This Privacy Policy applies to all users of the UpaayaX platform — including Service Seekers, Service Providers, and visitors. By using UpaayaX, you agree to the practices described herein. This policy complies with applicable laws of Nepal and best practices for data protection. If you have questions, please contact us at privacy@upaayax.com.
Information We Collect
Personal Information
When you register on UpaayaX, we collect your name, email address, phone number, and location data. Service Providers additionally provide identity documents, professional certifications, and banking details for payment processing.
Usage Data
We automatically collect information about how you interact with our platform — including pages visited, services browsed, booking history, search queries, IP address, browser type, and device information.
Communication Data
Messages exchanged between Seekers and Service Providers through our platform, reviews, ratings, and any support communications you send us are stored securely.
How We Use Your Information
Service Delivery
We use your data to match you with suitable service providers, process bookings, handle payments via Khalti and eSewa, and facilitate real-time communication between parties.
Platform Improvement
Your usage patterns help us improve our recommendation algorithms, detect fraudulent activity, resolve disputes, and enhance the overall user experience on UpaayaX.
Communications
We send booking confirmations, status updates, promotional offers (with your consent), and important security alerts related to your account.
Information Sharing
Between Users
When you book a service, your name, contact number, and service address are shared with the assigned Service Provider. Provider profiles including ratings and certifications are visible to Seekers.
Payment Processors
Payment information is shared with Khalti and eSewa solely to complete transactions. We do not store your full card or wallet credentials on our servers.
Legal Requirements
We may disclose your information when required by Nepalese law, court orders, or to protect the safety and rights of our users and the public.
Data Security
Encryption
All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive information such as passwords are hashed using industry-standard algorithms.
Access Controls
Your personal data is accessible only to authorized UpaayaX personnel who require it to operate the platform. We conduct regular security audits and vulnerability assessments.
Incident Response
In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate steps to mitigate harm in accordance with applicable regulations.
Your Rights
Access & Correction
You may access, review, and update your personal information at any time through your account settings. If you find inaccuracies, you have the right to request corrections.
Data Portability
You can request a copy of all personal data we hold about you in a structured, machine-readable format by contacting our support team.
Opt-Out
You may unsubscribe from marketing communications at any time. Note that transactional messages related to your bookings and account security cannot be disabled.
Data Retention & Deletion
Retention Period
We retain your personal data for as long as your account is active. Transaction records are retained for 7 years as required by Nepalese financial regulations.
Account Deletion
When you delete your account, we remove your personal information within 30 days. Anonymized usage data may be retained for analytical purposes.
Inactive Accounts
Accounts inactive for 24 consecutive months may be archived. We will notify you via email before taking any archival action.
Children's Privacy
UpaayaX is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will immediately deactivate their account and delete associated data.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will notify registered users via email and display a notice on the platform at least 14 days before the changes take effect.
Have Privacy Questions?
Our dedicated privacy team is here to help. Reach out and we'll respond within 2 business days.