This Privacy Policy describes how UPXME ("we", "us"), operated by a sole proprietorship registered under Udyam Registration UDYAM-MH-18-0544204, collects, uses, and protects information when you use our website at https://upxme.in and the UPXME mobile application (together, the "Platform").
Data Fiduciary: The proprietor of UPXME, registered at D-423, H-12, Near Main Gate Road, IIT Bombay, Mumbai, Maharashtra 400076, India. For privacy-related questions or to exercise your DPDP Act rights, contact hello@upxme.in. Full proprietor identity is disclosed in our Terms of Service contact section as required by Indian regulations.
1. Information we collect
Information you provide
- Account information: name, email, phone number, profile photo.
- Verification information: for players (talents listing tokens), additional identity documents, achievements, and social profiles.
- Payment information: processed by Cashfree (our payment partner). We never see or store your card numbers, CVV, UPI PINs, or net-banking credentials. We retain only transaction IDs and amounts.
- Bank/UPI details for withdrawals — stored encrypted.
- Content: posts, comments, messages, and any media you upload.
Information we collect automatically
- Device information (model, OS, app version).
- IP address, approximate location, and timestamps of activity.
- Usage analytics — screens viewed, features used, errors.
- App analytics through Google Firebase Analytics — events such as app opens, sign-in screen views, OTP requests, and completed sign-ups or logins. These events carry no name, phone number, or email.
- App performance through Google Firebase Performance Monitoring — how long screens and app start take, and the timing and result of the app's requests to our servers (web addresses without their query part), with device model, OS and app version. Used only to find and fix slow parts of the app; no name, phone number, email or message content.
- On Android, the device's advertising ID, used only to measure whether an install came from one of our Google Ads or Meta (Facebook / Instagram) campaigns. You can reset or delete it at any time in your phone's Settings → Google → Ads. On iPhone we do not collect the advertising identifier (IDFA).
- Meta app events (Meta / Facebook SDK) — app installs, app opens and completed sign-ups, to measure and improve our ads on Facebook and Instagram. No name, phone number or email is sent.
2. How we use information
- To create and operate your account.
- To process payments, trades, and withdrawals.
- To verify identity, prevent fraud, and meet legal/regulatory obligations.
- To send transaction receipts, security alerts, and platform updates.
- To improve the product and personalise your experience.
3. How we share information
We share information only when necessary, and only with:
- Cashfree — to process payments and verify transactions.
- Cloud / infrastructure providers (e.g. MongoDB Atlas, Vercel, Cloudinary for photos and videos, Google Firebase for phone sign-in and notifications) — bound by data-processing agreements.
- Communication providers — for OTP, email, and push notifications.
- Google (Firebase Analytics, Firebase Performance Monitoring and Google Ads) — app usage and performance events and, on Android, the advertising ID, to understand how people find and use UPxMe, to measure our ads, and to show UPxMe's ads to people likely to be interested. We do not show ads inside the app.
- Meta Platforms (Facebook / Instagram) — app install, app open and sign-up events and, on Android, the advertising ID, to measure and improve our ads on Facebook and Instagram.
- Law-enforcement authorities — when legally compelled.
We do not sell, rent, or trade your personal information.
4. Data security
- JWT-based authentication; passwords are never stored.
- HTTPS/TLS for all data in transit.
- Cashfree signed payments with idempotent crediting.
- Wallet balances tracked in paisa-precision integer math.
- Role-based access controls on internal admin tools.
No system is ever 100% secure. If we discover a breach affecting your information, we will notify you and the relevant authorities as required by law.
5. Data retention
We retain your information for as long as your account is active and as required by tax, accounting, and anti-fraud laws (typically 7 years for financial records). On account deletion, we anonymise or delete personal identifiers but may retain transaction records to meet our legal obligations.
6. Your rights
You may at any time:
- Access or download your personal data.
- Correct inaccurate information from inside the app.
- Request account deletion by writing to hello@upxme.in.
- Withdraw consent for non-essential communications.
7. Cookies & tracking
Our website uses essential cookies to remember your preferences. We do not use third-party advertising trackers. The mobile app uses device-level tokens for push notifications, which you can disable from your device settings.
8. Children
UPxMe is not intended for users under 18. We do not knowingly collect information from minors. If you believe a minor has registered, contact us — we will delete the account.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified in-app and via email. Continued use of the Platform after the effective date of an update constitutes acceptance.
10. Contact
Questions about this policy or your data?
Vikas Singh
D-423, H-12, Near Main Gate Road, IIT Bombay, Mumbai, Maharashtra 400076, India
Email: hello@upxme.in