Samsung Pay

Privacy Policy

Samsung Pay is an easy and safe way to make debit and credit card payments, payments using linked mobile wallets or UPI linked bank accounts and to manage and utilize your linked mobile wallet using your compatible Samsung mobile device and other accessories as may be made available by Samsung form time to time (each, a “Mobile Device”) . This Privacy Notice is important as it describes how your personal information (“Personal Information”) will be collected, used, disclosed, transferred, shared and stored in the course of your use of Samsung Pay and to provide Samsung Pay to you.
Samsung India Electronics Pvt. Ltd. (“Samsung”, “we”, “us”, “our”) collects, uses, discloses, shares, stores and transfers your Personal Information in accordance with this Privacy Notice. By using Samsung Pay, you will be deemed to have unconditionally agreed to the terms of this Privacy Notice, and consented to the practices in respect of the collection, use, disclosure, transfer, sharing and storage of Personal Information described in this Privacy Notice (including disclosure to overseas recipients in the locations specified in this Privacy Notice).
Our privacy notice is subject to change from time to time without notice. Although, we will make every effort to keep you informed of any changes to the Privacy Policy, you are advised to review the policy periodically.
This Privacy Notice supplements the Samsung Privacy Policy (available at http://www.samsung.com/in/info/privacy.html and in case of any inconsistency or conflict between the terms of this Privacy Notice and the Samsung Privacy Policy, the terms of this Privacy Notice shall prevail.
Further information on how you can contact us with any questions about this Privacy Notice or our practices in relation to your Personal Information is set out below.

What information do you need to provide to start using Samsung Pay?: To use Samsung Pay, you must first have a Samsung Account and must also agree to the Samsung Pay Terms of Service (available at https://account.samsung.com/membership/terms).
Once these steps have been completed, you must register a debit or credit card or link your mobile wallet account or link your bank account through UPI application on Samsung Pay. To initiate this process, you must enter certain card and account details or enter mobile wallet or bank account credentials in UPI application by following the instructions on the screen. The card information and billing information or credentials you provide are encrypted on your Mobile Device and are sent to your card issuer/bank and relevant payment network or mobile wallet provider.

Identification and verification: Identification and verification information must also be sent to your card issuer and payment network or mobile wallet provider or bank so they can verify that you are who you say you are, and send you the correct terms of service that will apply to you. This information may include as applicable:

• Samsung Account information (e.g. date Samsung Account was created, whether the Samsung Account is linked to your Mobile Device) and information relating to your use of Samsung Pay (e.g. how many cards you may have registered on Samsung Pay through your Mobile Device);
• Device information, such as your device model number, OS version and certain other device identifier(s); and
• Location information (i.e., where you are when you register your card), but only if location detection is enabled on your device at the time you register your card.
• Card information and billing address, which is sent to your card issuer, passing through our servers.
• Wallet registration details
• Bank account details

We provide this information to your card issuer and wallet partners so that they can authenticate cardholders to detect and discourage fraud.
No card or account information is stored on our servers and that information is encrypted and cannot be read or accessed by us during transit to your card issuer/bank and payment network.

Registering and activating your card on your Mobile Device:

Once your debit or credit card has been registered on Samsung Pay, your card issuer/bank assigns a unique device number to your Mobile Device and creates a "key" enabling you to generate transaction security codes, which allows you to make payments on your Mobile Device using Samsung Pay. Before it is sent, this data is encrypted and sent by your card issuer/bank to your Mobile Device. It is stored in a secure area of your Mobile Device isolated from the OS of your Mobile Device.

Registering and managing your mobile wallet:

You may be able to link your mobile wallet account or other similar third party accounts to Samsung Pay. To link such accounts, you will have to enter your account information like your email or phone numbers details and follow the instructions on the screen. You would have to accept the terms and conditions set by mobile wallet provider to be able to register your wallet in Samsung pay.

Registering and managing your bank account through UPI:

You may be able to link your bank account to Samsung Pay through UPI. To link such accounts, you will have to enter your bank account information like your account number and IFSC code or phone numbers details and follow the instructions on the screen.

No account information is stored on our servers.

Identification and verification for mobile wallets:

Identification and verification of your mobile wallet is done by the wallet provider so that they can verify who you are and retrieve your account details. This verification can be in the form of a One Time Password (OTP) sent to your phone number, email or a call; or in the form of a password; or any other means as specified by your mobile wallet provider. For identification and verification we may share your mobile number and email id provided to us with mobile wallet provider.

Identification and verification for bank account:

Identification and verification of your bank account is done by the PSP bank and your bank so that they can verify who you are and retrieve your account details. The verification is done by matching the encrypted message sent as an outbound SMS to the PSP interface from the mobile number being used by you for registering the PSP profile. After verification of your details, a token is sent to your account which is encrypted and protected using the device security features. This token enables you to generate codes for payments and use it to make online transactions to your friends and merchants.

