Reference

How dafaexch Handles Your Personal Data

This Privacy Policy sets out exactly what data dafaexch collects when you open an account, how we store it, and what rights you hold over it.

Data collected only as neededUPI and Paytm transaction data securedYour right to access and correct dataNo data sold to third partiesPhonePe payments protected end-to-end
dafaexch How dafaexch Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you have questions about how your data is processed, want to request a copy of what we hold, or need to raise a correction, our privacy support team is reachable through…

Email Privacy Request Send your data access, correction, or deletion request to our dedicated privacy inbox. We acknowledge every email within one business day and complete straightforward requests within 72 hours.
Live Chat Support Reach our support team through the live chat window on dafaexch.co. Agents are available around the clock and can escalate data queries to the privacy team during the same session.
In-Account Help Centre Log in, navigate to the Help section, and submit a privacy ticket directly from your account dashboard. This links your request automatically to your account record, speeding up verification.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

dafaexch applies encryption, access controls, and regular security audits across the systems that hold your data.

Encryption in Transit and at Rest

All data moving between your browser or app and our servers travels over TLS encryption. Stored records — including payment identifiers for UPI, Paytm, and PhonePe — are encrypted at rest using AES-256, so raw data is never exposed even in the event of a breach.

Cookie Use and Your Choices

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit most. You can adjust cookie preferences through your browser settings at any time; disabling analytics cookies does not affect core account functionality.

Account Security Controls

Two-factor authentication is available on every dafaexch account. Login attempts from unrecognised devices trigger an email alert to you immediately, and repeated failed attempts lock the session pending identity confirmation — protecting your data from unauthorised access.

Data Retention Schedule

We keep your account data for as long as your account is active and for the period required by applicable law after closure. Transaction records tied to UPI or Paytm payments are retained for audit purposes and then purged on a rolling schedule in line with regulatory requirements.

Requesting Access or Correction

You can request a full export of the personal data we hold on you at any time via the Help Centre or by emailing our privacy team. Correction requests are processed within 72 hours, and we send written confirmation once the update is applied to your record.

Third-Party Data Processors

We engage payment processors and fraud-detection providers to handle transaction data, but every partner signs a data-processing agreement with us. None of them may use your data for their own marketing, and all are required to delete your data on request in line with our retention policy.

Your Privacy Questions Answered

The questions below address what our account holders in India ask most often about data collection, storage, correction rights, and how to close or delete an account. If your question is not listed here, reach our privacy team via live chat or email and we will respond within one business day.

We collect your name, email address, mobile number, date of birth, and the payment identifiers you register — such as your UPI ID or Paytm number. We also log device data and session activity to secure your account and detect fraud.

Your payment data is passed only to the payment processor needed to complete the transaction. That processor is bound by a data agreement with us and cannot use your UPI or Paytm details for any purpose other than processing the specific payment you authorised.

After account closure, we retain transaction and identity records for the period required by applicable law — typically for audit and compliance purposes. Once that period expires, records are purged from our active systems on a scheduled basis.

Yes. Submit a data access request through the Help Centre in your account dashboard or email our privacy team directly. We compile and send a full data export within seven business days of verifying your identity.

Log in to your account, go to Profile Settings, and update the relevant field directly. If the field is locked — such as your registered mobile number — submit a correction request via live chat or email and we will action it within 72 hours.

We may send account-related communications and promotional messages to your registered email or mobile number. You can opt out of marketing messages at any time through the notification settings in your account dashboard, and opting out does not affect account access.

Change your password immediately and enable two-factor authentication if not already active. Then contact our support team via live chat — available around the clock — so we can review login logs, flag the session, and secure your account without delay.