Privacy Policy - UPIPoint

1. About this Privacy Policy

This Privacy Policy explains how UPIPoint ("UPIPoint", "we", "us" or "our") collects, uses, stores and protects information when you use the UPIPoint website and services available through upipoint.com.

UPIPoint provides tools for creating UPI payment QR codes, payment links, shortened payment links and related utilities, including QR scanning functionality.

This Privacy Policy should be read together with our Terms & Conditions .

2. Information We Collect

The information we collect depends on how you use UPIPoint.

Information you provide

When you create a payment QR code or payment link, you may provide information such as:

UPI ID / Virtual Payment Address (VPA)
Payee or recipient name
Payment amount
Payment note or description
Transaction/reference number
Expiry or status information associated with a payment link

Automatically collected information

Like most websites, our servers or infrastructure may automatically receive technical information such as:

IP address
Browser type and version
Operating system
Device information
Date and time of requests
Requested pages or URLs
Security and diagnostic information

The exact information collected depends on our hosting provider, security tools, analytics configuration and server logs.

3. Payment Links and QR Information

UPIPoint provides shortened payment links that may contain information necessary to reconstruct the requested UPI payment information.

To provide a shortened URL such as:

https://upipoint.com/p/example

UPIPoint may store the payment-link data associated with that short code, including the UPI ID, payee name, amount, payment note, reference number, status and applicable expiry information.

This information is required to retrieve and display the payment request when someone opens the shortened payment link.

Users should therefore avoid entering information into a payment link that they do not want to be associated with that link.

4. QR Scanner

UPIPoint may provide a QR scanner that allows you to scan a UPI QR code using your device camera or an uploaded QR image.

Where technically supported, QR decoding is performed locally in your browser. UPIPoint does not need to upload the QR image to its servers merely to decode an ordinary UPI QR code.

Your browser may request permission to access your device camera. You can refuse that permission and use the image-upload option where available.

A QR code may contain payment information belonging to another person or business. Do not scan, upload, copy or disclose QR codes unless you are authorized to do so.

5. How We Use Information

We may use information for the following purposes:

To create and serve UPI payment links and QR codes.
To maintain shortened payment URLs.
To provide QR scanning functionality.
To operate, maintain and improve UPIPoint.
To detect, prevent and investigate fraud, abuse, security incidents and unlawful activity.
To diagnose technical problems and maintain website security.
To respond to support, legal or compliance requests.
To comply with applicable law or valid legal processes.

6. Sharing of Information

UPIPoint does not sell personal information to third parties.

We may disclose information where reasonably necessary to operate the service, including to:

Hosting and infrastructure providers.
Security and monitoring providers.
Technical service providers acting on our behalf.
Professional advisers where necessary.
Government authorities, courts, regulators or law-enforcement agencies where required by applicable law.

We do not authorize third parties to use payment-link information for unrelated advertising purposes merely because it is processed through UPIPoint.

7. Data Retention

We retain payment-link information for as long as reasonably necessary to provide the requested service, maintain active links, prevent abuse, resolve disputes, maintain security records, or comply with applicable legal obligations.

Where a payment link has an expiry date, the link may become unavailable after its expiry. Expiry does not necessarily mean that the associated record is immediately deleted from backups, logs or systems that are subject to security, legal or operational retention requirements.

We may periodically delete, anonymize or otherwise remove information that is no longer required for legitimate operational or legal purposes.

8. Data Security

We use reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, misuse or destruction.

However, no website, database, transmission method or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping any information you use to access or manage your own accounts, systems or services secure.

9. Cookies and Similar Technologies

UPIPoint may use cookies, local storage, session technologies or similar mechanisms where necessary for website functionality, security, preferences or analytics.

If analytics or other optional technologies are enabled, the applicable information and choices will be presented through the website where required.

You can control cookies through your browser settings. Disabling certain technologies may affect some website functionality.

10. Third-Party Services

UPIPoint may link to or interact with third-party services, including banks, UPI applications, payment applications, hosting providers, analytics services and other external websites.

Once you leave UPIPoint or interact directly with a third-party service, that third party's own terms and privacy policy may apply.

UPIPoint does not control the privacy practices, security or availability of third-party UPI applications or banks.

11. Your Rights and Choices

Depending on applicable law and the stage of implementation of the applicable provisions, you may have rights concerning personal data processed by UPIPoint, including rights relating to access, correction, erasure and grievance redressal.

India's Digital Personal Data Protection Act, 2023 establishes a framework concerning the processing of digital personal data and provides rights and obligations in relation to such processing. The Central Government notified the Digital Personal Data Protection Rules, 2025 and an enforcement timeline in November 2025. :contentReference[oaicite:2]{index=2}

If you want to request access, correction, deletion or clarification concerning information associated with you, contact us using the details provided below.

We may need sufficient information to verify the request and may retain information where required by applicable law or where necessary for legitimate security, legal or operational purposes.

12. Children's Privacy

UPIPoint is not intended to knowingly collect personal data from children in circumstances where applicable law requires parental or guardian involvement.

If you believe that a child has provided personal information to us in circumstances where such collection is not permitted, please contact us.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, security practices or applicable legal requirements.

The "Last updated" date at the top of this page indicates when this policy was most recently revised.

Where appropriate, material changes may be communicated through the website or other reasonable means.

14. Contact Us

If you have questions, privacy requests, complaints or concerns regarding this Privacy Policy or the processing of your information, please contact UPIPoint:

Website: https://upipoint.com

Privacy / Support Email: support@upipoint.com

Please replace the email address above with your actual monitored email address before publishing this page.