Boss Pay Privacy Policy – How Bosspay Protects Your Data

• What we collect: Your mobile number, your password, your display name, your UPI ID, and basic device/app usage data
• What we never collect: Card numbers, CVV, net-banking passwords, or your UPI PIN – we cannot see them, ever
• What we never do: Sell your data, spam you with ads, or ask for your OTP on any channel
• Payments: Bosspay is non-custodial P2P – money moves directly between users via UPI, not through us
• Your rights: Under India's DPDP Act 2023, you can access, correct, or delete your data anytime through in-app support

When you complete Boss Pay register and use the Bosspay app, the following categories of information are processed. We follow a strict "minimum necessary" rule – if a data point is not needed to run the service, we do not ask for it:

• Account data: Your +91 mobile number (this is your Bosspay ID), a password you create, and a display name you choose. No real-name KYC documents are required at registration.
• OTP verification data: A one-time code is sent to your mobile number when you Boss Pay login or register. OTPs are generated by our SMS verification provider, and the code itself is never stored on our servers beyond the short verification window.
• UPI settlement data: The UPI ID or linked account reference you provide for withdrawals and P2P settlements. This is needed so sellers can receive payments and users can withdraw earnings from ₹100–₹200 onwards.
• Transaction records: Order details, token amounts, timestamps, trade status and appeal history. These records exist to resolve disputes fairly between buyers and sellers.
• Referral data: If you share a Bosspay referral code, we track referral relationships so the 1% lifetime commission and milestone bonuses are credited correctly.
• Device & technical data: Device model, Android version, app version, crash logs and basic diagnostics – used only to fix bugs and keep the app stable on Android 5.0+ devices.
• Support conversations: Messages you send through the 24/7 in-app live chat, so our team can resolve your issue and follow up if needed.

What we do not collect: We never collect card numbers, CVV, net-banking credentials, UPI PINs, precise GPS location, or your phone's contact list. If any app claiming to be Bosspay asks for these, it is fake – report it via the User Safety Guide.

Every piece of data we process has a specific purpose tied directly to the service you asked for:

• Creating and securing your account: Your mobile number and password authenticate you during Boss Pay login; OTP verification confirms the number belongs to you
• Matching P2P trades: Order and wallet data let the platform connect buyers and sellers and release tokens at the right moment
• Settling withdrawals: Your UPI details are used to send your withdrawal (minimum ₹100–₹200) to your own bank account within 24–48 hours
• Calculating referral rewards: Referral links ensure the 1% lifetime commission and milestone bonuses reach the correct account
• Resolving disputes: Transaction records and appeal history help the in-app support team investigate a failed or pending trade within the 24-hour appeal window
• Keeping the app safe: Device and log data help detect fake accounts, bot signups, and fraud patterns such as edited-screenshot scams
• Important service updates: Critical notices about withdrawals, security or policy changes may be sent to your registered number

We do not use your data for behavioral advertising, we do not build advertising profiles, and we do not share your trading history with marketers.

This is the section most users care about most, so we answer it in full detail:

• UPI PIN: Entered only in your own UPI app (like your bank's app). Bosspay never sees it, stores it, or processes it.
• Bank credentials: Net-banking passwords, card numbers and CVVs are never requested at any point – during Boss Pay register, Boss Pay login, or withdrawal.
• OTPs: Bosspay staff and support agents will never ask for your OTP through calls, SMS, email, or Telegram. The FAQ on our main page repeats this because impersonation scams are the top risk for P2P users.
• Passwords: Stored using industry-standard one-way hashing, meaning even our own team cannot read your password.
• P2P payment flow: In a trade, the buyer pays the seller's UPI ID directly. Bosspay never holds or touches that money – we only match orders and deduct the 2%–6% completed-trade commission from the seller's settlement, as described in the fee structure.

Reminder: Anyone claiming to be "Boss Pay support" and asking for your OTP, password or UPI PIN is a fraudster. Report them immediately through in-app support.

