Privacy Policy
What we collect, why we collect it, and how we keep it safe.
Last updated: 6 November 2026
This Privacy Policy explains how UPIstar ("we", "us") handles personal data when you visit our website or use our Service. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
1. Information we collect
- Account information: your name, business name, email, mobile number, GSTIN and billing details.
- Payment configuration: the UPI IDs you connect, and your webhook URLs and settings.
- Transaction data: order IDs, amounts, statuses, UTRs, payer UPI IDs and timestamps for payments made to you through the Service.
- Technical data: IP address, browser type, device information and logs of API and dashboard activity.
- Communications: messages you send to us by form, email or phone.
We do not collect or store your customers' UPI PINs, bank passwords or card numbers. Payments are authorised entirely inside the customer's own UPI app.
2. How we use information
- To create your account, deliver the Service and detect payments to your UPI IDs.
- To send webhooks, alerts and receipts you've configured.
- To prevent fraud, abuse and security incidents.
- To provide support and respond to your requests.
- To meet legal, tax and accounting obligations.
- To send product updates. You can opt out of marketing emails anytime.
3. Sharing
We don't sell personal data. We share it only with:
- service providers who host our infrastructure, send email or provide support tools, under confidentiality obligations;
- authorities, where required by law or a valid legal request;
- a successor entity in the event of a merger or acquisition, subject to this policy.
4. Data retention
We keep account and transaction records for as long as your account is active and afterwards for as long as required by law (for example, tax and accounting rules). We delete or anonymise data that is no longer needed.
5. Security
We use encryption in transit (TLS), access controls, API key hashing and activity logging to protect data. No system is completely secure, so please keep your credentials and API keys private.
6. Your rights
You may ask to access, correct or erase your personal data, withdraw consent, or nominate another person to exercise these rights on your behalf. Email support@upistar.in and we'll respond within a reasonable time.
7. Cookies
Our website uses only the cookies needed to run it and to keep you signed in to the dashboard. We do not use third-party advertising cookies. The embedded map on our Contact page is provided by Google and is subject to Google's privacy policy.
8. Changes
We may update this policy. The "Last updated" date above shows when it last changed, and material changes will be notified by email.
9. Grievance officer & contact
UPIstar, Jubilee Hills, Hyderabad, Telangana 500033, India
Email: support@upistar.in · Toll-free: 1800 909 111