Trust
Data Security
In plain language
- We will never ask for your OTP, password or bank details — not in chat, not on a call, not by SMS. Anyone who does is not us.
- UpadhiSetu handles no money. There is no payment, wallet or commission feature, so we hold no card or bank data at all.
- Your data is encrypted in transit and where it is stored.
- Your phone number stays private until you and the other person agree to work together.
- We never sell your data and use no advertising trackers.
Contents
1. What we protect 2. Encryption 3. Signing in to your account 4. Who can see your information 5. How the app is built to be safe 6. Where your data is stored 7. What we will never ask you for 8. Staying safe on UpadhiSetu 9. Reporting a security problem 10. If something goes wrong 11. Your control over your data 12. Contact01What we protect
UpadhiSetu holds the information you give us to find or offer work: your phone number, name, date of birth, location, skills, and the photos, work posts, messages and ratings you create. What we collect and why is set out in full in our Privacy Policy.
Just as important is what we do not hold. UpadhiSetu is an introduction service and handles no money. There is no payment, escrow, wallet or commission feature. We therefore store no card numbers, no bank account details and no UPI credentials. We also do not collect Aadhaar, PAN or any other government identifier, and we do not collect biometrics or read your contacts.
The safest data is data we never collect.
02Encryption
Everything the app sends to us travels over an encrypted connection (HTTPS/TLS). Nobody sharing your Wi-Fi or mobile network can read it in transit.
Where your data is stored, it is encrypted at rest using AES-256 by our infrastructure provider, Google Cloud. Encryption keys are managed by Google, not held inside the app.
03Signing in to your account
You sign in with your mobile number and a one-time code. We do not use passwords, so there is no password for you to lose or for us to leak.
Sign-in is handled by Google Firebase Authentication, an established identity service. Sessions are managed by that service, and the app is registered with the certificates required for verification to work correctly on the Play Store build.
04Who can see your information
| Other users, before a match | Your first name, ratings and general area only. Not your phone number. |
|---|---|
| The other person, after an application is accepted | Your phone number, so you can arrange the work |
| Your team members' details | Held internally. A poster sees only the team lead and the team size |
| Our support and moderation staff | Account details and, where needed to investigate a report, chat content |
| Advertisers and data brokers | Never. We do not sell or share your data for advertising |
Access by our staff is restricted to accounts holding an explicit administrator permission, checked on our servers rather than in the browser, and limited to what each role needs.
05How the app is built to be safe
Some of this is technical, but the principle is simple: the app on your phone is never trusted to decide what is allowed. Every change to your data is checked again on our servers before it is saved.
- Server-side checks. Posting work, applying, rating and editing all run through server code that re-verifies who you are and whether you are permitted to do it.
- Locked-down database rules. The app cannot write directly to our database. Rules restrict what any signed-in person can read to their own information and what they legitimately need to see.
- Ratings cannot be faked. A rating is only accepted from someone who was actually on that job, and only after the work is marked complete. You cannot rate yourself.
- Repeat-safe actions. If your connection drops mid-action, retrying cannot duplicate a post, an application or a rating.
- No advertising or tracking SDKs. The app contains no third-party advertising or analytics trackers.
06Where your data is stored
UpadhiSetu runs on Google Firebase and Google Cloud. Our infrastructure provider maintains independent security certifications including ISO/IEC 27001, SOC 1/2/3 and ISO/IEC 27018.
Some processing takes place on Google servers outside India. This is permitted under India's Digital Personal Data Protection Act, 2023, and the protections described on this page apply wherever your data is processed. Our sub-processors are listed in the Privacy Policy.
07What we will never ask you for
UpadhiSetu will never ask for
- Your OTP or verification code — not by call, SMS, chat or in person
- Your password for any service
- Your bank account, card, UPI PIN or any payment detail
- A fee, deposit or registration charge to get work. UpadhiSetu is free and takes no commission
- Your Aadhaar, PAN or other government ID
If anyone contacts you claiming to be from UpadhiSetu and asks for any of the above, it is a scam. Do not share it. Contact us immediately on +91 8559889888.
08Staying safe on UpadhiSetu
- Keep the conversation in the app until you have agreed to work together. In-app chat can be reviewed if you report a problem; a private WhatsApp message cannot.
- Agree the wage and hours before starting. UpadhiSetu is not a party to your agreement and does not handle payment between you.
- Meet in a public place where possible, and tell someone where you are going.
- Be wary of anyone who will not meet or speak by phone, or who pressures you to pay anything up front.
- Report and block. Use the report option, or contact support, and we will investigate.
09Reporting a security problem
If you believe you have found a security vulnerability in UpadhiSetu, we want to hear from you, and we will not take legal action against anyone who reports a genuine issue in good faith.
| support@upadhisetu.com with the subject Security | |
| Phone | +91 8559889888 |
| Acknowledgement | Within 2 working days |
| Please include | What you found, the steps to reproduce it, and the impact |
Please give us a reasonable opportunity to fix the issue before disclosing it publicly, and please do not access, modify or delete data belonging to other people while investigating.
10If something goes wrong
No system is perfect. If a security incident affects your personal data, we will investigate it, take steps to contain it, notify the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023, and tell affected users what happened, what it means for them, and what we are doing about it.
11Your control over your data
You can view and correct your profile in the app at any time. You can ask us to delete your account and personal data by contacting us — see the Privacy Policy for the full description of your rights under the Digital Personal Data Protection Act, 2023, and how to exercise them.
12Contact
| Security reports | support@upadhisetu.com — subject Security |
|---|---|
| Privacy and data rights | support@upadhisetu.com |
| Support | +91 8559889888 |
| Support hours | Monday to Saturday, 9:00 AM – 6:00 PM IST |