You are looking at the sandbox / test-mode build of KulPay's hosted checkout. The link you followed reads "Privacy" — but this build does not host any real privacy policy and nothing on this page describes how a real account handles your personal data.
This is a non-binding sandbox placeholder shown by the KulPay gateway. The sandbox processes no real personal data; any phone numbers, card numbers, or amounts you enter are stored only in the sandbox's in-memory state and discarded when the process restarts.
Webhook payloads delivered to the account's callback URL contain only the data the caller submitted plus the gateway's own event metadata. No data is shared with third parties.
The sandbox keeps a webhook delivery log for development debugging; entries older than the configured retention horizon are automatically discarded.
For real-world payment data, the production gateway operates under separate privacy obligations described in the account's actual privacy policy.