1. What we do

PayFlow lets a business accept payments from Pakistani mobile wallets through a single API and a hosted checkout page. We take the payment on your behalf, hold the money briefly, deduct our fee, and settle the balance to a bank account you have given us and we have verified.

We are not the seller. The goods or services a customer pays for are yours, the description of them is yours, and any question about delivery, quality or cancellation is between you and your customer.

2. Your account and verification

You may open an account with an email address and a business name, and read the documentation and your API credentials immediately. You cannot take a live payment until you have submitted your CNIC, your business details and your bank account, and we have approved them. Until then the API declines payments rather than accepting money we have no verified way to send on.

The details you give us have to be true and yours. We may ask for more information at any time, and we may hold or refuse settlement while a question about identity or ownership is open.

3. Your API credentials

Your API secret is shown to you once, when it is created, and never again. Keep it on your server, out of your source control and out of anything that reaches a browser. A request signed with your secret is treated as yours, because from our side it is indistinguishable from one. If a secret leaks, rotate it from the dashboard — that is immediate, and it is the remedy.

4. Fees and settlement

We charge 10% of each completed payment. Nothing on payments that fail, expire or are never charged; no monthly fee; no setup fee. The fee is deducted before settlement and shown on every payment and every statement, so any figure we send you can be checked line by line against your own records.

Completed payments are gathered into a statement and paid to your verified bank account on a rolling 3-business-day cycle. Payouts are reviewed and released by a person, so a settlement can be delayed by a bank holiday, a failed bank transfer, or an open question about a payment. We will tell you which.

A different rate can be agreed in writing for a specific account, and takes effect only for payments created after it is applied. Notice period for a change to the standard rate to be settled.

5. Refunds, disputes and reversals

There is no refund endpoint in the current API. A refund is arranged by writing to support@payflow.com, and is recorded against the original payment once it has been made. We would rather tell you that plainly than have you build against something that does not exist.

Where a payment is reversed, disputed or found to be fraudulent, the amount and any cost of it are yours, and we may recover them from later settlements or ask you to pay them. Liability for reversals, and any cap on it, to be settled.

6. What you may not do with the platform

No payments for anything unlawful under Pakistani law, nothing you are not licensed to sell, no payments taken on behalf of a third party without telling us, no deliberate attempt to disguise what is being sold, and no use of the API to test cards, numbers or credentials that are not yours.

We may suspend an account immediately where we believe money is being moved unlawfully or a customer is being defrauded, and we will say why unless we are legally prevented from doing so.

7. Availability

We keep the API and the checkout running as well as we can, and we do not promise they will never be unavailable. Payments depend on the wallet provider and on our licensed payment processing partners, and any of them can be down independently of us. When one of them is unavailable the API says so rather than guessing at an outcome, and a payment that is left unconfirmed for 25 minutes expires rather than being held open indefinitely.

The status endpoint is always authoritative. If you are unsure whether a payment succeeded — after a missed webhook, a timeout, or your own server restarting — ask it, and act on what it says. The API reference is part of these terms to the extent that it describes how the API behaves. Any uptime commitment to be settled.

8. Data

What we collect, what we encrypt, how long we keep it and who we give it to is set out in the privacy policy, which forms part of these terms.

9. Ending the arrangement

You can stop using the platform whenever you like, and ask us to close your account. Payments already completed still settle on the normal cycle. We may close an account for a breach of these terms, and will settle anything owed to you that is not being withheld for a reason we have told you about. Notice periods on both sides, and how long records are retained after closure, to be settled.

10. Changes to these terms

When these terms change we will tell the email address on your account. Continuing to take payments after a change means you accept it. Notice period to be settled.

11. Law and disputes

Governing law, the courts that would hear a dispute, and whether arbitration comes first — all to be settled with a lawyer qualified in Pakistan. Nothing is stated here rather than something wrong being stated here.

12. Reaching us

support@payflow.com reaches a person, including about this page.