Privacy Policy

1. Introduction

Naksha (naksha.social) is a social connection and compatibility platform operated by Upsurge Labs Pte. Ltd., a company incorporated in Singapore ("Company," "we," "us," or "our"). This Privacy Policy describes how we collect, use, process, store, share, and protect your personal data when you access or use the Naksha website, iOS application, Android application, and any related services (collectively, the "Service").

This policy applies to all users of the Service worldwide, regardless of how you access it — whether through our website, mobile application, or any future platform we may offer. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Service immediately.

We are committed to processing your personal data lawfully, fairly, and transparently. Where this policy references specific legal frameworks — including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Singapore Personal Data Protection Act (PDPA) — those provisions apply to residents of the relevant jurisdictions in addition to the general terms stated herein.

2. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set forth below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, time of birth, and place of birth.
• "Service" means the Naksha platform, including the website at naksha.social, the Naksha iOS and Android applications, the API at api.naksha.social, and any successor platforms or applications we may operate.
• "User" means any individual who accesses or uses the Service, whether or not they have created an account.
• "Ved" means Naksha's personal AI feature, which enables Users to engage in dialogue about their personality profile, insights, and compatibility.
• "Profile Data" means the computed personality profile data derived from a User's birth details. Profile Data is the output of algorithmic computation, not raw birth information.
• "Connection" means a mutual, consent-based link between two Users for the purpose of generating compatibility readings and shared personality analysis.
• "Processing" means any operation or set of operations performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, restriction, erasure, or destruction.

3. Information We Collect

We collect and process the following categories of information in connection with the Service:

Account Information. When you create a Naksha account, we collect your email address for authentication purposes. You may also provide a display name and username. We authenticate you via email one-time passcode (OTP) — we do not collect or store passwords.

Birth Details. To compute your personality profile, we collect your date of birth, time of birth, and the place of birth you select. We store the selected place and its coordinates and timezone for chart computation. Naksha does not request or collect your device's current GPS location for this purpose. These details are essential to the core functionality of the Service and are used for algorithmic computation and AI-powered analysis.

Profile Media. You may upload up to six (6) photos to your profile. Photos are stored on Cloudflare R2 object storage and are associated with your account. If you opt in to dating features, your photos are visible to other opted-in Users in the discover feed and on your profile.

Dating Profile Data. If you opt in to dating features, we collect the dating profile information you provide: your bio, city, dating intent (e.g. something serious, exploring), age range, and match preferences. Your city is selected through place search; Naksha does not request your precise device location for discovery. This information — together with your name, age, photos, and computed astrological placements — is shown to other opted-in Users in the discover feed.

Match Messages. When you match with another User and use Match Chat, we store the messages you exchange. These are human-to-human messages: they are visible to the other party, and are retained until you unmatch or delete your account. Messages may be reviewed by us if reported by a User or flagged by automated systems.

Reports Data. If you report another User, are reported, or flag a Ved response, we collect and retain the report — including the reason, the relevant accounts or AI-response identifier, and the content needed for review — for moderation, safety enforcement, service improvement, and legal compliance.

Conversational Data. When you interact with Ved, our personal AI, we store your conversation history — including your questions and Ved's responses — to provide continuity across sessions and to improve the quality and relevance of future interactions.

Journal Data. When you use Journal, we store the prompts you draw, optional follow-up selections, private entries you write, and revision metadata needed to save and synchronize them. Journal entries are private to your account. They are not shown to other Users and are not automatically sent to Ved or an AI provider.

Connection Data. When you establish a Connection with another User, we store the existence of that connection and generate compatibility analysis based on both Users' Profile Data. The mechanics of what is shared between connected Users are described in Section 9 below.

Notification Data. If you enable push notifications in a native mobile app, we process a platform-issued device or app-instance token together with your notification preferences so that we can deliver account, connection, and conversation alerts. We do not use notification tokens for advertising or cross-app tracking.

