Legal

Privacy Policy.

How Apex Swipe collects, uses, and protects your data — DPDP Act 2023 compliant.

Last updated: [Date]

01

Who we are

Apex Swipe, [legal entity], headquartered in Bengaluru, Karnataka, India.

02

What data we collect

  • Identity: Name, Aadhaar, PAN, photo, date of birth
  • Contact: Phone, email, address
  • Financial: UPI ID, bank account, transaction history (we never store full card numbers or PINs)
  • Device: Device ID, IP address, OS, app version
  • Behavioural: Picks, watches, follows, chat messages, purchase history
  • Streaming: Live video and audio when you host (encrypted via Agora)
03

How we use it

To verify identity, process payments, detect fraud, ship orders, improve the product, and send important account updates.

04

Legal basis

Consent, contract performance, legitimate interest, and legal obligation under Indian law.

05

Who we share it with

  • Razorpay (payments)
  • Shiprocket (shipping)
  • Agora (live streaming)
  • Firebase / Google (auth, analytics)
  • Indian regulators when legally required
  • Never sold to advertisers. Ever.
06

Data retention

KYC for 7 years (RBI requirement), transaction data for 7 years, account data until deletion request.

07

Your rights under DPDP Act 2023

  • Right to access your data
  • Right to correct your data
  • Right to delete your data (subject to legal retention requirements)
  • Right to nominate
  • Right to grievance redressal
10

Children

Apex Swipe is 18+ only. We don't knowingly collect data from minors.

11

Security

Encryption in transit and at rest, RBI-compliant payment infrastructure, regular audits.

12

International transfers

Data is primarily stored in India. Some processors (Firebase, Agora) operate globally under standard contractual clauses.

13

Cookies and tracking

We use essential cookies for authentication and session management, plus analytics cookies to improve the product. You can opt out of analytics in your device settings.

14

Changes to this policy

Material changes will be announced with at least 30 days' notice.