Privacy Policy

TRexPay Technologies Private Limited (“TRexPay”) operates https://trexpay-landing.vercel.app. We are based in Telangana, India. For any privacy question, write to hello@trexpay.in — we respond within 30 days, usually much sooner.

• Your name and work email.
• Your business name, current payment gateway, approximate monthly transaction volume band, and whether you charge recurring subscriptions.
• If you fill it in: a short free-text description of your biggest payment headache.
• Technical metadata attached to your submission — user-agent string, referring URL, and approximate country from your IP. Your IP address itself is never stored.

We do not collect card numbers, UPI PINs, bank passwords, one-time passwords, or biometric data anywhere on this website.

After you join the waitlist, we ask you to reply to our confirmation email with one month of settlement data from your gateway. That file is a fee record — it lists gross amount collected, payment method, fee, tax and net credited, per transaction.

Do this before you send it: delete any column that contains customer names, email addresses, phone numbers, or shipping addresses. We do not need them, do not want them, and will not store them.

We do not access your gateway account, do not connect to your bank, and have no way to initiate a payment on your behalf.

• To place you in an onboarding cohort and reach back out.
• To run the Fee X-Ray analysis on the settlement file you choose to share.
• To improve our detection models — always on aggregated and de-identified data.
• To comply with our own legal obligations under the DPDP Act 2023 and RBI record-keeping rules.

Waitlist submissions live in a PostgreSQL database physically hosted in India, encrypted at rest. Data in transit is encrypted with TLS 1.2 or later. Access to the database is limited to a single administrator.

• Vercel — hosts the website and API. Traffic routing goes through their global edge; data-bearing requests are served from India-region origins.
• Neon — provides the Postgres database attached to this project.
• Vercel Web Analytics — first-party page-view counts. No cookies, no cross-site tracking, no advertising identifiers.

We do not use third-party advertising trackers, session recorders, or personalisation SDKs.

Under the DPDP Act 2023 you can access, correct, update or erase your personal data, and withdraw consent for any processing that relies on consent. Email hello@trexpay.in and we'll action it within 30 days.

Waitlist submissions are retained while our launch program is open, plus one year afterwards for regulatory record-keeping. Settlement files you send us are retained only for as long as needed to produce the Leak Report — usually 30 days — and then irreversibly deleted, unless you ask us to hold on to them for ongoing monitoring.

This site uses strictly necessary cookies only (session state, CSRF protection). No advertising cookies, no cross-site trackers. If we ever add optional cookies, we will ask first with a banner.

TRexPay is a business-to-business product and is not directed at children. We do not knowingly collect data from anyone under 18.

We update this policy occasionally. Material changes are announced by email at least 30 days before they take effect. The current version is dated at the top of this page.

Email hello@trexpay.in. If we haven't resolved your concern, you can approach the Data Protection Board of India under the DPDP Act 2023.