Device and Technical Data. Our infrastructure provider, Cloudflare, may passively collect certain technical information in the course of delivering the Service, including your IP address, browser type and version, operating system, and request timestamps. This data is collected at the network level for security, performance optimisation, and abuse prevention. We do not actively collect or process this data for analytics, profiling, or advertising purposes.

Data We Do Not Store. For the avoidance of doubt, we do not request or store your device's current or background GPS location. The only location coordinates we store are those associated with the birthplace you manually select for chart computation. We also do not collect device fingerprints, browsing history outside of Naksha, advertising identifiers (IDFA, GAID, or similar), contacts or address book data, biometric data, financial or payment information, or any form of cross-site or cross-app tracking data. We do not use analytics services, tracking pixels, or advertising SDKs.

4. How We Use Your Information

We process your Personal Data strictly for the following purposes:

• Profile Computation. Your birth details are used to compute your personality profile using our proprietary analysis engine.
• AI-Powered Interpretation. Computed Profile Data is transmitted to our AI providers — which may include Anthropic, OpenAI, and other leading frontier AI laboratories — to generate personalised personality insights, daily influences, and responses to your conversational queries through Ved.
• Compatibility Analysis. When you establish a Connection with another User, both Users' Profile Data is used to compute and generate compatibility readings.
• Account Management. Your email address is used to authenticate your identity via OTP, to communicate essential service-related information, and to respond to your support requests.
• Service Improvement. We may use aggregated, de-identified data to understand usage patterns and improve the accuracy and quality of the Service. We do not use individually identifiable data for this purpose without your explicit consent.
• Security and Integrity. Technical data collected by Cloudflare at the infrastructure level is used to protect the Service against abuse, unauthorised access, distributed denial-of-service attacks, and other security threats.
• Legal Compliance. We may process your data as necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

5. Artificial Intelligence & Automated Processing

Naksha uses artificial intelligence as a core component of the Service. We believe transparency about how AI processes your data is essential, and we describe our AI practices in detail here.

AI Providers. We use large language models from leading frontier AI laboratories — currently including Anthropic and OpenAI, with additional providers integrated as the Service evolves — to generate personality interpretations, conversational responses, and compatibility analyses. Each AI provider acts as a data processor on our behalf, subject to contractual obligations regarding data handling and security.

What the AI Receives. When generating readings or responding to your queries through Ved, we transmit your computed Profile Data along with your conversational messages to our AI providers' APIs. We do not transmit your email address, raw birth details, or personal information to any AI provider — only the computed profile data necessary to produce the reading.

How the AI Processes Data. Our AI providers process the data we transmit to generate a response to our API request. Provider-side handling and limited security or abuse-monitoring retention are governed by the applicable enterprise/API terms and data-processing agreements. We configure provider services so that submitted Naksha data is not used to train general-purpose models where the provider offers that contractual control.

Nature of AI Outputs. All personality readings, insights, and interpretations generated by the Service are AI-produced content. They are provided for informational and entertainment purposes. They do not constitute professional advice of any kind — whether medical, financial, legal, psychological, or otherwise. You should not rely on AI-generated content as a basis for making significant life decisions.

No Automated Decision-Making with Legal Effect. Naksha does not make any fully automated decisions that produce legal effects or similarly significant effects concerning any User. All AI processing within the Service is limited to generating personality and compatibility content and does not determine access to services, creditworthiness, employment eligibility, or any comparable outcome.

6. How Birth Data Is Processed

Your birth details pass through a three-stage processing pipeline. Understanding this pipeline clarifies what happens to your data at each step:

Stage 1 — Mathematical Computation. Your date, time, and place of birth are input into a high-precision computational engine to derive the foundational data used to build your personality profile. This computation is deterministic, purely mathematical, and runs entirely on our own infrastructure. No third party receives your birth details at this stage.

Stage 2 — Personality Analysis Engine. The computed data from Stage 1 is then processed through our proprietary analysis engine, which applies analytical rules to determine personality dimensions, behavioral patterns, and compatibility factors. This stage is also deterministic and runs entirely on our infrastructure.

