Last updated: September 21, 2026 · ← Back to Home
YouDuPay ("we", "us") is a global cross-border payment and acquiring infrastructure provider. We take the personal information and data privacy of our merchants and end users seriously. This Privacy Policy explains how we collect, use, store and protect your information when you access our acquiring gateway, developer platform, merchant dashboard, or use our payment settlement services.
Merchant account & KYC information: When you register a YouDuPay merchant account or connect to our gateway, we collect your business registration details, identity documents of legal representatives / beneficial owners, contact information and compliance review materials (KYC / AML).
Transaction & payment metadata: To process settlements and anti-fraud checks, we process transaction amounts, currencies, card types, IP addresses, device fingerprints and 3DS verification status (note: sensitive cardholder data is protected under PCI-DSS standards and processed in isolated, encrypted tokenized form).
Technical & log data: When you call our RESTful API or access the merchant dashboard, we automatically record request logs, API key activity and browser technical data.
We use collected data strictly for the following purposes: providing, maintaining and improving our acquiring and settlement infrastructure; performing risk assessment, AI fraud monitoring and compliance reviews; sending merchants statements, API security alerts and settlement notifications; and meeting legal requirements of financial regulators worldwide.
We never sell your business or personal data. We share it only when necessary with the following trusted parties: licensed financial institutions that assist with bank clearing and channel routing; suppliers providing infrastructure and cloud security hosting; and regulators or courts where disclosure is required by law or judicial subpoena.
We protect your data with industry-leading physical, technical and organizational security measures (including TLS 1.3 encrypted transport and a PCI-DSS Level 1 architecture). Data is retained securely only as long as necessary for business and legal compliance purposes.
Under applicable data protection laws (such as GDPR and CCPA), merchants may request access to, correction of, or deletion — within statutory time limits — of their account and business profile data.
If you have any questions about this Privacy Policy or our data processing practices, please contact our privacy compliance team:
Email: [email protected]