Privacy Policy

Effective Date: 3 September 2025

This Privacy Policy explains how CodeIXE.com / CodeIXE AI Solutions, a proprietorship based in Mangalore, Karnataka, India (“CodeIXE”, “we”, “us”, or “our”), collects, uses, stores, protects, and otherwise processes personal data when you use UpiLinks, including upilinks.in, blog.upilinks.in, and related services, features, applications, and webpages (collectively, the “Service”).

We respect your privacy and are committed to processing personal data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), to the extent applicable and in force.

UpiLinks is operated by CodeIXE AI Solutions and is not affiliated with NPCI, any bank, or any UPI application.

1. Who We Are

The Data Fiduciary responsible for personal data processed through UpiLinks is:

CodeIXE AI Solutions
Business structure: Proprietorship
Location: Mangalore, Karnataka, India
Country: India

Privacy and Data Protection Contact

For privacy questions, requests, complaints, or concerns relating to personal data:

Email: [email protected]

You may use this email to request information about the processing of your personal data, request correction or deletion where applicable, withdraw consent where processing is based on consent, or raise a privacy-related grievance.

2. About UpiLinks

UpiLinks is a service that enables users to create and share UPI payment-related links and QR codes.

Depending on the features used, the Service may allow you to:

  • Generate UPI payment links.
  • Generate QR codes associated with UPI payment information.
  • Create payment requests.
  • Create invoices and payment-related documents.
  • Specify payment amounts.
  • Add payment notes or descriptions.
  • Specify optional link expiry or disposal dates.
  • Create an account to manage previously generated links, UPI IDs, invoices, and related information.
  • Share generated links and QR codes with other people.
  • Use the UpiLinks website and related services without creating an account.

UpiLinks does not itself process or settle your UPI payment. When a payer uses a generated UPI link or QR code, the payment is made through the payer’s chosen UPI application or participating financial institution.

3. Personal Data We Collect

Depending on how you use UpiLinks, we may collect or process the following categories of personal data.

3.1 Information You Provide

This may include:

  • Name.
  • Email address.
  • Account login credentials.
  • UPI ID or Virtual Payment Address (VPA).
  • Information contained in payment links.
  • Payment amount, where provided.
  • Payment notes or descriptions.
  • Information included in invoices.
  • Information included in payment requests.
  • URLs or website addresses submitted by you.
  • Information included in QR codes generated through the Service.
  • Other information that you voluntarily enter into forms or features of the Service.

You should not enter unnecessary sensitive personal information into UpiLinks.

3.2 Account Information

If you create an account, we may process information required to create and operate your account, including your email address, name, authentication information, and the UpiLinks content associated with your account.

Account holders can use the available dashboard functionality to manage their generated links, UPI IDs, invoices, and related content.

3.3 Automatically Collected Information

When you access or use the Service, we may automatically process technical and usage information, including:

  • IP address.
  • Browser type and version.
  • Device and operating-system information.
  • Referral URL.
  • Pages or features accessed.
  • Date and time of access.
  • Usage and activity information.
  • Security and server logs.
  • Cookie and similar technology information.
  • Analytics information.

This information may be used for security, troubleshooting, service operation, analytics, performance measurement, and improvement of the Service.

4. Why We Process Personal Data

We process personal data only for specified purposes connected with operating, securing, improving, and providing the Service.

These purposes may include:

4.1 Providing the Service

We process information you provide to:

  • Generate UPI payment links.
  • Generate QR codes.
  • Create payment requests.
  • Generate invoices.
  • Display information included in generated links or invoices.
  • Provide account functionality.
  • Allow you to manage your generated content.
  • Provide features that you request.

4.2 Account Management

Where you create an account, we process relevant information to:

  • Create and authenticate your account.
  • Allow you to access your dashboard.
  • Save and manage your generated content.
  • Allow you to modify or delete eligible content.
  • Maintain account security.