Stage 3 — AI Synthesis. The structured output from Stages 1 and 2 is transmitted to a frontier AI model (such as Anthropic Claude, OpenAI GPT, or equivalent) to generate natural-language interpretations. The AI receives Profile Data (computed personality data), not your raw birth details. This stage produces the personalised readings, daily insights, and conversational responses you see in the Service.

7. Third-Party Service Providers

We engage a limited number of third-party service providers to operate the Service. Each provider receives only the minimum data necessary to perform its function:

• Cloudflare, Inc. (United States) — Provides our hosting infrastructure, including Cloudflare Pages (web hosting), Cloudflare Workers (API compute), Cloudflare D1 (database), and Cloudflare R2 (object storage). Cloudflare processes technical data (IP addresses, request metadata) at the network edge for security, performance, and content delivery. Your account data, birth details, and conversational history are stored in Cloudflare D1. Profile media is stored in Cloudflare R2.
• AI Model Providers (United States) — We use large language models from frontier AI laboratories, currently including Anthropic PBC and OpenAI, LLC, with additional providers integrated as needed. These providers receive computed Profile Data and conversational messages via API to generate personality interpretations and power the Ved conversational feature. Their handling is governed by the applicable API terms and data-processing agreements, including available controls against general-purpose model training.
• Apple Inc. (United States) — Distributes the Naksha iOS application through the App Store and provides platform notification delivery. Apple may process app-distribution and notification-delivery data under its own terms. We do not use Apple data for advertising or cross-app tracking.
• Google LLC. (United States) — Distributes the Naksha Android application through Google Play and provides Firebase Cloud Messaging for optional push notifications. Google may process a platform-issued app-instance token and delivery metadata to deliver notifications, subject to Google's own privacy and service terms. Naksha does not use Firebase Analytics, advertising services, or the Google advertising identifier.

We do not use any analytics providers, advertising networks, social media SDKs, or data brokers. We do not embed third-party tracking scripts on our website or in our application.

8. Data Sharing & Disclosure

We do not sell your Personal Data. We have never sold Personal Data and have no plans to do so. We do not share Personal Data with third parties for their own marketing or advertising purposes.

We may disclose your Personal Data only in the following limited circumstances:

• Service Providers. We share data with the third-party service providers identified in Section 7, strictly for the purposes described therein and subject to contractual data protection obligations.
• Connections. When you establish a Connection with another User, certain Profile Data is shared between you as described in Section 9. This sharing is initiated by your explicit consent.
• Legal Process. We may disclose Personal Data if required to do so by applicable law, regulation, legal process, or enforceable governmental request, including in response to a court order, subpoena, or regulatory investigation.
• Safety and Security. We may disclose Personal Data where we reasonably believe it is necessary to protect the rights, property, or safety of the Company, our Users, or the public, including to prevent fraud, enforce our Terms of Service, or address security vulnerabilities.
• Business Transfers. In the event of a merger, acquisition, reorganisation, sale of assets, or bankruptcy, your Personal Data may be transferred to the successor entity. We will provide notice of any such transfer and any changes to applicable privacy practices before your Personal Data becomes subject to a different privacy policy.

9. Connections & Compatibility Data

The Connections feature allows two Users to link their accounts for the purpose of generating compatibility readings. Given the sensitive nature of birth data, we have designed this feature with strict data boundaries:

What Connected Users Can See. When you establish a Connection, the other User may see your display name, username, profile photo, and computed Profile Data as needed to produce the compatibility analysis.

What Connected Users Cannot See. Your raw birth details — date of birth, exact time of birth, and place of birth — are never disclosed to connected Users. The compatibility analysis is generated from computed Profile Data only. A connected User cannot reverse-engineer your exact birth details from the Profile Data shared with them.

Consent and Control. Connections require mutual consent — both Users must affirmatively agree to the connection. You may remove a Connection at any time, which will revoke the other User's access to your Profile Data and remove the compatibility analysis from both accounts.

