Privacy Policy

UPI Zero. In the language of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described below, and you are the Data Principal. You can reach us at any time on info@upizero.in.

This policy covers the UPI Zero website. It does not cover PhonePe, Google Pay, your bank, or any payment gateway, each of which handles your information under its own policy.

When you fill in the signup form, we store what you typed:

• Your name and mobile number, which you provide so we can reach you on WhatsApp.
• What you collect for and how many people pay you, if you chose to tell us. Both are optional and the form works without them.
• Which link you arrived by, if the address you used carried a tag such as ?s=reel-1. This tells us which post worked. It is not tied to anything about you personally.

That is the whole list. Nothing else about you is recorded.

We count page views, using Vercel Analytics. It tells us how many people opened a page and which link they arrived by. That is the whole of it.

It is worth saying plainly what that does not involve, because most websites that count visits do a great deal more. It sets no cookies, stores no identifier for you on your device or ours, and cannot follow you to any other website. Your IP address is not stored. Nothing it records can be traced back to you, or joined up with the signup form, and we could not identify an individual visitor from it even if we wanted to.

Beyond that there is no advertising tracker and no other third party script of any kind. We do not profile you. Our typefaces are served from our own domain, so your browser does not contact Google or anyone else while you read this.

We never ask for and never hold your bank account number, card details, UPI PIN or passwords. Nobody from UPI Zero will ever ask you for your UPI PIN or an OTP. If someone does, they are not us.

The calculator on the home page runs entirely in your browser. The amounts you type into it are never sent to us and never leave your device.

For one purpose: so we can contact you about setting up your collections before the UPI fee starts on 15 October, and help you set them up.

The basis is your consent, given when you submit the form. We do not use your details for anything else, and we will not quietly widen that purpose later. If we ever want to use your information for something new, we will ask you first.

We do not sell your information, rent it, or share it for anyone else’s marketing. Ever.

It is stored in a managed Postgres database and the site is hosted on Vercel. Those providers process the data on our instructions in order to run the service, and for no purpose of their own.

We would disclose information if a law, a court or a regulator validly required it. If that happens we will tell you, unless we are legally prohibited from doing so.

Until it has done its job or you ask us to stop, whichever comes first. If you withdraw consent or ask for deletion, we remove your record within 30 days.

If you sign up and we never manage to reach you, we delete your details within 12 months of the last time we tried.

Under the DPDP Act you may, at any time:

• Ask what we hold about you, and get a copy.
• Have anything wrong corrected, or anything incomplete completed.
• Have it erased.
• Withdraw your consent. This is as easy as giving it: one message saying so is enough, and we do not ask why.
• Nominate someone to exercise these rights for you if you die or become unable to act.
• Complain to us, and then to the Data Protection Board of India.

To use any of them, write to info@upizero.in from the number or name you signed up with, or message the WhatsApp number we contacted you from. There is no form to fill in and no charge.

Our Grievance Officer handles complaints: info@upizero.in.

We acknowledge complaints within 48 hours and aim to resolve them within 30 days, and in any case within the 90 days the DPDP Rules allow. If you are not satisfied with how we handled it, you can take the matter to the Data Protection Board of India.

Access to the signup list is restricted to people who need it to contact you. The database is encrypted in transit and at rest by our provider, and the site is served only over HTTPS.

No system is perfect. If a breach occurs that affects your information, we will report it to the Data Protection Board and tell you, as the DPDP Rules require.

This service is for people running a business, a society or a property, and is not directed at children. We do not knowingly collect information about anyone under 18. If you believe a child’s details have reached us, tell us and we will delete them.

If we change this policy we will update the date at the top. If a change materially affects how we use information you have already given us, we will tell you directly rather than expecting you to notice.

See also our Terms of Use.