Lexino Technologies operates CupidxChat.We operate CupidX (cupidxchat.in) with a core commitment to user privacy, clear notice, and data minimization consistent with modern privacy frameworks (such as India's Digital Personal Data Protection Act principles and GDPR).
Legal Notice: This policy details actual technical data processing systems. It should be reviewed by qualified legal counsel for organizational compliance in specific jurisdictions.
B. What Data We Collect & Specific Purposes
CupidX collects only data necessary to provide a safe, functional, and anonymous social chat experience:
Account & Profile Identity: Your verified email (managed securely via Clerk), unique @username, public display name, date of birth (collected solely to enforce the 18+ legal age gate), gender tag, and avatar emoji.
VIP Custom Profile Photos: When a VIP member uploads a custom profile picture (avatar), we process and store the image under strict privacy standards:
File Limits: Supported formats are strictly JPG, JPEG, and PNG, up to a maximum size of 2MB.
Database Storage: Validated image data is saved directly in our secure database linked with your user profile, avoiding ephemeral third-party hosting risks.
Visibility: Your custom photo is displayed to other users in random chat sessions, friends lists, and discovery matchmaking.
User Control & Erasure: You may replace or remove your custom photo at any time in Edit Profile. When removed or upon account deletion, the image data is permanently purged from our database.
Ephemeral Chat Messages: Real-time messages transmitted during random chat sessions. Storage policy: Strictly ephemeral. Messages are held in temporary memory during the active session and are permanently wiped when either participant clicks NEXT or disconnects.
Technical Connection Information: Connection IP address processed automatically by server infrastructure for DDoS protection, rate limiting, and approximate country code estimation (e.g. 🇮🇳 India).
VIP Payment Metadata: User-submitted UPI transaction reference (UTR) and payment screenshot proofs submitted for manual subscription verification.
Consent Audit Records: Authoritative server timestamps logging your acceptance of terms, privacy policies, age verification, and optional communication preferences.
C. Data Retention Categories & Third-Party Processors
Ephemeral Chat Transcripts: Zero Permanent Retention
Transcripts are destroyed upon session end. We do not maintain historical chat logs of stranger conversations.
Personal Profile Data: User-Controlled
Retained until you update your profile or permanently delete your account.
VIP Custom Profile Photos: Direct Database Storage & User-Controlled Retention
Custom profile pictures (JPG, JPEG, PNG, max 2MB) are stored directly in our database. They remain active until replaced, switched to an emoji avatar, or permanently purged upon account deletion.
Anonymized payment transaction references (UTR, amount, currency, date) are retained as required by tax regulations, decoupled from deleted personal profile data.
Third-Party Infrastructure: Authentication is handled by Clerk. Databases and hosting are deployed on encrypted enterprise cloud infrastructure. We never sell, rent, or trade your data to third-party data brokers.
D. User Rights, Consent Withdrawal & Account Deletion
Under privacy principles, you have complete control over your personal data:
Right to Access & Update: View and modify your profile, bio, display name, and avatar at any time in Settings.
Withdrawable Marketing Consent: Toggle optional product announcements ON or OFF at any time via Settings without affecting chat functionality.
Permanent Account Deletion: Delete your account and all associated profile, matchmaking, and message data permanently in Settings by typing "DELETE".
E. Payment Processing & Financial Data Privacy
Optional VIP subscriptions (₹29/month, ₹99/3 months, ₹399/year) are processed in India via dynamic UPI QR code scanning and manual verification:
You submit a transaction reference (UTR) and payment screenshot. An administrator verifies the payment and activates VIP perks.
No Sensitive Financial Data Stored: CupidX never collects or stores credit card numbers, debit card numbers, CVVs, netbanking credentials, or UPI PINs.
Screenshot proofs are stored in protected storage accessible solely to authorized administrators and are deleted upon account removal or verification archiving.
F. Security Measures & Cookie Usage
All traffic between your browser and our servers is encrypted using modern TLS (HTTPS) and Secure WebSockets (WSS). We use strictly necessary cookies:
Authentication Token: Secure HTTP-only cookies (token, Clerk session cookies) maintaining your logged-in state.
Local Preferences: Storage of your UI theme preference (light/dark/system). We do not use third-party tracking cookies or ad network beacons.
G. IP Address Processing & Country Badge Isolation
When connecting to CupidX, your IP address is processed server-side solely to detect your approximate country code (e.g. 🇮🇳 India) to display a country badge to your random partner.
Partner Isolation Guarantee: Your raw IP address is NEVER shared with or exposed to your chat partner. We do not track GPS coordinates, latitude, longitude, or street addresses. Multiple users sharing a public IP (e.g. university or coffee shop) are treated as distinct independent accounts.
H. 48-Hour Re-Registration Restriction (Anti-Abuse Tombstone)
When an account is deleted, a temporary security tombstone is generated:
Purpose: Product security and abuse prevention — specifically preventing immediate re-registration churn, harassment evasion, and bot creation.
Privacy-Safe Hash: We do NOT retain your raw email address in this table. Instead, a salted one-way HMAC-SHA256 hash (HMAC-SHA256(email, secret)) is stored.
Automatic Expiration: The tombstone expires automatically after exactly 48 hours. Once expired, the same email identity is fully permitted to create a new CupidX account without requiring manual admin intervention.
I. Privacy Inquiries, Grievances & Contact Channels
For privacy requests, data erasure inquiries, or grievances, reach out directly to our privacy desk:
Operator: Lexino Technologies
Privacy & Data Rights: privacy@cupidxchat.in
General Support: support@cupidxchat.in
Operating Address: [Operator Business Address To Be Configured by Lexino Technologies]