SkyPay — Nepal payment gateway

legal

Privacy Policy

How SkyPay collects and uses information when you use our Nepal payment gateway, website, dashboard, checkout, and SDKs.

Last updated: September 28, 2026

1. Introduction

SkyPay is a Nepal payment gateway product operated by Skybase Innovations Pvt. Ltd. (“we”, “us”, or “our”), based in Pokhara, Nepal. This Privacy Policy explains how we collect, use, disclose, and protect information when you use SkyPay services, including:

  • Our marketing and documentation site at skypay.dev
  • The merchant dashboard and checkout at app.skypay.dev
  • The SkyPay Flutter SDK (skypay_sdk) and related APIs
  • Support channels and communications related to SkyPay

This policy applies to merchants, developers, and website visitors who use or interact with SkyPay. By using our Service, you agree to the collection and use of information in accordance with this policy. We use personal information to provide and improve SkyPay; we do not sell your personal information.

For company information about the operator, see skybase.com.np.

2. Information We Collect

Depending on how you use SkyPay, we may collect the following categories of information:

  • Account and business details — such as name, email address, business or organization name, and other information you provide when creating a merchant account or configuring your dashboard.
  • Payment and transaction metadata — such as payment amounts, currencies, order or reference codes, payment method/rail selected (for example eSewa, Khalti, Connect IPS, Fonepay, or bank transfer), status events, and timestamps needed to process, verify, and reconcile payments. Card or wallet credentials are handled by the relevant payment provider; SkyPay does not store full payment instrument secrets for those providers beyond what is required to operate the service (for example encrypted merchant API credentials you connect in API Mode).
  • API and product usage — API key usage, webhook delivery attempts, integration mode settings, and similar operational data needed to run and secure the Service.
  • Device, log, and technical data — such as IP address, browser or client type, device identifiers where applicable, request timestamps, and error or diagnostic logs when you access skypay.dev, app.skypay.dev, or our APIs.
  • Support communications — messages you send to us (for example via email), and related metadata, so we can respond to inquiries and resolve issues.

We do not operate SkyPay as an advertising or AdMob-focused mobile app. We do not collect information for the purpose of serving interest-based ads through SkyPay.

3. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain SkyPay payment services (checkout, verification, webhooks, dashboard, and SDKs)
  • Verify payments and help merchants fulfill orders securely
  • Detect, prevent, and investigate fraud, abuse, and security incidents
  • Provide customer and developer support
  • Improve reliability, performance, documentation, and product features
  • Communicate service-related notices (for example account, security, or material policy updates)
  • Comply with applicable laws, regulations, and lawful requests

4. Payment Providers and Third Parties

SkyPay routes and orchestrates payments across Nepal payment rails. When you or your customers use a specific method, information may be processed by the relevant provider, which may include eSewa, Khalti, Connect IPS, Fonepay, banks, and other partners you enable or that are required to complete a payment.

Those providers process data under their own terms and privacy policies. Customers and merchants may also be subject to the policies of the payment method they choose. SkyPay does not control how independent providers handle data on their platforms.

5. Cookies and Similar Technologies

We and our sites may use cookies and similar technologies for essential purposes such as session authentication, security, and remembering preferences (for example theme or UI settings). These technologies help the Service work as expected; they are not used by SkyPay to run third-party advertising networks.

You can control cookies through your browser settings. Disabling certain cookies may limit access to authenticated areas such as the merchant dashboard.

6. Service Providers

We may employ third-party companies and individuals to:

  • Facilitate or host our Service
  • Provide the Service on our behalf
  • Perform Service-related functions (for example infrastructure, email delivery, analytics, or security tooling)
  • Help us analyze how the Service is used so we can improve it

These parties may access personal information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

7. Data Retention

We retain information for as long as needed to provide SkyPay, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Transaction and account records may be kept for longer periods where required for fraud prevention, audit, or regulatory compliance. When retention is no longer necessary, we take steps to delete or anonymize data where practicable.

8. Security

We value your trust and strive to use commercially reasonable safeguards to protect personal information — including encryption of sensitive merchant credentials at rest, hashed API keys, and access controls appropriate to a payment service. No method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security. Please use strong passwords, protect your API keys, and always verify payments on your server before fulfilling orders.

9. Links to Other Sites

Our Service may contain links to third-party sites or services (including payment providers and the Skybase company website). If you follow an external link, you leave SkyPay’s control. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

10. Children’s Privacy

SkyPay is not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we learn that a child under 13 has provided us with personal information, we will take steps to delete that information from our systems. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected].

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes are effective when posted on this page. We encourage you to review this page periodically. The “Last updated” date at the top of this page will reflect the latest revision.

12. Contact Us

If you have questions or suggestions about this Privacy Policy, contact us at: