Meteor Pay Privacy Policy – How We Collect, Use & Protect Your Data

Welcome to the official Meteor Pay Privacy Policy. Meteor Pay ("we", "our", "us") operates the Meteor Pay C2C token trading application and the official website meteorpay.in. This privacy policy explains how we collect, use, store, share and protect your personal information when you use our app, visit our website, or interact with our official support channels.

Your trust is the foundation of Meteor Pay. That is why this policy is written in simple, clear language — no hidden clauses, no confusing legal jargon. We follow the principles of India's Digital Personal Data Protection (DPDP) Act, 2023, and align with internationally recognised privacy standards wherever we operate.

By downloading the Meteor Pay app, creating an account, or using any Meteor Pay service, you agree to the practices described in this policy. If you do not agree with any part of this policy, please do not use the Meteor Pay app or website, and contact our official customer support to close your account.

We collect only the minimum information needed to run the Meteor Pay platform securely and legally. We never collect more data than necessary, and we never sell your personal information to anyone. The information we collect falls into the categories below:

2.1 Information You Provide Directly

• Account details: Your mobile phone number, chosen username, and password (stored only in encrypted form — we can never read your password).
• Registration information: Details you enter when creating your Meteor Pay account, including your name and email address if you choose to provide them.
• Transaction information: Buy/sell order details, trade amounts, token quantities, transaction IDs and dispute/appeal records.
• Support information: Messages you send through the in-app live chat and information you provide when reporting issues or scams.
• Optional KYC information: If and when KYC verification is enabled for your account, government-issued identity details and selfie verification data as required by law.

2.2 Information Collected Automatically

• Device information: Device model, operating system version, app version, unique device identifiers, and screen resolution.
• Usage information: Pages visited on meteorpay.in, in-app actions, feature usage patterns, and session durations.
• Technical logs: IP address, browser type, referral source, timestamps, and crash/error reports used purely for debugging and security.
• Location information: Approximate location derived from your IP address (city/region level only — we never track your exact GPS location).

2.3 Information We Do NOT Collect

• Your UPI PIN or bank card PIN — these are processed only by your bank/UPI provider and are never seen or stored by Meteor Pay.
• Your OTPs — OTPs are delivered by your telecom provider and verified by our system; our support team never asks for them.
• Contacts, SMS, call logs, photos or files from your phone — we never access your personal device data.
• Biometric data — unless you voluntarily enable biometric login, in which case the fingerprint is stored only on your device.

We use the information we collect only for legitimate, lawful purposes. Every use of your data is tied to a clear business need:

• To create and manage your account: Verifying your mobile number with OTP, enabling login, and keeping your profile secure.
• To process your trades: Matching buyers and sellers in the C2C token trading marketplace, recording transactions, and settling disputes through the in-app appeal system.
• To secure the platform: Detecting fraud, preventing money laundering, blocking fake accounts, and investigating scam reports.
• To provide customer support: Responding to your queries through the in-app live chat and the official Telegram channel t.me/RupeeRushGL666666.
• To send service updates: Notifying you about app updates, security patches, maintenance windows and important announcements.
• To improve our services: Analysing usage patterns (in anonymous, aggregated form) to make the app faster, safer and easier to use.
• To comply with the law: Fulfilling legal, regulatory and tax obligations applicable in India, including under the DPDP Act 2023 and the Information Technology Act, 2000.

We do not use your data for advertising to third parties, and we do not sell or rent your personal information to anyone, ever. For more about how the platform works, read the Meteor Pay Official guide.

Meteor Pay processes your personal data in compliance with India's Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011. Our legal bases for processing include:

• Consent: We collect your data after you voluntarily register and accept this privacy policy. You may withdraw consent at any time by contacting our official support.
• Contract performance: We process transaction data to execute the trades you initiate on the platform.
• Legal obligation: We retain certain records to comply with Indian financial, tax and anti-money-laundering regulations.
• Legitimate interest: We use security logs and aggregated analytics to protect the platform, its users, and our legal rights.

As a Data Fiduciary under the DPDP Act, we are committed to implementing reasonable security safeguards, honouring your data principal rights, and notifying you and the Data Protection Board in case of any personal data breach.

Like most websites, meteorpay.in uses cookies and similar technologies to improve your browsing experience and understand how visitors use our site.

5.1 What Cookies We Use

• Strictly necessary cookies: Required for the website to function correctly, such as remembering your menu preferences and security tokens.
• Performance cookies: Anonymous, aggregated data about page views and load times that help us make the site faster.
• Preference cookies: Remember settings like language and display choices.

5.2 How to Control Cookies

You can disable cookies in your browser settings at any time. Please note that blocking strictly necessary cookies may affect how the website displays. We do not use third-party advertising cookies, and we never use cookies to track you across unrelated websites.

To run the platform, Meteor Pay works with a limited set of trusted third-party service providers. We share only the minimum data required for each service, under strict data-processing agreements:

• Telegram: Our official announcements and community channel is t.me/RupeeRushGL666666. Messages you send there are governed by Telegram's own privacy policy.
• UPI / Payment providers: When you deposit or withdraw money, your UPI/bank transaction is processed by regulated Indian payment providers. They handle payment credentials; we never see or store your UPI PIN.
• Cloud hosting & security providers: We use Indian and international cloud infrastructure with data-protection safeguards to host our app and website securely.
• Analytics providers: Privacy-compliant, cookie-consent-aware analytics tools that help us understand anonymous usage patterns.

Important: We are not responsible for the privacy practices of third-party websites. Our website may contain links to third-party pages; once you leave meteorpay.in, this policy no longer applies. Always verify that you are on the official domain — meteorpay.in — before entering any personal information.

Meteor Pay never sells, rents or trades your personal information. We disclose your data only in these strictly limited circumstances:

• With your consent: When you explicitly ask us to share information with another user (for example, your public trade username in a completed transaction).
• With service providers: Trusted vendors who help us operate the platform, bound by confidentiality and data-protection contracts.
• With law enforcement: When required by a valid legal order from Indian courts, regulators or government authorities.
• In a business transition: If Meteor Pay is merged, acquired or restructured, your data may be transferred to the new entity, which will remain bound by this policy.

When you trade on the C2C marketplace, the counterparty sees only the minimum details needed to complete the trade — such as your public username and payment reference — never your password, OTP or full financial details. Read our User Safety Guide to understand exactly what information is visible during a trade.

Protecting your data is our top priority. Meteor Pay implements multiple layers of security controls aligned with ISO 27001-style best practices and India's Reasonable Security Practices Rules, 2011:

• Encryption in transit & at rest: All data moving between your device and our servers is protected with TLS 1.2+ (HTTPS). Stored sensitive data is encrypted with AES-256.
• OTP-based authentication: Every login is protected by a one-time password sent to your registered mobile number.
• No plain-text passwords: Passwords are stored only as salted, hashed values. Not even our team can read them.
• 24/7 fraud monitoring: Automated systems flag suspicious activity, fake accounts and unusual trade patterns in real time.
• Access controls: Only a small set of authorised employees can access user data, and only for legitimate support or security reasons.
• Regular audits & penetration testing: Our systems are continuously reviewed and tested for vulnerabilities by security professionals.

Despite these measures, no method of transmission over the internet is 100% secure. You also play a role: never share your OTP, password or UPI PIN with anyone, and always download the Meteor Pay APK only from meteorpay.in. If you suspect your account has been compromised, contact our official support immediately.

We keep your personal information only as long as necessary for the purposes described in this policy, or as required by Indian law:

• Active accounts: Your data is retained while your account is active and for a reasonable period after, to allow account recovery.
• Transaction records: Trade and financial records are retained for the period required by Indian tax and financial regulations (typically 5–8 years).
• Support records: Chat and support logs are retained for up to 24 months to improve service quality and resolve disputes.
• Security logs: Technical and fraud-prevention logs are retained for up to 12 months.
• Deleted accounts: When you delete your account, we erase your personal data within 90 days, except where law requires us to keep specific records.

After the retention period ends, your data is permanently and securely deleted or anonymised so it can no longer be linked to you.

As a data principal under India's DPDP Act 2023, you have clear rights over your personal information. Meteor Pay fully supports these rights:

• Right to access: Ask us for a summary of the personal data we hold about you.
• Right to correction: Update or correct inaccurate or incomplete information in your account.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to grievance redressal: Raise a complaint through our in-app support or the official Telegram channel t.me/RupeeRushGL666666.
• Right to withdraw consent: Withdraw consent for data processing at any time; this may affect your ability to use the platform.
• Right to data portability: Request a structured, machine-readable copy of data you provided to us, where technically feasible.
• Right to be informed about breaches: We will notify you and the Data Protection Board of India in case of any significant personal data breach.

To exercise any of these rights, contact us through the official Meteor Pay contact page or message the official Telegram channel. We respond to all privacy requests within 30 days, as required by law.

The Meteor Pay app and website are intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18, and under the DPDP Act 2023, verifiable parental consent is required for any data of children under 18.

If you believe a minor has provided us with personal information without parental consent, please contact us immediately through our official support and we will take prompt steps to delete the information and close the account.

Meteor Pay primarily stores data on servers located in India. Where data is processed by our cloud service providers located outside India, we ensure the transfer complies with the DPDP Act 2023 through appropriate contractual safeguards and comparable levels of protection.

If you access Meteor Pay from outside India, your information may be processed in India, and your use of the app constitutes consent to such processing in accordance with this policy and Indian law.

We may update this privacy policy from time to time to reflect changes in our services, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• We will announce the update on the official Telegram channel t.me/RupeeRushGL666666 and on meteorpay.in.
• For significant changes, we may send you an in-app notification asking you to review the new policy.

Your continued use of the Meteor Pay app or website after changes are posted means you accept the updated policy. We recommend reviewing this page periodically. Previous versions of this policy are available on request through official support.

If you have any questions, concerns or complaints about this privacy policy or how your data is handled, the Meteor Pay privacy team is here to help. Reach us through the official channels below:

For any account, login, trade or technical issue, visit our Contact Meteor Pay Official page or read the Meteor Pay Official guide first. For full legal terms, please read our Terms of Service, Disclaimer and About Us pages.