Discover Visibility. If you opt in to dating features, your dating profile — name, age, photos, bio, city, dating intent, and computed astrological placements (such as moon sign and nakshatra), together with a compatibility score and verdict — is shown to other opted-in Users in the discover feed. Your raw birth details are never shown. You can turn discover visibility off at any time in your profile settings, which removes you from other Users' feeds.

Match Chat. Messages you send in Match Chat are delivered to and visible to the other party. We retain match messages until you unmatch or delete your account. Unmatching closes the conversation for both parties. Reported messages may be reviewed by our moderation processes as described in our Terms of Service.

10. International Data Transfers

Naksha is operated by Upsurge Labs Pte. Ltd. in Singapore. However, the Service relies on infrastructure and service providers that process data in multiple jurisdictions:

• Cloudflare operates a global edge network. Your data may be processed at any of Cloudflare's data centres worldwide, including locations in the United States, Europe, and Asia-Pacific, depending on your geographic proximity and network routing.
• AI Providers (including Anthropic and OpenAI) are based in the United States. Profile Data and conversational messages transmitted to these providers for AI processing are processed in the United States.

Where Personal Data is transferred from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we rely on appropriate safeguards, including standard contractual clauses approved by the European Commission and equivalent mechanisms recognised under applicable law. Cloudflare and our AI providers each maintain data processing agreements that incorporate such safeguards.

By using the Service, you acknowledge that your data may be processed in jurisdictions with data protection laws that differ from those in your country of residence.

11. Data Retention

We retain your Personal Data for as long as your account remains active or as needed to provide you with the Service. Specific retention practices are as follows:

• Account and Birth Data. Retained for the duration of your account. Upon account deletion, your account data, birth details, Profile Data, and profile media are permanently deleted from our active databases within thirty (30) days.
• Photos and Dating Profile Data. Retained while your account is active. Photos you remove are deleted from storage. Upon account deletion, all photos and dating profile data (bio, city, intent, preferences) are permanently deleted within thirty (30) days.
• Match Messages. Retained until you unmatch or delete your account. Upon unmatch, the conversation is closed for both parties; upon account deletion, your match messages are permanently deleted within thirty (30) days. Messages that are the subject of an active safety report may be retained longer as needed for moderation and legal compliance.
• Reports Data. User-safety and AI-response reports are retained as long as necessary for moderation, enforcement, service-safety review, and legal compliance, including after the reporting account is deleted where a legitimate safety or legal need remains.
• Conversational Data. Ved conversation history is retained for the duration of your account to provide continuity across sessions. Upon account deletion, all conversational data is permanently deleted within thirty (30) days.
• Journal Data. Journal prompts, optional follow-up selections, private entries, and revision metadata are retained while your account is active so they can be saved and synchronized. Deleting an individual entry removes it from the active service. Upon account deletion, remaining Journal Data is permanently deleted from active databases within thirty (30) days, subject to the backup and legal-retention limits below.
• Connection Data. Upon disconnection or account deletion, compatibility analyses and connection records are removed within thirty (30) days.
• Technical Logs. Server-level logs generated by Cloudflare (including IP addresses and request metadata) are retained by Cloudflare in accordance with their own data retention policies, typically for a limited period not exceeding ninety (90) days.
• Legal and Compliance Retention. Notwithstanding the foregoing, we may retain certain data for longer periods where required by applicable law, regulation, or legal process, or where necessary to establish, exercise, or defend legal claims.

Deleted data may persist in encrypted backups for a limited period before being permanently purged. During this period, such data is not accessible through the Service and is not used for any purpose other than backup integrity.

12. Data Security

We implement technical and organisational measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security). API requests, authentication exchanges, and data transfers to third-party providers are all conducted over encrypted channels.
• Encryption at Rest. Data stored in Cloudflare D1 and Cloudflare R2 is encrypted at rest using Cloudflare's storage encryption mechanisms.
• No Stored Credentials. We do not store passwords. Authentication is performed exclusively via email one-time passcode (OTP), which eliminates the risk of credential databases being compromised.
• Access Controls. Access to production data and infrastructure is restricted to authorised personnel on a need-to-know basis, secured by multi-factor authentication and role-based access controls.
• Infrastructure Security. Our infrastructure is hosted on Cloudflare's platform, which provides DDoS protection, web application firewall (WAF), bot management, and continuous security monitoring at the network edge.
• Incident Response. In the event of a data breach that affects your Personal Data, we will notify affected Users and relevant supervisory authorities within the timeframes required by applicable law.

