This Privacy Policy describes how UPxMe ("UPxMe", "we", "us") collects, uses, and protects information when you use our website at https://upxme.in and the UPxMe mobile application (together, the "Platform").
1. Information we collect
Information you provide
- Account information: name, email, phone number, profile photo.
- Verification information: for players (talents listing tokens), additional identity documents, achievements, and social profiles.
- Payment information: processed by Razorpay (our payment partner). We never see or store your card numbers, CVV, UPI PINs, or net-banking credentials. We retain only transaction IDs and amounts.
- Bank/UPI details for withdrawals — stored encrypted.
- Content: posts, comments, messages, and any media you upload.
Information we collect automatically
- Device information (model, OS, app version).
- IP address, approximate location, and timestamps of activity.
- Usage analytics — screens viewed, features used, errors.
2. How we use information
- To create and operate your account.
- To process payments, trades, and withdrawals.
- To verify identity, prevent fraud, and meet legal/regulatory obligations.
- To send transaction receipts, security alerts, and platform updates.
- To improve the product and personalise your experience.
3. How we share information
We share information only when necessary, and only with:
- Razorpay — to process payments and verify transactions.
- Cloud / infrastructure providers (e.g. MongoDB Atlas, Vercel) — bound by data-processing agreements.
- Communication providers — for OTP, email, and push notifications.
- Law-enforcement authorities — when legally compelled.
We do not sell, rent, or trade your personal information.
4. Data security
- JWT-based authentication; passwords are never stored.
- HTTPS/TLS for all data in transit.
- Razorpay signed payments with idempotent crediting.
- Wallet balances tracked in paisa-precision integer math.
- Role-based access controls on internal admin tools.
No system is ever 100% secure. If we discover a breach affecting your information, we will notify you and the relevant authorities as required by law.
5. Data retention
We retain your information for as long as your account is active and as required by tax, accounting, and anti-fraud laws (typically 7 years for financial records). On account deletion, we anonymise or delete personal identifiers but may retain transaction records to meet our legal obligations.
6. Your rights
You may at any time:
- Access or download your personal data.
- Correct inaccurate information from inside the app.
- Request account deletion by writing to hello@upxme.in.
- Withdraw consent for non-essential communications.
7. Cookies & tracking
Our website uses essential cookies to remember your preferences. We do not use third-party advertising trackers. The mobile app uses device-level tokens for push notifications, which you can disable from your device settings.
8. Children
UPxMe is not intended for users under 18. We do not knowingly collect information from minors. If you believe a minor has registered, contact us — we will delete the account.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified in-app and via email. Continued use of the Platform after the effective date of an update constitutes acceptance.
10. Contact
Questions about this policy or your data?
UPxMe
IIT Bombay, Powai, Mumbai, Maharashtra 400076, India
Email: hello@upxme.in