Bill Payments:

You can make payments towards various utility services using UPI enabled application or through your mobile wallets registered on Samsung Pay. We may share your VPA details with Samsung authorized third party service provider for initiating refunds (if any).
All third party services are provided on As Is basis by Samsung and is subject to their terms of use.

What happens when you use Samsung Pay to make payments using credit/ debit cards?:

When you initiate a payment on your Mobile Device using Samsung Pay using credit/ debit cards, your Mobile Device sends your unique device number and/or a payment security code to the sales terminal enabling your card issuer/bank to approve or decline the payment. Your recent transaction history will then appear on your Mobile Device. This information is accessible only to you, the relevant merchant(s), and your card issuer/bank/ mobile wallet/ bill payment providers.

What kind of data do we collect and use?:

As described in the Samsung Privacy Policy, in addition to your Samsung Account information, information directly provided and saved by you and other Personal Information described herein, we also collect information (including from you and/or other parties such as your card issuer/bank, mobile wallet provider and payment network) regarding your use of the Samsung Pay application. This information includes technical information such as unique device identifier, GUID identifier created as part of your Samsung Account, card issuer, card brand, device model, phone number, transaction date and time, whether a MST or NFC based transaction was used, card enrollment status, and whether a transaction successfully went through. We may also collect and store your transaction data/ Payment address (VPA) / history when you use your mobile wallet, UPI application or bill payment application through Samsung Pay.

We also access your device short message services (sms) to read the OTP sent by Issuing banks and wallet providers. SMSs are also read to check due dates and amounts for bill payments This information will be used to autofill the amount and due dates for the purpose of bill payments in Samsung Pay application.

We use the information we collect to understand the way people use Samsung Pay so that we can improve it by making it more convenient and useful, including in particular:

• identifying usage trends, problems, failures and issues with Samsung Pay to better support our customers and other users of Samsung Pay (such as card issuers/banks, payment networks and mobile wallets);
• assessing how people view and use Samsung Pay to allow us to improve and better develop our offering and service; and
• (where you have consented) to offer promotional incentives and benefits to our customers.
• To provide you with the transaction history when requested for.

In case you de register your Mobile wallet or delete UPI account from Samsung Pay, all your information including transaction information also gets deleted from Samsung Pay servers. Samsung does not retain any information related to your wallet and transactions in any form whatsoever.

To whom do we disclose your Personal Information?

In addition to disclosures to your card issuer/bank, payment network mobile wallets and billers, we may disclose your Personal Information to any Governmental statutory authority as required by applicable law or regulation, third parties, suppliers, service providers to provide a service you request in connection with Samsung Pay. We may also disclose your Personal Information to third parties involved in the process of providing services on behalf of Samsung in connection with Samsung Pay to allow such third parties to provide such services on behalf of Samsung as well as third parties associated with promotional incentives and benefits.

Other Types of Information We Collect:

• Merchant offers, including coupons, tickets, deals, discounts, rewards, and vouchers, may be provided from time to time through Samsung Pay. Offers may be based on your location relevant to participating stores or businesses. In some instances, we may send you alerts notifying you of offers when you are near participating businesses. Location detection must be enabled on your device to participate in this program. You can disable the program and opt-out of receiving such notices at any time within your Samsung Pay notification settings.
• We strive to provide the best user experience possible and it is important that you know that we do not collect any information about the items you purchase using Samsung Pay. We may, however, aggregate and anonymize information collected regarding your attempts to make purchases using this application. This information includes the time of purchase, mode of payment and, when available, the merchant name and location.
• As we mentioned above, utilizing this information enhances the user experience by permitting analytics about the accuracy and rate of success of payments made while you are using our application. We utilize this information to understand the way people use Samsung Pay so that we can improve it by making it more convenient and useful for our customers.

How do we keep your Personal Information secure?:

We use physical and technical measures to safeguard the Personal Information we collect in connection with Samsung Pay. However, please note that although we take reasonable steps to protect your Personal Information, no website, Internet transmission, computer system or wireless connection is completely secure.
You can also use a number of the security features available through Find My Mobile to secure your Mobile Device, including locating a lost Mobile Device, deleting registered cards from a Mobile Device and deleting all data from a Mobile Device.

Offshore Disclosure of Personal Information:

When you use Samsung Pay, your Personal Information may be disclosed or transferred to overseas recipients and collected, disclosed, stored or processed overseas. The overseas recipients of your personal information may, depending on the particular service that you have requested, be located outside India including in South Korea, the Philippines, Singapore, Vietnam, Malaysia, the United States of America, Germany, China, the Netherlands or Denmark. Please note that the data protection and other laws of countries to which your information may be disclosed might not be as comprehensive as those in India. In all cases, you consent to your Personal Information being disclosed or transferred outside India, and acknowledge that Samsung is not required to ensure that overseas recipients handle your Personal Information in compliance with Indian privacy law and that you may not be able to seek redress if an overseas recipient handles your Personal information in a way which does not comply with Indian privacy law. Where practicable in the circumstances, we will take reasonable steps to ensure that overseas recipients use and disclose your Personal Information in a manner consistent with this Privacy Notice and the Samsung Privacy Policy .

