Privacy policy
This notice covers the confirmed personal-data practices of the 1UPay website and current testing service. The operator is NexOrbit AI Technology Limited (雲啟科華科技有限公司). Updated: 14 October 2026.
Scope
The website provides product information, company details, download links and contact options. It does not register accounts, perform KYC, accept deposits or execute transactions. App data fields, third-party SDKs, providers and retention periods are still being verified. This page is not yet a complete final policy for all App data processing; a complete App policy must accompany new features and a formal store release.
Browsing and contact data
The new web server logs request times, IP addresses, requested paths, response status, referrers and browser identifiers for website operation, troubleshooting and security. The website sets no advertising or analytics tracking cookies. Contact details and messages you provide by email or phone are used to respond to and handle your request. Do not include passwords, private keys, verification codes or full identity documents in an initial enquiry.
Service and identity data
The current App collects a registration email address, an internal user ID and login IP addresses for registration, sign-in, account management and login records. Wallet and card services process TRC20 USDT balances, USD card balances, blockchain addresses and transaction hashes, and deposit, conversion and spending records. Card details are masked by default; viewing full details requires payment-password verification and is limited to 30 seconds. Image uploads and KYC are not enabled. The current App does not collect phone numbers, names, residential addresses, identity documents or facial data, or device, installation or advertising identifiers. Sentry and ML Kit do not transmit data externally in the current release. Notices will be updated before new collection or verification features are enabled.
Storage and third parties
The website and App backend run in an AWS environment in Singapore, and the public contact mailbox is hosted by a business email service. Card and conversion channels receive an internal platform user ID to identify the relevant card service and requests. This remains a user identifier, not anonymous data. The platform does not send user names or registration email addresses to that channel. Full card details are retrieved from the relevant institution. TestFlight and Android download links lead to third-party services whose privacy rules apply to those visits. The channels’ legal entities and retention arrangements still require verification; no unverified entity or financial authorisation is represented as established.
Transmission security
User data in current App sign-in, API, card-detail and third-party requests is transmitted using HTTPS/TLS encryption. Protect sign-in and payment passwords; do not email passwords or private keys.
Retention and deletion
Website access and error logs rotate daily, retaining at most 14 rotated files. App registration data is retained while the account is used. After verification and completion of account deletion, the backend deletes the user account and no longer retains its registration email. Transaction records remain actual records and must not be described as anonymised. Records needed for settlement, refunds, disputes or applicable accounting duties should be managed separately from the sign-in account. Specific rotation and expiry arrangements for App login IP records, backups and third-party records still await technical implementation confirmation; proposed 30-day or 90-day operational targets are not represented as existing commitments. Public blockchain records cannot be erased.
Requests and contact
Contact developer@1upay.com or +852 90421964 to request access, correction or deletion of personal data. Account ownership needs to be verified; initially provide your registered email or phone number and the nature of your request. See the account deletion page for the request method and balance considerations. Company address: Workshop 251 on 3rd Floor, Join-In Hang Sing Centre, Nos. 2–16 Kwai Fung Crescent, Kwai Chung, Hong Kong. The company has assigned staff to receive and follow up on customer support, privacy and account-deletion requests at developer@1upay.com.