The safest thing about IndieVouch is what it can't do
It can't hold your money, because it's never in a position to receive it.
Money never touches this app
Every link, button and storefront checkout builds a standard upi://pay
request pointed at your VPA — the one you registered. The buyer's own UPI app
opens it and pays your bank account directly. IndieVouch is never a party to that
transfer, never holds a float, and never sits between you and your money waiting to
settle it. All it does afterwards is read the credit alert your own bank already sends
you and mark the matching order as paid.
Automatic confirmation reads, never moves, money
MacroDroid, Tasker, Automate or a Shortcut forwards the text of a bank SMS you already receive. That text is parsed for an amount and a reference, matched to a pending order, and nothing more — it has no ability to initiate a transfer in either direction.
Signed, replay-proof requests
API order creation is HMAC-SHA256 signed with your own secret and a timestamp that expires after a short window, so a captured request can't be replayed later. Webhooks leaving IndieVouch are signed the same way, so your endpoint can verify a payload actually came from us.
Outbound URLs are checked
Redirect and webhook URLs you configure are rejected if they point at localhost or a private network address, so a misconfigured or malicious URL can't make the server reach internal infrastructure on your behalf.
Checkout and SMS ingest are rate-limited
Both the pages a buyer submits and the endpoint your phone forwards SMS to are rate-limited per IP address, so a burst of automated requests can't be used to hammer either surface.
Digital files stay private
A file you attach to a link, button or product sits in private storage. It is never publicly reachable — the only way to it is a short-lived signed download URL, and that URL is only ever generated once the specific order it belongs to shows completed.
Mismatches don't get quietly accepted
An amount that doesn't match what was due lands as Flagged, with the shortfall on record, instead of either silently completing or silently disappearing.
What IndieVouch deliberately doesn't do
It isn't a payment aggregator. It doesn't hold customer funds in an escrow or nodal account, doesn't settle money between parties, and doesn't sit in the regulatory position that licensed payment aggregators occupy in India. That's a boundary by design, not a gap — a seller using IndieVouch is simply accepting a UPI payment the same way they would by sharing a QR code themselves, with software to make sharing it and tracking it easier.
This page describes how the software is built. It isn't legal or compliance advice — if you need a determination about your own obligations as a seller, talk to someone qualified to give it.