Privacy Policy

Last updated: 31 October 2026

Nobelots Gateway ("we", "us") helps merchants generate UPI QR codes and confirm payments using their own Gmail inbox. This policy explains what data we collect and how we use it.

1. Data we collect

• Account data: your name, email address, UPI ID and a hashed password.
• Transaction data: amounts, UTR / transaction IDs and timestamps of payments you create or verify.
• Gmail access token: when you connect Gmail, Google gives us an OAuth token with read-only access (gmail.readonly).

2. How we use Gmail data

We use Gmail access only to search for payment confirmation emails that match a UTR or transaction ID you ask us to verify, and to read the paid amount from that email. We do not:

• send, delete or modify your emails;
• store the contents of your emails;
• use Gmail data for advertising, or sell or share it with anyone;
• let humans read your emails, except where you ask us to for support, for security investigations, or where the law requires it.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Storage and security

Data is stored in our database over encrypted connections. Passwords are hashed and never stored in plain text. Access to production systems is restricted.

4. Your choices

• Disconnect Gmail anytime from your dashboard or from your Google account permissions. We then delete the stored token.
• Ask us to delete your account and data by contacting us.

5. Payments

Customer payments go directly to the merchant's UPI ID. We never hold, receive or move money.

6. Contact

For privacy questions or deletion requests, email us at dhairyabh21@gmail.com.