Trust & Security

• Accounts are protected by email + password, with OTP verification during sign-up and password reset.
• Sign-up and reset flows are protected by Cloudflare Turnstile to deter automated abuse.
• Admin operations (wallet adjustments, charge configuration) are gated by a server-side role check; only accounts explicitly granted the admin role can access them.

The app is built on the Lovable platform and uses Supabase for authentication and database storage. These are described as enabled platform capabilities, not as third-party certifications of PAN Finder itself.

• Account data: name, email, phone number used to create and manage your account.
• Wallet data: top-ups, balance, and transaction history for the services you use in-app.
• PAN Finder search history: only the last 4 digits of the Aadhaar searched, the resulting PAN/tracking ID, and request status are retained for your own record and dispute resolution.

Data is used to operate the app, process your requests, and provide support.

• Supabase — authentication and database.
• Cloudflare Turnstile — bot protection on auth forms.
• PanManager (PAN data provider) — Aadhaar → PAN lookups initiated by you.
• AutoUPI — payment gateway for wallet top-ups.
• TezSender / Gmail — transactional email and OTP delivery.

We use only the cookies and local storage required to keep you signed in and to operate the app. We do not run third-party advertising trackers.

Account, wallet, and search records are retained while your account is active. To request deletion of your account and associated data, contact us at the address below. Some records (e.g., completed payment transactions) may be retained for legal and accounting purposes.

For access, correction, or deletion requests relating to your personal data, write to the support address below from the email registered on your account.

To report a security concern or suspected incident, please contact:
support@panme.shop

Please include steps to reproduce and any relevant context. We aim to acknowledge valid reports promptly.

PAN Finder is responsible for application-level configuration, access controls, and the choices described on this page. The underlying platform providers (Lovable, Supabase, and the integrations listed above) are responsible for their infrastructure. You, as a customer, are responsible for keeping your login credentials safe and using the service in line with applicable law.