and give you the opportunity to review the revised Payments Privacy Policy before you choose to continue using Payments.

Back to top