Privacy Policy

Welcome to ONX Reach. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information.

Information We Collect

We collect only the data needed to run the platform. We do not use any third-party analytics or advertising SDKs, and this app does not access your contacts, photos, camera, or WhatsApp account directly — proof screenshots are uploaded manually by you.

• Account information: full name, mobile number, email address, and a securely hashed password (we never store your password in plain text).
• Payout details: UPI ID, bank account holder name, bank name, account number, and IFSC code — collected only when you add them, used only to send you money you have earned.
• Campaign participation & proof: which campaigns you accept, screenshots and optional short videos you upload as proof of participation, and the review outcome (approved/rejected/resubmit).
• Wallet & withdrawal history: earnings credited to your wallet and withdrawal requests, including amount, status, and the payout details snapshot for each request.
• Referral information: your referral code, who referred you, who you have referred, and referral bonus history.
• Security & login data: IP address, user agent/device information, login timestamps, MFA status, and trusted-device tokens, used to detect fraud and secure your account.
• Support communications: anything you send us via the Contact page or an account deletion request, including the contact details you provide in that request.

How Information Is Used

We use your data strictly to operate the platform, including:

• Creating and securing your account, and verifying you are a real, unique member.
• Reviewing and verifying campaign proof submissions.
• Crediting approved earnings to your wallet and processing withdrawal requests to your payout details.
• Managing referral bonuses.
• Detecting and preventing fraud, abuse, and violations of our Earnings & Rewards Terms.
• Responding to support requests.

Data Storage & Security

Your data is stored on our servers and is not publicly accessible. Uploaded proofs (screenshots/videos) are protected against unauthorized access. Passwords are stored as one-way cryptographic hashes, not in plain text. We implement standard technical and administrative measures to protect your personal and financial details, but no system can be guaranteed 100% secure.

Data Retention & Deletion

We retain your information as long as your account is active or as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account at any time (see Account Deletion). Deletion anonymizes your name, email, mobile number, and the payout details saved on your profile, clears your password, and blocks the account. It does not erase your wallet and withdrawal history (including the payout destination recorded on each withdrawal), your proof submissions and uploaded screenshots/videos, referral bonus records, or security logs (IP address, device/browser information); these remain linked to your anonymized member ID for accounting, audit, and fraud-prevention purposes. We do not currently run an automatic schedule that erases them; contact Support to ask about a specific record.

Third-Party Services & Data Sharing

We do not sell your personal data. The app's code contains no third-party analytics, advertising, or crash-reporting SDKs. The only third parties that receive data are those needed to run the service:

• Razorpay / RazorpayX (payment provider): when a withdrawal is paid through our payment provider, we send the payee's account holder name, the UPI ID or bank account number and IFSC code, the amount, and a payout reference (and a phone number if one is available) to RazorpayX so it can make the transfer. Payment-provider webhooks return the payout status to us. Members are not charged through the app; Razorpay's checkout is used by administrators to fund campaigns.
• Email (SMTP) provider: your email address and the content of transactional emails (for example verification codes, password resets, and security alerts) pass through the SMTP mail service configured by the operator.
• Google Fonts: the public web pages load the Inter typeface from Google Fonts, so your browser sends your IP address and browser details to Google when those pages load.
• Hosting provider: the app and its database run on the operator's hosting infrastructure, which processes data on our behalf and may keep standard server access logs.

We may also disclose information where required by law or to protect against fraud or abuse.

Cookies & Session Data

We use only essential cookies: a session cookie (HttpOnly, SameSite=Strict, secure over HTTPS) that keeps you logged in and protects forms against forgery, and a trusted-device cookie that remembers a device you have verified so we can reduce repeat security prompts. We do not use advertising or cross-site tracking cookies.

User Rights

You have the right to access, correct, or request deletion of your personal information at any time by using the Account Deletion page or by contacting Support.

Policy Updates

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page.

Contact Information

If you have questions regarding this policy, please contact our administrative team via the platform.