While we take commercially reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

13. Cookies & Local Storage

We do not use tracking cookies. Naksha does not set any first-party or third-party cookies for the purpose of analytics, advertising, user profiling, or cross-site tracking.

We use a localStorage authentication token after you sign in, solely to maintain your authenticated session. We also use standard browser HTTP caching and Cache Storage for image files that your device has already displayed. This media cache stores the original image responses without modification so that repeat visits load quickly; it is not used for tracking, advertising, or cross-site profiling.

Profile-media caches are cleared when you sign out. Decorative artwork may remain in the browser cache until the browser evicts it or you clear site data. Because these mechanisms are strictly necessary for authentication and efficient delivery of requested media, they fall within the applicable essential-storage exemptions.

You may clear Naksha's browser storage or site data at any time. Clearing authentication storage signs you out; you can sign back in by requesting a new OTP.

14. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights with respect to your Personal Data:

• Right to Access. You have the right to request a copy of the Personal Data we hold about you, including your account information, birth details, Profile Data, and conversational history.
• Right to Rectification. You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may also update your birth details and profile information directly within the Service.
• Right to Erasure. You have the right to request deletion of your Personal Data ("right to be forgotten"). Upon receiving a valid erasure request, we will delete your account and all associated data within thirty (30) days, subject to any overriding legal obligations to retain certain data.
• Right to Data Portability. You have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit that data to another controller without hindrance from us.
• Right to Restrict Processing. You have the right to request that we restrict the processing of your Personal Data in certain circumstances, such as while we verify the accuracy of your data or assess a valid objection.
• Right to Object. You have the right to object to the processing of your Personal Data where we rely on legitimate interest as the legal basis, or where your data is processed for direct marketing purposes (though we do not engage in direct marketing).
• Right to Withdraw Consent. Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

How to Exercise Your Rights. To exercise any of the rights described above, please contact us at support@naksha.social. We will verify your identity before processing your request. We will respond to valid requests within thirty (30) days of receipt. If we require additional time due to the complexity or volume of your request, we will notify you of the extension and the reasons for it.

You will not be charged a fee for exercising your rights, except where requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

15. Age Restriction & Minors

Naksha is a dating platform and is strictly limited to individuals who are at least eighteen (18) years of age (or the age of majority in their jurisdiction, whichever is greater). The Service is not directed to minors, and we do not knowingly collect Personal Data from anyone under 18. If you are under 18, you may not create an account or use the Service.

If we become aware that we have collected Personal Data from an individual under 18, we will terminate the account and take immediate steps to delete that information from our servers, subject to safety and legal preservation duties. If you believe that a minor has provided us with Personal Data, please contact us at support@naksha.social, and we will investigate and take appropriate action promptly. Our complete public standards are available on the Community and Child Safety Standards page.

16. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, "CCPA") provide you with specific rights regarding your Personal Information. This section supplements the general disclosures in this Privacy Policy.

Categories of Personal Information Collected. In the preceding twelve (12) months, we have collected the following categories of Personal Information as defined by the CCPA:

• Identifiers: email address, display name, username, IP address.
• Personal Information under Cal. Civ. Code § 1798.80(e): name (if provided as display name), date of birth.
• Internet or Other Electronic Network Activity Information: browser type, request timestamps, interactions with the Service (limited to Cloudflare's passive collection as described in Section 3).
• Inferences: Profile Data and personality insights derived from birth details.

Sale and Sharing of Personal Information. We do not sell your Personal Information. We have not sold Personal Information in the preceding twelve (12) months. We do not share Personal Information with third parties for cross-context behavioural advertising.

