← Back to Home
Legal & Data Protection

Privacy Policy

Effective Date: October 2026 • Official Domain: truexgateway.xyz

01 Overview & Scope

Welcome to TruexGateway ("True Hai Ye Choice!"), accessible at https://truexgateway.xyz. We provide direct UPI checkout orchestration and real-time UTR verification software for merchants. This Privacy Policy explains what information we collect, how we safeguard it, and your rights regarding your data.

02 Non-Custodial Payment Architecture

TruexGateway operates strictly as a non-custodial technical software layer. When a customer scans a dynamic QR code or initiates a UPI intent payment, funds flow directly from the customer's bank account to the merchant's linked UPI VPA (Paytm Business, BharatPe, or FamPay). We never hold, pool, or take custody of merchant or customer funds.

03 Information We Collect

  • Merchant Account Information: Name, business name, email address, and Firebase Authentication UID when you register on truexgateway.xyz.
  • Gateway Integration Credentials: Your configured UPI VPA, Merchant ID (MID), or read-only verification tokens required to confirm incoming UTRs.
  • Transaction Metadata: Order ID, Order Reference, transaction amount, UTR/Bank Reference number, and payment status timestamps.
  • Security & Audit Logs: IP address, browser user-agent, and CSRF/session tokens used to prevent unauthorized access and fraud.

04 How We Use & Protect Your Data

All data is transmitted over 256-bit TLS/HTTPS encryption and stored in access-controlled Firebase Realtime Database nodes. Your data is used exclusively to:

  • Generate dynamic, locked-amount UPI QR codes and checkout links.
  • Automatically verify 12-digit bank UTR numbers and prevent duplicate transaction claims.
  • Provide technical assistance via our Support Ticket Portal and official Telegram desk (@TrueXg_support).

We never sell, rent, or trade merchant or customer data to third-party marketers.

05 Cookies & Session Persistence

We use strictly necessary, cryptographically signed HttpOnly session cookies to keep you authenticated across dashboard visits and protect form submissions against Cross-Site Request Forgery (CSRF). We do not use invasive third-party advertising trackers.

06 Contact & Data Requests

If you wish to update, export, or permanently delete your merchant profile and gateway configurations, you can do so from your Merchant Dashboard or by contacting our support team at https://truexgateway.xyz/support/ or on Telegram at @TrueXg_support.