UPCX Pay & Wallet privacy notice
Updated 8 October 2026. This notice covers the UPCX Pay & Wallet mobile application and the merchant service at upcxwallet.com.
For the current mobile app’s phone verification, contacts, chat and coupons, read the wallet privacy notice. To delete a mobile account without the app, use wallet account deletion.
Operator and contact
UPCX-PLATFORMS PTE. LTD. (Singapore UEN 201214088D), registered office: 8 Marina Boulevard, #11-01/02, Marina Bay Financial Centre, Singapore 018981. For privacy, support and deletion requests, email info@upcxwallet.com.
Your personal wallet
The personal wallet creates or imports an EVM recovery phrase on your device. The app stores it using the operating system’s protected storage and requests device authentication to use protected wallet functions. UPCX does not receive the recovery phrase or private key. Do not send either to support. You are responsible for keeping your recovery backup safe.
Public wallet addresses, balances, network identifiers, transaction hashes and signed transactions are sent to blockchain RPC providers as needed to show balances, estimate fees, submit transfers you approve and check their status. Providers can see your IP address and request details. Mainnet connections currently include PublicNode, dRPC, NodeReal and the BNB Smart Chain Defibit endpoint; test-network connections also include Tenderly. Opening an explorer, website, or sharing an address uses the service or app you select and its own privacy practices.
Blockchain transactions and addresses are public. UPCX cannot remove or change blockchain history. Wallet metadata and transaction recovery information are also kept locally. The wallet can be locked or removed through its settings; uninstalling or removing the local wallet does not erase blockchain history or a merchant account.
Merchant accounts and payments
We collect your email, password hash, contact name, business name, website, country, currency and business description to review your application and operate your account. We store account approval and security events, session and reset-token hashes, store configuration, protected API keys, payment references, amounts, deposit addresses, transaction details, collection records and payout records to provide the payment service and resolve payment issues. Passwords are stored as hashes rather than readable passwords.
The merchant service uses operator-controlled collection addresses and operator-authorized payouts. This is separate from the private keys in your personal wallet. Account access is restricted to approved merchants and authorized administrators. Cloudflare provides hosting and database infrastructure; blockchain RPC services verify payments, and exchange-rate services provide currency quotes. Necessary session cookies keep you signed in. Network services receive IP addresses and ordinary request metadata, including data used for security and rate limiting.
How we use and disclose information
We use information to provide wallet and merchant functionality, review merchant applications, maintain account security, reconcile payments, answer support requests and meet applicable legal obligations. Necessary information is processed by infrastructure and blockchain service providers and may be processed outside your country. We may disclose records when required by law or to investigate fraud, protect accounts or resolve a payment dispute. Public blockchain disclosure is inherent in an on-chain transfer.
Retention and account deletion
You can request merchant account deletion on this website without installing the app. Confirming a request closes merchant access, invalidates sessions and disables store API access. Ordinary account data is scheduled for operator-reviewed deletion after 30 days. The form lets you check a pending request using your merchant credentials. Contact info@upcxwallet.com if you cannot authenticate or need completion confirmation.
Deletion does not forfeit outstanding funds. Records needed to reconcile payments, investigate security incidents, resolve disputes or comply with law are retained for those purposes. Singapore company financial-record requirements include retention for at least five years from the relevant Year of Assessment. The operator must determine which records this applies to and document any additional obligation, retention reason and review date. Required payment and recovery records are not automatically erased after 30 days. Public blockchain records remain public.
Account deletion and local wallet removal are separate. A deletion request never requires your recovery phrase, private key or payment. Records held by third-party infrastructure and blockchain providers are subject to their applicable retention practices and legal obligations.
Your choices and requests
You can edit merchant profile details in the portal, change your password, sign out, remove your local wallet, or request access, correction and deletion through info@upcxwallet.com. We may need to verify account ownership before acting. Please identify the merchant email or public transaction reference relevant to your request without including wallet secrets.