Privacy Policy - AXIALUP

1. Information We Collect

We collect the following types of information to provide and improve our services:

A. Personal Information (Provided by You)

Data Type	Examples	Purpose
Identity Data	Name, date of birth, gender	Account creation, KYC compliance
Contact Data	Mobile number, email, address	Communication, delivery, notifications
LPG Consumer Data	LPG Consumer ID, distributor details	Booking processing, agency management
Payment Data	Card last 4 digits, UPI ID, transaction history	Payment processing (encrypted)
Account Credentials	Username, password (hashed)	Secure login, authentication

B. Automatically Collected Information

Device Information: Device ID, IMEI, model, operating system, browser type
Location Data: GPS coordinates, IP-based location (for fraud prevention and service optimization)
Usage Data: Pages visited, features used, time spent, click patterns
Log Data: IP address, timestamps, API calls, error logs
Cookies & Tracking: Session cookies, analytics cookies, preference settings

                    Fraud Prevention Data: We collect Device ID, geolocation coordinates (latitude/longitude), and transaction patterns to detect and prevent fraudulent activities, bulk booking abuse, and unauthorized access.
                

2. How We Use Your Information

We use collected information for the following purposes:

Service Delivery & Operations

Processing LPG bookings, bill payments, and recharge transactions
Communicating booking confirmations, delivery updates, and transaction receipts
Managing user accounts, authentication, and access control
Providing customer support and resolving complaints
Coordinating with LPG distributors, BBPS operators, and service providers

Security & Fraud Prevention

Detecting and preventing fraudulent transactions and account misuse
Verifying user identity and payment instruments
Monitoring for suspicious patterns (device fingerprinting, geolocation anomalies)
Enforcing Terms & Conditions and platform policies

Analytics & Improvement

Analyzing user behavior to improve platform features and UX
Generating reports, insights, and performance metrics
Testing new features and conducting A/B experiments
Optimizing delivery routes and agency performance

Marketing & Communication (with Consent)

Sending promotional offers, discounts, and service updates via SMS/email/WhatsApp
Personalized recommendations based on transaction history
Seasonal campaigns and festive offers

You can opt-out of marketing communications at any time via account settings or unsubscribe links.

Legal & Regulatory Compliance

Complying with applicable laws, regulations, and legal processes
Responding to government/law enforcement requests
Defending legal claims and enforcing our rights
Maintaining records as required under Indian financial regulations

3. Information Sharing & Disclosure

We do NOT sell, rent, or trade your personal information for profit.

We may share your data in the following circumstances:

With Service Providers (for Service Delivery)

LPG Distributors: Name, mobile, LPG ID, delivery address (for booking fulfillment)
BBPS Operators & Utility Companies: Bill account details, payment amounts
Payment Gateways: Payment instrument details (tokenized/encrypted)
SMS/Email Providers: Mobile number, email (for OTP and notifications)
Cloud Hosting Providers: Server infrastructure (data stored securely)

With Business Partners (Authorized Third Parties)

Analytics platforms (Google Analytics, Mixpanel) for usage insights
Marketing automation tools (for campaign management, with consent)
Customer support tools (for ticket management)

Data Processing Agreements: All third parties are contractually bound to maintain confidentiality and use data only for specified purposes.

Legal & Regulatory Disclosure

To comply with court orders, subpoenas, or legal obligations
To protect our rights, property, or safety
To prevent fraud, security threats, or illegal activities
In connection with corporate transactions (merger, acquisition, asset sale)

                    Your Control: You can request details of third parties with whom your data has been shared by contacting raviraj@axialup.in
                

4. Data Security Measures

We implement industry-standard security practices to protect your information:

Encryption: SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest
Access Control: Role-based access control (RBAC), multi-factor authentication for admin panels
Payment Security: PCI-DSS compliant payment processing, tokenization of card data
Firewall Protection: Network firewalls, intrusion detection systems (IDS)
Regular Audits: Security assessments, vulnerability scanning, penetration testing
Database Security: Encrypted MongoDB databases, regular backups, disaster recovery
Password Hashing: Bcrypt hashing for user passwords (irreversible)
Session Management: Secure session tokens, auto-logout on inactivity

