Privacy Policy

1. Information We Collect

We collect both personal and usage information when you use TrueUPI:

• UPI IDs for verification
• Fraud reports and related details
• User feedback and votes
• Email address or other contact information (when provided)
• Device fingerprint (via FingerprintJS) for guest fraud prevention and rate limits
• Analytics data (Google Analytics 4, only with your consent)
• Push notification subscription tokens (if enabled)
• NPCI-registered account holder names (via Know The UPI), stored encrypted — displayed only in masked form (e.g. S**** K*****)
• Subscription and billing metadata (via Razorpay) for paid Shield plans

We do not operate a public searchable database of full legal names. Know The UPI results show masked names and cluster counts only. Obtain legal counsel before relying on verification outcomes for high-stakes decisions.

2. How We Use Your Information

We use the collected information to:

• Provide UPI verification services
• Maintain and improve fraud detection systems
• Enhance our platform and user experience
• Send important updates, alerts, and relevant communications

We may also use your data, in anonymized form, to understand and analyze trends, improve our services, and develop new features that make TrueUPI more useful.

3. Sharing and Disclosure

We do not sell or rent your personal information. However, we may share limited data:

• With Your Consent: When you authorize or request it.
• Compliance and Legal Requirements: If required by law, subpoena, or court order, or to protect our rights.
• Service Providers: Supabase (hosting/database), Novita AI (TrueShield language models), Google Analytics (optional, with consent), and cloud storage for attachments — under strict confidentiality agreements.

4. Data Security

We implement appropriate security measures—such as encryption and secure servers—to protect your personal information and maintain the trust you place in us. Please note that no transmission over the internet is entirely secure, so always exercise caution when sharing sensitive data.

5. Retention of Information

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Once data is no longer needed, we securely delete or anonymize it.

5a. TrueShield AI (Fraud Prevention Assistant)

When you use TrueShield AI, we process your messages and optional attachments (such as screenshots or PDFs) to provide fraud risk assessments and safety guidance. This may include:

• Chat messages and conversation metadata (risk scores, detected UPI IDs)
• Uploaded images stored temporarily in secure cloud storage
• Daily usage counts for fair-use limits (guest and signed-in users)

TrueShield AI is powered by third-party language models. We do not use your chats to train those models. We automatically mask sensitive data such as OTPs and card numbers before analysis. TrueShield AI will never ask you for your OTP, UPI PIN, CVV, or passwords.

Signed-in users may have conversation history stored for up to 90 days. Guest sessions are limited and may not retain full history. You may request deletion of TrueShield AI data by emailing support@aviyatechsolutions.com.

5b. Cookies and Analytics

We use essential cookies for authentication and fraud prevention. Optional Google Analytics loads only after you accept analytics in our cookie banner. See our Cookie Policy for details.

6. Grievance Officer (India)

Under applicable Indian data protection law, you may contact our grievance officer at support@aviyatechsolutions.com for complaints regarding personal data processing. We aim to respond within 30 days.

7. Children’s Privacy

TrueUPI is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. Your Rights and Choices

You may access, update, or delete your personal information at any time by contacting us. You can also opt out of marketing emails by following the unsubscribe link or emailing us directly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices. When we do, we will revise the “Last updated” date above. Please review this page periodically to stay informed.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data practices, please reach out to: