Payment gateways

PitwallOS supports two gateways out of the box: Razorpay and PhonePe. You bring your own merchant credentials; funds settle directly to your bank account, not ours.

Razorpay

  1. Sign in at dashboard.razorpay.com and open Settings → API Keys.
  2. Generate a key pair. Copy the key ID and key secret into PitwallOS at Settings → Payment gateways → Razorpay.
  3. Add a webhook in Razorpay pointing at the URL we display on that page (it embeds your venue ID for routing). Subscribe to at least payment.captured, payment.failed, and refund.processed.
  4. Click Test connection to verify. If it fails, your secret is probably wrong — Razorpay never echoes the secret back, so a typo is silent until tested.

PhonePe

  1. From the PhonePe Business dashboard, request API credentials (client ID + client secret + client version).
  2. Enter those, plus your webhook username / password, into PitwallOS at Settings → Payment gateways → PhonePe.
  3. PhonePe webhooks use HTTP basic auth on the venue-scoped URL we display. Configure that on the PhonePe side.

Encryption

Secrets are stored encrypted in Postgres via pgsodium. We never log them, never echo them in the UI, and our own engineers can't read them out of the database without explicit super-admin decryption (which is audit-logged).

Skipping payments

You can run PitwallOS without a gateway — bookings will just be marked “pay at venue”. Set this from the same settings page; you can wire up a gateway later.