                    Your Responsibility: Keep your login credentials confidential. Do not share OTPs, passwords, or account access with anyone. Enable two-factor authentication if available. Report suspicious activity immediately to support@axialup.in
                

Limitations: While we strive for maximum security, no system is 100% secure. We cannot guarantee absolute protection against cyberattacks, data breaches, or unauthorized access beyond our control.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Cookie Type	Purpose	Duration
Essential Cookies	Login sessions, authentication, security	Session (deleted on logout)
Functional Cookies	Remembering preferences, language settings	Persistent (30-365 days)
Analytics Cookies	Usage tracking, performance monitoring	Persistent (90-365 days)
Marketing Cookies	Personalized ads, campaign tracking (with consent)	Persistent (90-180 days)

Managing Cookies: You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

Third-Party Cookies: Google Analytics, Facebook Pixel, and other tools may set their own cookies. Refer to their privacy policies for details.

6. Data Retention & Deletion

How Long We Keep Your Data:

Data Category	Retention Period	Reason
Active Account Data	Duration of account + 3 years	Service delivery, support, compliance
Transaction Records	7 years from transaction date	Financial regulations, audits, disputes
Communication Logs	2 years	Customer support, quality assurance
Marketing Consent	Until withdrawal of consent	Campaign management
Backup Data	90 days (rolling)	Disaster recovery, data restoration

Account Deletion & Data Removal

You have the Right to Deletion under applicable data protection laws. To request account deletion:

Send an email to raviraj@axialup.in with subject "Account Deletion Request"
Include your registered mobile number and email for verification
We will process your request within 30 days

Post-Deletion:

Your personal data will be permanently deleted from active databases
Transaction records will be anonymized (retained for compliance)
Backup copies will be deleted within 90 days
You will receive confirmation via email once deletion is complete

                    Exception: We may retain certain data if required by law, legal proceedings, fraud investigations, or pending dispute resolution.
                

7. Your Rights & Choices

You have the following rights regarding your personal information:

Right to Access: Request a copy of your personal data we hold
Right to Rectification: Correct inaccurate or incomplete information
Right to Erasure: Request deletion of your data (subject to legal obligations)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Withdraw Consent: Opt-out of marketing communications or data processing
Right to Object: Object to processing based on legitimate interests
Right to Lodge a Complaint: File complaints with data protection authorities

How to Exercise Your Rights:

Email: raviraj@axialup.in
Subject: "Data Privacy Request - [Your Request Type]"
Include: Registered mobile/email for identity verification
Response Time: Within 30 days of request

8. Children's Privacy

AXIALUP services are not intended for children under 18 years of age.

We do not knowingly collect personal information from minors. If you are a parent/guardian and believe your child has provided us with personal data, please contact us immediately at raviraj@axialup.in

Upon verification, we will delete such information from our systems within 7 days.

9. International Data Transfers

Your data is primarily stored and processed within India. However, some service providers (cloud hosting, analytics tools) may process data in other jurisdictions.

Cross-Border Transfers: When data is transferred outside India, we ensure:

Adequate data protection measures equivalent to Indian standards
Contractual safeguards (Standard Contractual Clauses)
Compliance with destination country's data protection laws

Major service providers operating globally: Amazon Web Services (AWS), Google Cloud Platform, MongoDB Atlas.

10. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

Our services, features, or business operations
Data protection laws and regulations
Industry best practices and security standards

Notification of Changes:

Material changes will be notified via email, SMS, or in-app notification
Updated policy will be posted on axialup.in with revision date
Continued use after updates constitutes acceptance

Effective Date: May 04, 2026

11. Contact Us

For privacy-related questions, concerns, or requests, contact us at:

Privacy Officer: Ravi Raj

Email: raviraj@axialup.in

General Support: support@axialup.in

Company: AXIALUP (OPC) PRIVATE LIMITED

CIN: U72200BR2022OPC060903

Registered Office: Sitamarhi, Bihar, India

We are committed to protecting your privacy and will respond to all inquiries within 7 working days.