4.3 Security and Fraud Prevention

We may process technical information, IP addresses, logs, and activity information to:

  • Protect the Service against abuse.
  • Detect suspicious activity.
  • Prevent fraud and misuse.
  • Investigate security incidents.
  • Protect users and the Service.
  • Maintain the integrity and availability of our systems.

4.4 Analytics and Service Improvement

We may use analytics information to understand how users interact with UpiLinks, identify technical problems, measure performance, and improve the Service.

4.5 Communications

Where necessary, we may use your email address to:

  • Respond to support or privacy requests.
  • Communicate regarding your account.
  • Address security or service-related matters.
  • Respond to communications you send to us.

4.6 Legal and Regulatory Compliance

We may process or disclose information where reasonably necessary to comply with applicable law, legal obligations, court orders, lawful governmental requests, or to establish, exercise, or defend legal rights.

5. UPI IDs and Payment Information

A UPI ID or VPA may be entered into UpiLinks to generate a payment link or QR code.

A UPI ID is generally intended to be shared for receiving UPI payments. However, users are responsible for ensuring that the UPI ID and other information they enter are accurate and appropriate for sharing.

UpiLinks does not act as a bank, payment gateway, payment processor, or UPI participant.

Payments initiated through generated links or QR codes are processed through the relevant UPI application, bank, or financial institution.

We do not receive or store your UPI transaction funds through UpiLinks.

If you use an invoice or payment-request feature, additional information entered by you may become part of the generated content.

6. Information You Choose to Make Public

Some UpiLinks features are specifically designed to generate shareable payment links and QR codes.

Information included in a generated link, QR code, invoice, or payment request may therefore be accessible to anyone with whom you share the generated content or URL.

You are responsible for ensuring that you have the necessary rights and permissions to submit and share information through the Service.

Do not include confidential, highly sensitive, or unnecessary personal information in a payment link, invoice, note, QR code, or other publicly shareable content.

7. Guest Users

You may use certain UpiLinks features without creating an account.

Where you use UpiLinks as a guest, certain generated content may not be associated with an account that you can access through a dashboard.

We recommend creating an account if you want convenient access to and management of your generated UpiLinks content.

For guest-generated content or information that you cannot manage through an account, you may contact us at:

[email protected]

Please provide sufficient information for us to identify the relevant content or request.

8. Account Users

If you create an account, the account dashboard may provide functionality to manage your content, including eligible:

  • Payment links.
  • UPI IDs.
  • Invoices.
  • Payment requests.
  • Other information associated with your account.

You are responsible for maintaining the confidentiality of your account credentials and for activity conducted through your account.

If you believe that your account has been compromised, contact us promptly at [email protected].

9. Cookies and Similar Technologies

UpiLinks uses cookies and similar technologies.

These technologies may include:

Essential Cookies

These cookies may be necessary for:

  • Website functionality.
  • Authentication.
  • Security.
  • Session management.
  • Remembering essential preferences.

Essential cookies may be used where necessary to provide the requested Service.

Analytics Cookies

We may use analytics technologies, including Google Analytics, to understand website usage, measure performance, and improve our services.

Advertising and Marketing Technologies

We may use advertising technologies, including Google Ads, to display or measure relevant advertising.

Where required by applicable law, non-essential cookies and similar technologies will be used only after obtaining the required user consent.

Users may manage available cookie choices through the cookie controls provided on the website.

Where the website provides an “Only essential” option, selecting that option is intended to disable non-essential cookies that require consent, subject to technical limitations and necessary exceptions.

10. Third-Party Services

We use selected third-party service providers to operate, secure, analyze, and improve UpiLinks.

These may include:

  • Cloudflare, including CDN, security, DNS, and WAF-related services.
  • Google Analytics, for analytics.
  • Google Tag Manager, for managing website tags.
  • Google Ads, for advertising and advertising measurement.
  • WordPress and related plugins used for the website and blog.
  • Other infrastructure or technology providers that may be required to operate the Service.

These providers may process information on our behalf or collect information directly through their technologies, depending on how their respective services are configured.

Third-party services may have their own privacy policies and terms. We encourage users to review the applicable policies of third-party services when interacting with them.