Your California Privacy Rights. Under the CCPA, you have the right to:

• Know what Personal Information we collect, use, disclose, and sell (if applicable).
• Delete your Personal Information, subject to certain exceptions.
• Opt-Out of Sale — not applicable, as we do not sell Personal Information.
• Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, a different quality of service, or be denied service for exercising your rights.
• Correct inaccurate Personal Information that we hold about you.
• Limit Use of Sensitive Personal Information — we use sensitive Personal Information (date and time of birth) only as necessary to provide the Service, which falls within the permissible use exceptions under the CPRA.

To exercise your rights, contact us at naksha@upsurge.io. We will verify your identity using information associated with your account. You may also designate an authorised agent to make a request on your behalf, subject to appropriate verification.

17. European Economic Area Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national implementing legislation provide you with additional rights and protections. This section supplements the general disclosures in this Privacy Policy.

Legal Bases for Processing. We process your Personal Data under the following legal bases:

• Consent (Article 6(1)(a)). You provide affirmative consent when you create an account and submit your birth details. You may withdraw consent at any time, as described in Section 14.
• Contractual Necessity (Article 6(1)(b)). Processing your birth details, Profile Data, and conversational data is necessary for the performance of our contract with you — specifically, to provide the personality and compatibility service you have requested.
• Legitimate Interest (Article 6(1)(f)). We rely on legitimate interest for security-related processing (fraud prevention, abuse detection, infrastructure protection) and for limited service improvement using aggregated, de-identified data. We have conducted balancing tests to ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Legal Obligation (Article 6(1)(c)). We may process certain data where necessary to comply with a legal obligation to which we are subject.

Additional EEA Rights. In addition to the rights described in Section 14, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that our processing of your Personal Data violates the GDPR.

Data Protection Officer. Given the nature and scale of our data processing activities, we have not appointed a formal Data Protection Officer. For all data protection inquiries, please contact us at naksha@upsurge.io.

18. Singapore Personal Data Protection Act (PDPA)

As a company incorporated in Singapore, Upsurge Labs Pte. Ltd. is subject to the Personal Data Protection Act 2012 (PDPA). We comply with the PDPA's obligations regarding the collection, use, disclosure, and care of Personal Data.

• Consent. We collect and use your Personal Data with your informed consent, which you provide when you create an account and submit your birth details. You may withdraw consent at any time by contacting us, subject to legal or contractual restrictions and reasonable notice.
• Purpose Limitation. We collect and use your Personal Data only for the purposes identified in this Privacy Policy. We will not use your data for any new purpose without obtaining your fresh consent, unless otherwise permitted under the PDPA.
• Access and Correction. You have the right to request access to your Personal Data held by us and to request correction of any errors or omissions. We will respond to such requests within thirty (30) days.
• Protection. We implement reasonable security arrangements to protect your Personal Data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.
• Retention Limitation. We retain your Personal Data only for as long as necessary for the purposes for which it was collected, or as required by law.
• Transfer Limitation. Where your Personal Data is transferred outside of Singapore (as described in Section 10), we ensure that the receiving organisation provides a comparable standard of protection as required under the PDPA.

For inquiries or complaints regarding our compliance with the PDPA, please contact us at naksha@upsurge.io. You may also contact the Personal Data Protection Commission (PDPC) of Singapore.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make changes, we will update the "Last updated" date at the top of this page and publish the revised policy at naksha.social/privacy.

Material Changes. For changes that materially affect how we collect, use, or share your Personal Data — including changes to the categories of data collected, the introduction of new third-party processors, or changes to your rights — we will provide prominent notice via email to the address associated with your account at least fifteen (15) days before the changes take effect.

Non-Material Changes. For minor changes, such as corrections of typographical errors, formatting updates, or clarifications that do not alter the substance of our data practices, we will update this page without separate notice.

Your continued use of the Service after the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Service and request deletion of your account.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your rights, please contact us:

Email: naksha@upsurge.io

Upsurge Labs Pte. Ltd.
Singapore

We endeavour to respond to all inquiries within thirty (30) days of receipt.