Privacy Policy

One URI ("we", "us", "our") operates the website 1uri.in and the One URI mobile and web applications (collectively, the "Service"). This Privacy Policy explains what information we collect, why we collect it, and the choices you have. By using the Service you agree to the practices described here.

We collect only what we need to run the Service:

• Account & identity. When you sign in with Google (via Firebase Authentication) we receive your name, email address, profile photo, and a unique account identifier.
• Content you create. Short links and their destination URLs, link-in-bio blocks, portfolio items, your chosen username, themes, and any contact details you add to your public profile.
• Click analytics. When someone opens one of your links we record a one-way hashed (SHA-256) form of the visitor's IP address, the referring website, and a broad device category (mobile/desktop). We do not store raw IP addresses.
• Messages. Submissions sent to you through your public contact form.
• Payment information. If you subscribe to a paid plan, payments are processed by our third-party payment provider. We do not store your full card details on our servers.
• Essential cookies. Session and security cookies required to keep you signed in and protect forms (see our Cookie Policy).

We use the information above to:

• provide, operate, and maintain the Service and your account;
• authenticate you and keep your account secure;
• generate the click and audience analytics shown in your dashboard;
• detect, prevent, and act on abuse — including automated scanning of destination URLs for phishing and malware indicators;
• process subscriptions and send transactional messages;
• respond to your requests and comply with legal obligations.

We do not sell your personal information. We share it only with:

• Service providers who help us operate the Service — such as Google Firebase (authentication), our hosting provider, email/SMTP delivery, and our payment gateway — bound by confidentiality obligations.
• Legal & safety — when required by law, or to protect the rights, safety, and property of One URI, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

We apply industry-standard safeguards: passwords are hashed with bcrypt, click IPs are stored only as SHA-256 hashes, traffic is served over HTTPS/TLS, and administrative access uses database-backed sessions with strict timeouts and audit logging. No method of transmission or storage is 100% secure, but we work to protect your information.

We keep your account information for as long as your account is active. Click analytics are retained to power your dashboards. When you delete your account, your profile, links, and associated data are removed, and related records are deleted in cascade. We may retain limited information where required for legal, tax, or security purposes.

You can access and update most of your information directly in the app. Depending on your location (including under the EU GDPR and India's DPDP Act), you may also have the right to request access, correction, deletion, or export of your personal data, and to object to certain processing. To exercise these rights, contact us at support@1uri.in.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you. Continued use of the Service after changes take effect constitutes acceptance.

Questions about this Privacy Policy? Email us at support@1uri.in.