Security
This page is maintained by the MyTopUp.in team to explain the security practices we apply to the platform. It describes controls that are enabled today and is not an independent certification.
Account & authentication
Accounts are protected by email/password and Google sign-in. Sessions use signed tokens and admin actions are restricted by a server-side role check.
Payments
Payments are collected via UPI. We store only the payment reference and the screenshot you upload for order verification. We never store your UPI PIN, card numbers or banking passwords.
Data storage
Order data is stored on managed cloud infrastructure with row-level access controls. Only authenticated owners can read their own orders; only authorised admins can review pending payments.
Reporting a vulnerability
If you believe you have found a security issue, email support@mytopup.in with details. Please do not publicly disclose the issue until we have had a chance to respond.