Last modified: November 21, 2020 (archived versions)

WhatsApp India Payments Privacy Policy

Table of Contents

• Information We Collect
• Information You Provide
• Automatically Collected Information
• How We Use Information
• Information You And We Share
• Managing and Deleting Your Information
• Updates to Our Policy

This WhatsApp India Payments Privacy Policy ("India Payments Privacy Policy") helps explain our information practices when you use Payments. The terms "our," "we," "us," and "WhatsApp India," refer to WhatsApp Application Services Private Limited. WhatsApp India enables you to send and receive payments ("Payments"), a service we provide through, and in coordination with, designated payment service provider ("PSP") banks.

We use all the information we have to operate, provide, improve, understand, customize, support, and market our services. PSP banks may also collect, use, and share information, as set forth in their privacy policies, in conjunction with helping to provide Payments to you.

By using Payments, you accept that the following terms and policies apply:

• the WhatsApp Terms of Service;
• the WhatsApp Privacy Policy;
• the WhatsApp India Payments Terms of Service; and
• this India Payments Privacy Policy.

If there is any conflict between the India Payments Privacy Policy and the WhatsApp Privacy Policy, the India Payments Privacy Policy will control solely with respect to your use of Payments, and only to the extent of the conflict.

Back to top

To provide Payments, we may receive information described in the WhatsApp Privacy Policy, and the information specified below.

Back to top

• Registration and BHIM UPI PIN Setup Information. When you register to use Payments, you provide your bank's name and confirm the bank account for use with Payments. If you do not have a BHIM UPI PIN already for your bank account, you can set one using your partial debit card number, expiry date, PIN (if required by your bank), and bank-issued one-time password (OTP) to set up a BHIM UPI PIN. We do not retain Customer Payment Sensitive Data (partial debit card number, expiry date, PIN, OTP, or BHIM UPI PIN). WhatsApp India does not have access to the BHIM UPI PIN because it is encrypted by Common Library (CL) software provided by National Payments Corporation of India.
• Payment Transaction Information. When you send, receive, or request payments, you provide or confirm information about your transaction, including the receiver’s name, phone number, BHIM UPI ID (virtual payment address), payment amount, and currency. To authorize every payment you make, you need to use your BHIM UPI PIN. This payment transaction information is handled securely. WhatsApp messages sent with Payments are delivered once the transaction has processed and are treated as described in the WhatsApp Privacy Policy.

Back to top

• Information About Your Use Of Payments. We collect information when you send, receive, or request a payment. For example, we collect the date, time of the transaction, reference transaction number, and country. When the sender makes a payment to a WhatsApp contact, we collect account and transaction information, including the sender's and receiver's names and BHIM UPI IDs.
• Information We Receive From Service Providers, PSP Banks, And NPCI
  • Service Providers. We work with and receive information from service providers, including WhatsApp Inc. and other Facebook Companies, to help us operate, provide, improve, understand, customize, support, and market Payments; provide customer support; and keep our system safe and secure. For example, we work with companies to assist with customer support, and we receive information from them that you provide over the phone or email.
  • PSP Banks and NPCI. We enable Payments by working with multiple PSP banks and the National Payments Corporation of India ("NPCI") to facilitate the movement of funds between the sender's and receiver's bank accounts. They provide us information about you, your financial institution and accounts, and your Payments transactions. For example, we may receive information about you or your transactions from a PSP bank, including information to confirm your registration, the payment sender's or receiver's name, account information and status, balance sufficiency, transaction and account identifiers, risk or fraud alerts, and the like. BHIM UPI transaction information is stored in encrypted format. Please note that the PSP bank's or NPCI's terms and privacy policies will govern your use of their services.

Back to top

We use all the information we have to operate, provide, improve, understand, customize, support, and market our services. This includes using the information to provide Payments and customer support; to protect you and others using Payments from fraud, abuse, or other misconduct; and to review your account activity to determine whether you continue to meet the WhatsApp Terms of Service and WhatsApp India Payments Terms of Service. WhatsApp India works with the other Facebook Companies, including Facebook Inc. ("Facebook") and WhatsApp Inc., to provide Payments, including to send payment instructions to PSP banks. We also use the information to customize, market and improve Payments, including cross-selling, promotions, providing value-added services and other NPCI approved purposes, and in accordance with applicable law.

Back to top

In addition to what is described in the WhatsApp Privacy Policy, you share your information when you use Payments, and we share your information in the following ways:

• Payment Senders And Recipients. You and people with whom you send or receive payments may store or reshare your BHIM UPI ID, name, or transaction information with others on or off Payments.
• Service Providers. In conformance with our relationship with PSP banks, WhatsApp India works with service providers, including WhatsApp Inc. and other Facebook Companies, to provide Payments to you. We may share information collected under this India Payments Privacy Policy with service providers to send payment instructions to PSP banks; maintain your transaction history; provide customer support; improve, understand, customize, support, and market Payments; and keep Payments safe and secure, including to detect, prevent, or otherwise address fraud, safety, security, abuse, or other misconduct. Facebook will have no access to encrypted BHIM UPI transaction information in clear format, except as a service provider to WhatsApp India for purposes of compliance with applicable law, such as sanctions compliance, and as requested by NPCI. When we share information with service providers, we require them to use your information on our behalf in accordance with our instructions, terms, and applicable law.
• PSP Banks and NPCI. We share information with PSP banks and NPCI to help us operate Payments. The PSP banks and NPCI receive account information, including information to authenticate your account; transaction information, including payment amount and BHIM UPI IDs; country; transaction and account identifiers; information to detect, prevent, or otherwise address fraud, safety, security, abuse, or other misconduct; and customer support information. Please note that when you use PSP banks and NPCI services, their own terms and privacy policies will govern your use of those services.

Back to top

If you would like to manage, change, limit, or delete your Payments information, we allow you to do that through your Payments settings or by deleting your WhatsApp account. With your Payments settings, you may register additional bank account(s), deregister existing bank account(s) from your BHIM UPI ID, change the PSP bank, and clear your transaction history. When you delete your WhatsApp account, your bank account will be deregistered from your BHIM UPI ID automatically.

Back to top

We will notify you as appropriate before we make changes to this India Payments Privacy Policy and give you the opportunity to review the revised India Payments Privacy Policy before you choose to continue using Payments.

Back to top