Privacy Policy

1 Information We Collect

When you use FrontPay's services, we collect the following categories of information:

Account Information

• Full name, mobile number, and email address (provided during registration)
• Password (stored as a one-way bcrypt hash — we never store plaintext passwords)
• Referral code used at registration, if any
• User role (customer or agent)

Transaction Data

• Recharge order IDs, amounts, operator codes, and mobile/DTH account numbers recharged
• Wallet balance history — credits, debits, and fund request records
• Commission amounts credited to agent accounts
• API transaction IDs returned by our recharge provider

Technical Data

• IP address and browser user-agent for security logging
• Session identifiers stored as HTTP-only secure cookies
• Timestamps of all actions taken on the platform

Fund Request Data

• Payment mode (UPI, NEFT, IMPS), UTR/reference numbers, and amounts submitted for wallet top-up
• Bank details shared with us for fund verification purposes only

2 How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Processing mobile and DTH recharges, crediting your wallet, and sending notifications
• Account management: Creating and maintaining your account, verifying identity, and managing wallet balances
• Commission calculation: Computing and crediting agent commissions based on completed transactions
• Fund request processing: Verifying and approving wallet top-up requests submitted by users
• Communication: Sending in-app notifications for successful recharges, credits, and account actions
• Security: Detecting, preventing, and investigating fraudulent or unauthorized activity
• Legal compliance: Meeting obligations under applicable Indian law, including GST and financial record-keeping
• Service improvement: Analysing aggregated usage patterns to improve our platform

We do not use your data for unsolicited marketing, profiling for advertising, or any purpose beyond what is described above.

3 Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We share data only in these limited cases:

• Recharge API provider (rechargebuysale.com): We transmit the mobile/DTH number, operator code, and recharge amount to process transactions. No other personal data is shared.
• Plan data provider (planapi.in): We send operator and circle codes to fetch available plans. No personal data is transmitted.
• Legal requirements: We may disclose data if required by Indian law, court order, or government authority.
• Business transfers: In the event of a merger or acquisition, your data may transfer to the new entity under equivalent privacy protections.

All third-party providers we work with are required to handle your data securely and are prohibited from using it for their own purposes.

4 Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and our servers is encrypted via TLS/SSL (HTTPS)
• Passwords are hashed using bcrypt with a secure salt — they cannot be reversed
• Authentication tokens (JWT) are signed and expire after 24 hours
• Database access is restricted to authorised server processes only
• Admin actions are logged with timestamps and user IDs for audit purposes
• Regular security reviews and vulnerability assessments are conducted

5 Cookies & Tracking

FrontPay uses minimal, essential cookies only:

• Session cookie (frontpay_session): An HTTP-only, secure cookie used to maintain your admin login session. It expires when you close your browser or after 24 hours.
• Local Storage (fp_token, fp_user): On the user-facing site, your JWT token and basic profile data are stored in browser local storage for session persistence.

We do not use advertising cookies, analytics tracking pixels, or cross-site trackers of any kind. We do not use Google Analytics, Facebook Pixel, or similar services.

6 Your Rights

Under applicable Indian data protection law, you have the right to:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data (subject to legal retention requirements)
• Data portability: Request your transaction history in a machine-readable format
• Objection: Object to any processing of your data that you believe is not in accordance with this policy

To exercise any of these rights, email us at support@infinitylines.pro with the subject line "Privacy Request". We will respond within 30 days.

7 Data Retention

We retain your data for the following periods:

• Account data: For as long as your account is active. Deleted accounts are purged within 30 days, except where legal obligations apply.
• Transaction records: Retained for 7 years to comply with GST and financial regulations.
• Security logs: Retained for 90 days.
• Notification logs: Retained for 60 days.

After retention periods expire, data is securely deleted or anonymised.

8 Children's Privacy

FrontPay's services are intended for users who are 18 years of age or older. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a person under 18, please contact us immediately and we will delete that data.

9 Third-Party Services

Our platform integrates with the following external services. Each has its own privacy policy:

• rechargebuysale.com — Recharge processing API (transaction data only)
• planapi.in — Mobile recharge plan data (no personal data)
• Google Fonts — Web fonts loaded via CDN (IP address only, no cookies)
• Bootstrap Icons (cdnjs) — Icon font via CDN (no personal data)

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via in-app notification.

Continued use of FrontPay after any changes constitutes your acceptance of the updated policy.

11 Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: