Acceptable Use Policy
What you may not do with the Service, and what we expect from merchants who use it.
Last updated: Not yet published
Draft - not yet reviewed by counsel
1. Purpose
This Acceptable Use Policy sets out what you may not do with the UPI Banking website and the payment service described on it. It forms part of the Terms of Service, and it exists to keep the Service safe for merchants, their customers and the payment networks involved.
2. Prohibited activities
You must not use the Service to:
- break any law, regulation or requirement that applies to you, your business or your customers;
- carry out or facilitate fraud, money laundering, terrorist financing, sanctions evasion or tax evasion;
- process payments that are not for genuine goods or services you supply, including factoring payments on behalf of another business;
- misrepresent who the merchant is, what is being sold, the amount charged, or the currency charged;
- take payment for goods or services you do not intend, or are unable, to deliver;
- circumvent, probe or attack the security of the Service, or attempt to gain unauthorised access to any account or system;
- submit automated, bulk or abusive traffic to the website or its endpoints; or
- infringe the intellectual-property or privacy rights of any person.
3. Restricted business categories
Some business categories cannot be supported, or can only be supported subject to additional conditions. These are determined by applicable law and by the requirements that apply to the Service.
The current list of restricted and prohibited categories is: [RESTRICTED BUSINESS CATEGORIES].
If you are unsure whether your business falls into a restricted category, ask before you register. It is quicker than discovering the answer during onboarding.
4. How you treat your customers
You are responsible for:
- describing what you sell accurately, including price, currency and any recurring charges;
- showing the merchant name your customer will recognise on their statement;
- publishing clear refund, cancellation and delivery terms and honouring them;
- responding to customer questions and disputes within a reasonable time; and
- protecting any personal data you collect from your customers, in line with applicable data-protection law.
5. Security obligations
Keep your account credentials and any integration secrets confidential. Do not embed server-side credentials in client-side code, share them across unrelated systems, or send them by email or chat. Tell us promptly if you suspect a credential has been exposed or an account has been accessed without authorisation.
6. Enforcement
Where we reasonably believe this policy has been breached, we may request information, apply additional conditions, suspend access, or terminate the merchant account. Where practical and lawful, we will explain what happened and what is required to put it right.
Serious breaches may be reported to the relevant authorities where we are required to do so.
7. Reporting abuse
If you believe the Service is being used in breach of this policy, please tell us using the contact details below. Include as much detail as you can - a merchant name, a URL and a description of what you observed.
8. Contacting us
Questions about this document can be sent to support@upibanking.com.
Registered entity: UPI BANKING GLOBAL LLC (registration number [REGISTRATION NUMBER]), of [REGISTERED ADDRESS].