Privacy Policy – JPGPay Guide Website

The JPGPay Editorial Team operates jpgpay.org.in as an independent educational guide about the JPGPay P2P token trading platform. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary — the entity that determines the purpose and means of processing any personal data collected through this website.

• Website: jpgpay.org.in
• Operated by: JPGPay Editorial Team
• Location: India
• Contact Email: contact@jpgpay.org.in
• Purpose: Educational guides about the JPGPay app — download steps, registration, trading, safety, and referral program documentation

This privacy policy applies only to the website jpgpay.org.in. It does not govern the JPGPay mobile application (which has its own privacy policy published by the app developer) or any third-party sites we link to.

A. Information You Voluntarily Give Us

We collect only what you choose to share through direct contact:

• Contact form submissions: Your name, email address, and the content of your message when you use the Contact Us page.
• Direct email correspondence: Your email address and message content when you write to us at contact@jpgpay.org.in.

B. Information Collected Automatically

When you visit jpgpay.org.in, your browser transmits standard technical data to our servers:

• IP address: Your device's public IP address, transmitted automatically with every web request.
• Browser user agent: Your browser type, version, and operating system.
• Referrer URL: The page you visited before arriving on our site.
• Device type and screen resolution: Transmitted by your browser to help serve the page correctly.
• Pages visited and time spent: Used in aggregate to understand which content is most useful to our readers.

C. What We Do NOT Collect

We are transparent about what stays off our records entirely:

• Government-issued IDs — Aadhaar, PAN, passport, or voter ID
• Financial information — bank account numbers, UPI PINs, or payment card details
• Biometric data of any kind
• Your precise GPS or real-time location data
• Cross-site browsing behaviour through third-party tracking cookies
• Health, religious, or caste-related information

Personal data reaches us through three channels:

• Direct interactions: When you submit the contact form, send us an email, or correspond with us in any other way.
• Automated browser transmission: Standard technical data — IP address, browser type, referrer — is transmitted automatically when your browser connects to our server. This is a standard feature of how the internet works, not a tracking mechanism we have added.
• Third-party services: Our website loads fonts from Google Fonts servers. When your browser connects to Google's servers to download these fonts, Google may receive your IP address. This is described in full in Section 7.

We use personal data only for the specific purposes listed below. We never process data for any purpose beyond what is described here:

Contact Form and Email Data (Name, Email, Message)

• To respond to your query, feedback, or correction report
• To provide information about the JPGPay platform that you have requested
• To follow up if your initial message required further investigation
• Legal basis: Your consent (given when you contact us) and our legitimate interest in responding to reader communications

IP Address and Technical Data

• To serve website content to your browser
• To maintain the security and stability of our servers
• To understand aggregate usage patterns so we can improve our guides
• Legal basis: Legitimate interest in operating and securing our website

Google Fonts Data

• To display consistent typography across all pages on all devices
• Legal basis: Legitimate interest in providing a readable, well-rendered website experience

We do not use your personal data for automated decision-making, profiling, targeted advertising, or any purpose not listed above.

jpgpay.org.in uses minimal cookies and tracking. Here is the full picture:

• No analytics cookies: We do not use Google Analytics, Facebook Pixel, Hotjar, or any other third-party analytics service that sets cookies on your device.
• No advertising cookies: We do not display advertisements and we do not use ad-serving technology on this website.
• No login or session cookies: This website has no user accounts or login system, so no session authentication cookies are set.
• Google Fonts: When your browser loads fonts from fonts.googleapis.com and fonts.gstatic.com, your IP address is transmitted to Google's servers. Google Fonts does not set persistent tracking cookies.
• Standard HTTP data: IP addresses and user agent strings are transmitted as part of every HTTP request to our server. This is a technical feature of internet communication, not a cookie-based tracking system.

If we add any cookie-based services in the future, we will update this policy and seek your consent where required by the DPDP Act 2023 before setting those cookies.