Bosspay deliberately keeps its service stack small. Only the following categories of providers may process limited data, and only where strictly necessary:

• SMS/OTP verification providers: Deliver your registration and login OTPs. They process your number only to send the message.
• Payment/UPI infrastructure: UPI transactions are processed by banks and NPCI-regulated systems under standard UPI rules. Bosspay itself is not registered with RBI or SEBI, as disclosed in our regulatory status section.
• Telegram community: The official Boss Pay Telegram channel is operated by Telegram. Anything you post there follows Telegram's own privacy terms – never share personal or payment details in public channels.
• Web fonts: This website loads the Poppins font from Google Fonts. Standard technical requests (like your IP address) may be visible to the font provider.

We do not embed advertising networks, data brokers or analytics trackers that sell user information. If this list ever changes, we will update this page and the modified date above first.

The Bosspay website is intentionally lightweight on tracking:

• Essential storage only: Small local entries may remember interface preferences (like your menu state) so the site works smoothly
• No ad cookies: This site does not run advertising networks or cross-site tracking cookies
• No third-party analytics selling data: Basic, aggregated traffic statistics may be used to improve page speed and content – never to identify individual users

You can clear browser storage anytime from your browser settings without affecting your Bosspay app account.

Security is a shared responsibility – we do our part, and you do yours. Here is ours:

• Encrypted transport: Data between the app, website and our servers travels over encrypted connections
• Password hashing: Passwords are stored as irreversible hashes, not readable text
• OTP verification: Mobile-number verification blocks fake bulk signups
• Non-custodial design: Because Bosspay never holds user funds, there is no central pot of money to steal – a structural security advantage, explained in the platform model section
• In-app appeals: Disputed trades are reviewed by the support team instead of being settled outside the platform

Your part: Use a strong unique password, never share OTPs, download the Bosspay APK only from bosspay.com.in, and verify every UPI payment in your own bank app before releasing tokens – the full checklist is in our User Safety Guide.

We retain personal data only as long as needed:

• Active accounts: Account and transaction data is kept while your account is open
• After account closure: Records may be retained for a reasonable period to resolve pending disputes, appeals or withdrawal queries, and to meet legal record-keeping needs
• Deletion requests: Once pending trades are settled, you can request full account and data deletion through in-app support, and we will erase your personal data as far as Indian law allows

As a user in India, the Digital Personal Data Protection Act, 2023 gives you clear rights over your data on Bosspay:

• Right to access: Ask what personal data Bosspay holds about you
• Right to correction: Fix inaccurate details, such as a wrong UPI ID on your profile
• Right to erasure: Request deletion of your account and personal data after pending trades settle
• Right to withdraw consent: Stop data processing by closing your account
• Right to grievance redressal: Raise a privacy complaint through in-app support or the Contact Us page; we respond to every privacy query

To exercise any right, message in-app live chat (available 24/7) or use our website contact form. Remember: Bosspay has no public phone number by design – that is an anti-scam measure, as explained in our support section.

Boss Pay is intended for adults who can legally enter into UPI transactions and understand P2P trading risk. We do not knowingly collect data from children. If you believe a minor has created a Bosspay account, report it through in-app support and we will review and remove it.

We review this Boss Pay privacy policy monthly, in the same cycle as our main guide. When something changes – a new data category, a new third-party provider, or a new user right – we update this page and the "Last Updated" date at the bottom. Significant changes will also be announced through the app and the official Telegram channel. Continuing to use Bosspay after an update means you accept the revised policy.

For any privacy question, data request or complaint:

• Fastest channel: In-app live chat support – 24/7, and the only official support channel
• Website queries: Our Contact Us page
• Registered location: Wadi, Nagpur, India

Related pages you may find useful: the main Boss Pay guide, the Disclaimer, the User Safety Guide, and About Us.