Who do you contact if you have any questions?:

The Samsung Privacy Policy contains information about how you may access and correct your Personal Information or raise a privacy concern or complaint about privacy and how it will be dealt with.
If you have any questions about Samsung Pay, please contact us through our customer support channels by following the instructions within the Samsung Pay application. If you have any questions/ grievance specific to our collection, use and/or sharing of your Personal Information, please contact:
Samsung India Electronics Pvt. Ltd.
Grievance Officer: Gauri Taneja
Email:gauri.taneja@samsung.com
Telephone: +91 124 4881234

Roles & Responsibilities of NPCI

• NPCI owns and operates the Unified Payments Interface (UPI) platform
• NPCI prescribes rules, regulations, guidelines, and the respective roles, responsibilities and liabilities of the participants, with respect to UPI. This also includes transaction processing and settlement, dispute management and clearing cut-offs for settlement
• NPCI approves the participation of Issuer Banks, PSP Banks, Third Party Application Providers (TPAP) and Prepaid Payment Instrument issuers (PPIs) in UPI
• NPCI provides a safe, secure and efficient UPI system and network
• NPCI provides online transaction routing, processing and settlement services to members participating in UPI
• NPCI can, either directly or through a third party, conduct audit on UPI participants and call for data, information and records, in relation to their participation in UPI
• NPCI provides the banks participating in UPI access to system where they can download reports, raise chargebacks, update the status of UPI transactions etc.

Roles & responsibilities of PSP Bank

• PSP Bank is a member of UPI and connects to the UPI platform for availing UPI payment facility and providing the same to the TPAP which in turn enables the end-user customers / merchants to make and accept UPI payments
• PSP Bank, either through its own app or TPAP’s app, on-boards and registers the end-user customers on UPI and links their bank accounts to their respective UPI ID.
• PSP Bank is responsible for authentication of the end-user customer at the time of registration of such customer, either through its own app or TPAP’s app
• PSP Bank engages and on-boards the TPAPs to make the TPAP’s UPI app available to the end-user customers  
• PSP Bank has to ensure that TPAP and its systems are adequately secure to function on UPI platform
• PSP Bank is responsible to ensure that UPI app and systems of TPAP are audited to safeguard security and integrity of the data and information of the end-user customer including UPI transaction data as well as UPI app security
• PSP Bank has to store all the payments data including UPI Transaction Data collected for the purpose of facilitating UPI transactions, only in India
• PSP Bank is responsible to give all UPI customers an option to choose any bank account from the list of Banks available on UPI platform for linking with the customer’s UPI ID.
• PSP Bank is responsible to put in place a grievance redressal mechanism for resolving complaints and disputes raised by the end-user customer

Roles & responsibilities of TPAP

• TPAP is a service provider and participates in UPI through PSP Bank
• TPAP is responsible to comply with all the requirements prescribed by PSP Bank and NPCI in relation to TPAP’s participation in UPI
• TPAP is responsible to ensure that its systems are adequately secure to function on the UPI platform
• TPAP is responsible to comply with all applicable laws, rules, regulations and guidelines etc. prescribed by any statutory or regulatory authority in relation to UPI and TPAP’s participation on the UPI platform including all circulars and guidelines issued by NPCI in this regard
• TPAP has to store all the payments data including UPI Transaction Data collected by TPAP for the purpose of facilitating UPI transactions, only in India
• TPAP is responsible to facilitate RBI, NPCI and other agencies nominated by RBI/ NPCI, to access the data, information, systems of TPAP related to UPI and carry out audits of TPAP, as and when required by RBI and NPCI
• TPAP shall facilitate the end-user customer with an option to raise grievance through the TPAP’s grievance redressal facility made available through TPAP’s UPI app or website and such other channels as may be deemed appropriate by the TPAP like email, messaging platform, IVR etc.

Dispute Redressal Mechanism

• Every end-user customer can raise a complaint with respect to a UPI transaction, on the PSP app / TPAP app.
• End-user customer can select the relevant UPI transaction and raise a complaint in relation thereto
• A complaint shall be first raised with the relevant TPAP in respect to all UPI related grievances / complaints of the end-user customers on-boarded by the PSP Bank / TPAP (if the UPI transaction is made through TPAP app). In case the complaint / grievance remains unresolved, the next level for escalation will be the PSP Bank, followed by the bank (where the end-user customer maintains its account) and NPCI, in the same order. After exercising these options, the end-user customer can approach the Banking Ombudsman and / or the Ombudsman for Digital Complaints, as the case may be.
• The complaint can be raised for both the types of transactions i.e. fund transfer and merchant transactions
• The end-user customer shall be kept communicated by the PSP / TPAP by means of updating the status of such end-user customer’s complaint on the relevant app itself