We do not sell, trade, rent, or share your personal data with third parties for commercial purposes. We share data only in these strictly limited circumstances:

• Web hosting and CDN providers: Our website is hosted on servers that process IP addresses and technical data to deliver pages to your browser. These providers operate under contractual obligations to handle data securely and only for the purposes we specify.
• Legal requirements: We may disclose personal data if compelled by a valid court order, a lawful request from Indian law enforcement, or a regulatory authority. We will disclose only the minimum data required.
• Protection of rights: We may share data to protect our legal rights, prevent fraud, or respond to a reported security incident affecting our users or infrastructure.
• Your explicit consent: In any other situation, we will seek your clear, informed consent before sharing your data with anyone.

We do not transfer personal data outside India for processing. All infrastructure and service providers we engage operate within India or through channels that meet Indian data protection standards.

jpgpay.org.in integrates with one external service that may process a limited amount of your technical data:

Google Fonts (fonts.googleapis.com / fonts.gstatic.com)

We load the Poppins typeface from Google Fonts to ensure consistent text rendering on all devices. When your browser requests these font files, your IP address and browser user agent are transmitted to Google's servers as part of the standard HTTP request. Google may log this data in accordance with its own privacy policy.

• Google Fonts does not set cookies or track you across websites
• We use Google Fonts for typography only — not for analytics or advertising
• You can review Google's privacy practices at policies.google.com/privacy

Web Hosting Provider (Hostinger)

Our website is hosted on Hostinger servers. Hostinger processes standard server log data — including IP addresses, request timestamps, and page URLs — as part of normal hosting operations. This data is used to serve the website and to maintain server security.

Beyond these two services, jpgpay.org.in does not integrate any other third-party scripts, trackers, ad networks, or data processors.

We retain personal data only as long as it is needed for the purpose it was collected:

• Contact form and email data: Retained for up to 12 months after your query is resolved, in case follow-up is required. After that, correspondence is permanently deleted.
• Server log data (IP address, user agent, referrer): Retained for up to 30 days for security and operational purposes, then automatically purged.
• Aggregated, anonymised usage data: May be retained indefinitely as it cannot be linked to any individual.

When data is no longer needed for its stated purpose, we delete it permanently. We do not archive personal data "just in case".

The Digital Personal Data Protection Act, 2023 grants you the following rights regarding personal data we hold about you:

To exercise any of these rights, email us at contact@jpgpay.org.in with your name, the right you wish to exercise, and sufficient detail for us to identify your data. We will respond within 30 days as required by the DPDP Act.

jpgpay.org.in is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. P2P token trading involves financial risk and requires adult judgment — it is not appropriate for those under 18.

If you are a parent or guardian and believe your child has submitted personal data to this website, please contact us at contact@jpgpay.org.in. We will promptly review and delete such data upon verification.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• HTTPS encryption: All data transmitted between your browser and our server is encrypted using TLS/SSL.
• Minimal data collection: We collect only the data we actually need. The less we hold, the less that can be compromised.
• Access restriction: Personal data from contact forms and emails is accessed only by the team member handling your query.
• No third-party ad networks: We do not allow advertising networks or data brokers to place tracking code on our website.
• Regular review: We review our data handling practices at least quarterly to ensure they remain appropriate and up to date.

No system is completely secure. While we work hard to protect your data, we cannot guarantee that our measures will prevent every possible breach. If a breach affecting your data occurs, we will notify you as required by applicable law.

jpgpay.org.in contains links to third-party sites — including the JPGPay Telegram channel and the JPGPay app download page. These links are provided for your convenience only. Once you leave jpgpay.org.in, this privacy policy no longer applies.

We are not responsible for the privacy practices, content, or security of external websites. Before sharing personal information on any third-party site, we encourage you to read that site's privacy policy carefully.

We may update this privacy policy from time to time to reflect changes in our data practices, the JPGPay platform, or applicable Indian law. When we make changes, we update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we use your data, we will make the update visible on the website and note it prominently for at least 30 days. Your continued use of jpgpay.org.in after a policy update means you have read and accepted the revised version.

We recommend checking this page every few months to stay informed about how we handle your data.