11. International Data Processing

Our infrastructure and/or service providers may process or store personal data outside India.

Our current data infrastructure includes data centres located in the United States.

Where personal data is transferred, stored, or processed outside India, we will take measures required by applicable Indian law and applicable contractual or technical safeguards.

By using the Service, you acknowledge that your personal data may be processed in jurisdictions outside India where permitted by applicable law.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by applicable law.

For guest-generated data, our current intended retention period is up to two years, after which such data may be deleted or otherwise removed from active systems, subject to technical, security, legal, backup, or other legitimate requirements.

Account users should use their account dashboard to manage and delete their content where the relevant functionality is available.

Deletion from active systems may not immediately remove information contained in security backups or other systems that are not reasonably capable of immediate deletion. Such information will be handled in accordance with applicable retention requirements and security practices.

We may retain certain information where necessary for:

  • Legal compliance.
  • Fraud prevention.
  • Security.
  • Dispute resolution.
  • Enforcement of agreements.
  • Establishing, exercising, or defending legal claims.
  • Maintaining required business and security records.

13. Your Rights

Subject to applicable law and the manner in which the relevant provisions are in force, you may have rights concerning your personal data, including the right to:

  • Request information about the processing of your personal data.
  • Request correction of inaccurate or incomplete personal data.
  • Request deletion of personal data where applicable.
  • Withdraw consent where processing is based on consent.
  • Raise a grievance concerning our processing of personal data.
  • Exercise other rights available to you under applicable Indian data protection law.

Account Users

If you have an account, you should first use the available account dashboard functionality to manage or delete your information.

Guest Users

If you generated content without an account and cannot manage it through the Service, you may submit a request to:

[email protected]

We may need sufficient information to verify the request and identify the relevant data or content.

14. Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent through the mechanism made available for that processing or by contacting us at:

[email protected]

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Depending on the nature of the processing, withdrawal may result in the inability to provide certain features or services that require the relevant personal data.

15. Children’s Personal Data

UpiLinks may be accessible to persons under 18 years of age.

Where a user is a child under applicable Indian data protection law, we will process the child’s personal data only in accordance with applicable legal requirements, including requirements relating to verifiable parental or lawful guardian consent.

We will not knowingly use children’s personal data for targeted advertising, behavioural monitoring, or tracking in circumstances prohibited by applicable law.

Where legally required, we will implement appropriate mechanisms to establish and verify parental or guardian consent before processing a child’s personal data.

Parents or lawful guardians who believe that a child’s personal data has been provided to us without appropriate authorization may contact:

[email protected]

We may take appropriate steps to verify the request and, where legally required, delete or restrict the relevant information.

16. Security Measures

We take reasonable technical and organisational measures designed to protect personal data against unauthorized access, misuse, alteration, disclosure, loss, or destruction.

Our security measures may include:

  • HTTPS/TLS encryption for data transmitted between your device and our services.
  • Password hashing for account credentials.
  • Encryption or other appropriate protections for data at rest where applicable.
  • Firewall and Web Application Firewall protections.
  • Cloudflare security and infrastructure services.
  • Access controls.
  • Security monitoring and logging.
  • Measures designed to detect and respond to unauthorized access or security incidents.

No internet service can guarantee absolute security. You should use a strong, unique password and protect your account credentials.

17. Personal Data Breaches

If a personal data breach occurs that is required to be notified under applicable law, we will take appropriate steps to assess, contain, investigate, remediate, and notify affected parties and/or relevant authorities as required by applicable law.

18. Sharing and Disclosure of Personal Data

We do not sell your personal data.

We may disclose or make personal data available to:

  • Technology and infrastructure service providers.
  • CDN, security, and hosting providers.
  • Analytics providers.
  • Advertising and measurement providers where applicable.
  • Service providers supporting the operation of UpiLinks.
  • Professional advisers where reasonably necessary.
  • Law enforcement or government authorities where legally required or permitted.
  • Courts or other competent authorities pursuant to lawful orders.
  • Parties involved in preventing fraud, abuse, or security incidents.
  • A successor or acquiring entity in connection with a business transfer, merger, restructuring, or similar transaction, subject to applicable law.

