Reference

How cowinz Handles Your Personal Data

This privacy policy sets out exactly what personal data cowinz collects when you open an account, how we use it, and the rights you hold over it.

Data collected only as neededNo sale of personal data to third partiesSecure account storage with encryptionRight to request data deletionUPI, Paytm, PhonePe payment data protected
cowinz How cowinz Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Data

Email Privacy Team Send a written data request or deletion query to our dedicated privacy email. We acknowledge within 48 hours and resolve within 30 days as required by applicable law for accounts in permitted regions.
Live Chat Support Start a live chat session directly from your account dashboard to raise a privacy concern. Our support team can escalate your query to the privacy officer on duty without delay.
In-Account Privacy Centre Log into your cowinz account and navigate to Settings then Privacy to view the data we hold, download a copy, or submit a formal request to restrict or erase specific records.
HOW WE PROTECT YOUR ACCOUNT

Data Handling, Cookies and Account Security

We take a layered approach to protecting the data tied to your cowinz account — from the moment a UPI payment clears to the day you close your account.

Data Collection Practice

We collect only what is necessary to run your account: registration details, payment method references such as UPI VPA or Paytm number, device fingerprint for fraud prevention, and session logs. Nothing beyond that is retained.

Cookie Policy

Our site uses functional cookies to keep you logged in and analytics cookies to understand which lobby pages you visit. You can manage cookie preferences from the banner on first visit or through your browser settings at any time.

Account Security Measures

Passwords are hashed using industry-standard algorithms and never stored in plain text. Two-factor authentication is available on your account settings page and we strongly encourage enabling it for every login.

Data Retention Schedule

Active account data is held for the lifetime of your account plus a minimum period required by applicable financial regulations. Once that window passes and you request deletion, records are purged from live systems within 30 days.

Who to Contact for Changes

Our designated Privacy Officer handles all formal data requests. Reach them via the privacy email listed in the support section or through the in-account Privacy Centre. Requests are logged, tracked, and responded to in writing.

Requesting Data Access or Erasure

You hold the right to access a copy of your personal data, correct inaccuracies, restrict processing, or request erasure. Submit through the in-account Privacy Centre and we will confirm the action taken within the legally required timeframe.

Your Questions About Our Privacy Policy

These questions cover the most common concerns about how cowinz handles personal data, what rights you hold, and how to act on them. If your question is not listed here, reach out through any of the contact paths above.

We collect your name, email address, phone number, date of birth, and a government-issued ID reference for verification. Payment identifiers — such as your UPI VPA, Paytm number, or PhonePe ID — are recorded when you make a transaction.

We do not sell or trade your data. We share it only with payment processors handling UPI, Paytm, or PhonePe flows, identity verification providers, and fraud prevention services — all under binding data processing agreements that limit how they may use it.

After account closure, we retain records for the minimum period required by applicable financial and anti-fraud regulations. Once that period expires and you request deletion, your data is removed from live systems within 30 days.

Yes. Log into your account, go to Settings then Privacy Centre, and submit a data access request. We will compile and deliver a structured copy of your personal data within the timeframe required by local law in permitted regions.

Submit an erasure request through the in-account Privacy Centre or email our Privacy Officer directly. We will confirm receipt within 48 hours and complete the deletion within 30 days, subject to any retention obligations under applicable law.

Payment identifiers are encrypted at rest and in transit. We do not store full card numbers or sensitive authentication credentials. UPI VPAs and Paytm references are tokenised so that only a masked version appears in your transaction history.

We use functional cookies for session management and analytics cookies to understand lobby navigation. You can accept, reject, or customise cookie categories from the consent banner on first visit or through your browser settings at any time.