Privacy Policy

UnknownXfam Gateway is a UPI payment-collection and verification service. This page explains what information the service may collect, how it is used, and the choices you have. It describes how the application works today; it is not a promise of any certification, legal compliance, or guaranteed outcome.

1. Information we may collect

Depending on how you use the gateway, the following information may be stored:

• Account information — your name, email address, role and approval/account status, and whether your email is verified. Your password is stored only as a salted hash, never in plain text.
• Payment and UPI-related information — the UPI ID you register, the orders you create (order ID, amount, status, timestamps), and, once a payment is verified, details such as amount, transaction ID, UTR, the payer name shown on the payment alert, the purpose text, payment time, and the balance reported in that alert.
• API credentials — your API key and webhook secret. They are stored hashed for lookup, and an encrypted copy is kept so you can view them again in your dashboard.
• Gmail-derived information — only if you connect Gmail (see section 3).
• Technical and log information — IP address, browser/device user-agent, login sessions, API request records (endpoint, method, result, IP), security events (such as sign-ins and password resets), administrator audit-log entries, and short-lived rate-limit counters used to prevent abuse.
• Cookies and local storage — a session cookie to keep you signed in, a short-lived cookie for one-time notices, security (CSRF) tokens on forms, and a browser setting that remembers your light/dark theme choice.

2. How we use information

• To create and run your account, approve access, and sign you in.
• To create payment orders, verify payments, and report their status to you through the dashboard and API.
• To send emails you trigger, such as email verification links, sign-in codes, and password-reset messages.
• To protect the service: detect abuse, enforce rate limits, investigate disputes, and keep an audit trail of administrative actions.
• To provide support when you contact us.

We do not sell your personal information, and we do not use it for advertising.

3. Gmail access

Connecting Gmail is optional and is used only for the payment-verification features the gateway provides.

• Read-only. The gateway requests read-only Gmail access. It cannot send, delete, or change your email.
• Limited purpose. It searches for payment-notification emails from the sender addresses the gateway is configured to trust (for example, FamApp's no-reply address) in order to confirm payments for your orders. The payment details extracted from those emails (for example amount, transaction ID, UTR, payer name, and balance) are saved with your payment records. The gateway does not keep a copy of your whole mailbox.
• Your inbox view. If you open the inbox page in your dashboard, messages are fetched from Google when you open them and shown only to you.
• Token storage. The access token Google gives us for refreshing access is stored encrypted on the server.
• No selling, no ads. Gmail data is not sold, not shared for advertising, and not used to build advertising profiles.
• Disconnect any time. Use Disconnect Gmail in your dashboard; this revokes access at Google and deletes the stored token. You can also remove the gateway from your Google Account's third-party access page.

Google API Services User Data Policy (Limited Use). The gateway's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain words:

• Gmail data is used only to verify payments for the account that connected it, and for nothing else.
• It is not transferred or sold to anyone, except where needed to provide this feature, to follow the law, or to investigate abuse or security problems.
• People do not read your email. Messages are read by software only; a person looks at a message only if you ask us to, for security or abuse reasons, or where the law requires it.
• It is not used for advertising, and not used to develop, improve or train generalized AI or machine-learning models.
• The email text is not stored. Only the facts needed to settle a payment are kept: the amount, the transaction or UTR reference, the time, who sent it and the wallet balance shown in the notification.

Separately, the site operator may connect one Gmail account that the gateway uses to send system emails (verification links, sign-in codes, password resets). That is the operator's own mailbox, not yours.

4. Who information is shared with

We do not sell or rent your information. It may be handled by the services the gateway needs in order to run:

• Hosting and database — the platform that runs the application and its database (currently Render).
• Google — for Gmail access you choose to connect and for sending system emails.
• Telegram — encrypted database backups are delivered to a private Telegram channel, and Telegram is also used if you contact support there.
• Authorities or other parties — only if we are required to by law or need to protect the service and its users from fraud or abuse.

Authorized administrators and support staff can see account details and payment records as needed to approve accounts, resolve problems, and investigate abuse. They cannot read your Gmail inbox through the gateway.

5. Security

We take reasonable steps to protect your information: passwords and API keys are stored hashed, Gmail tokens and backups are encrypted, connections use HTTPS in production, sessions can be revoked, and administrator actions are logged. No online service can be perfectly secure, so we cannot guarantee absolute security.

Please do not submit unnecessary sensitive information. The gateway never needs your UPI PIN, card numbers, bank passwords, one-time passwords from your bank, or government ID numbers. Do not type them into any field or send them to support. Keep your password and API key private, and disconnect Gmail or change your password if you think they were exposed.

6. Retention and deletion

• Short-lived data — expired login sessions, one-time email codes (removed after about a day), rate-limit counters, and sign-in handshake records are removed automatically.
• Gmail connection — deleted immediately when you click Disconnect Gmail.
• Account and payment records — kept while your account exists and as long as reasonably needed for payment disputes, fraud prevention, and administrative audit.
• Backups — the database is backed up periodically in encrypted form. Data you ask us to delete may remain in earlier backups until those backups are replaced or removed.

The app does not currently have a self-service "delete my account" button. To ask for access to, correction of, or deletion of your data, contact support using the details below from your registered account. We will review the request and delete or anonymize what we reasonably can; some payment, security, and audit records may need to be kept.

7. Children

The gateway is not intended for children, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this page when the application changes. The "Last updated" date at the top shows the latest revision.

9. Contact and support

Questions or requests about your data? Reach support on Telegram: @UnknownNvrDie.

See also the Terms of Service.