We disclose only information reasonably necessary for the applicable purpose, subject to applicable legal requirements and safeguards.

19. User Responsibility for Submitted Information

You are responsible for the information you submit to UpiLinks.

You should ensure that:

  • Information submitted by you is accurate.
  • You have the right or authorization to submit information belonging to another person.
  • You do not use the Service to unlawfully collect, publish, disclose, or distribute another person’s personal information.
  • You do not submit unnecessary sensitive personal information.
  • You do not use generated links, QR codes, invoices, or payment requests for unlawful activities.

If you create links or payment materials containing another person’s personal data, you are responsible for ensuring that you have an appropriate lawful basis or authorization to do so.

20. Data Loss and Service Availability

While we take reasonable measures to protect information and maintain service availability, no online service can guarantee that data will never be lost, corrupted, unavailable, or affected by technical failures.

Users should maintain appropriate copies of important information and should not rely exclusively on UpiLinks as their sole storage location for critical business or financial records.

To the extent permitted by applicable law, UpiLinks is not responsible for loss resulting from circumstances outside our reasonable control, including infrastructure failures, third-party service failures, unauthorized access caused by compromised user credentials, or user deletion of information.

Nothing in this Privacy Policy excludes or limits rights or protections that cannot legally be excluded or limited under applicable law.

21. Legal and Law Enforcement Requests

We may disclose personal data where reasonably necessary to comply with:

  • Applicable Indian law.
  • Court orders.
  • Lawful government requests.
  • Law-enforcement requests.
  • Regulatory requirements.
  • Fraud investigations.
  • Security investigations.
  • Prevention or investigation of unlawful activity.

We may also preserve information where reasonably necessary to comply with legal obligations or protect our legal rights.

Where legally permitted, we may notify affected users about such requests.

22. Third-Party Websites and Services

UpiLinks may contain links to external websites, applications, UPI applications, payment services, social media platforms, or other third-party services.

We do not control the privacy practices of third parties.

Once you leave UpiLinks or interact directly with a third-party service, that third party’s privacy policy and terms may apply.

You should review the privacy policies of those third parties before providing personal information to them.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to the Service.
  • Changes in our data processing practices.
  • Changes in technology.
  • Changes in applicable law or regulatory requirements.
  • Changes required to improve transparency or security.

When we make material changes, we may provide an appropriate notice through the website or other reasonable means.

The updated policy will include a revised effective date.

24. Grievance Redressal and Privacy Complaints

If you have a question, concern, complaint, or request regarding the processing of your personal data, please contact us first.

Privacy and Grievance Contact

CodeIXE AI Solutions
Mangalore, Karnataka, India

Email: [email protected]

Please include:

  • Your name.
  • Email address associated with the account, where applicable.
  • A description of your request or complaint.
  • Relevant UpiLinks URL, link ID, invoice, or other identifying information where applicable.
  • Any information reasonably necessary for us to understand and process your request.

We may request reasonable information necessary to verify your identity or authority before acting on a request involving personal data.

We will process privacy requests and grievances in accordance with applicable law.

Where applicable, you may also have the right to approach the Data Protection Board of India or another competent authority in accordance with applicable law.

25. Contact Us

For privacy questions, data requests, account-related privacy matters, or complaints:

CodeIXE AI Solutions
Mangalore, Karnataka, India

Email: [email protected]

Website: UpiLinks

Effective Date: 3 September 2026

Important Notice

This Privacy Policy describes our intended privacy and data-processing practices. It should be read together with the UpiLinks Terms & Conditions and other applicable policies.

The availability of particular privacy controls, deletion mechanisms, cookie controls, parental-consent mechanisms, and account-management features depends on their implementation within the Service.

Where applicable law imposes requirements that differ from this Privacy Policy, the applicable law will prevail.

Back To Top