Our approach to data protection is designed to respect your rights and comply with applicable privacy laws, including India's Digital Personal Data Protection Act and, where relevant, the GDPR.
Legal basis for processing
- Consent for marketing communications
- Contract performance for service delivery
- Legitimate interest for analytics
Your rights
- Right to access your data
- Right to rectification and portability
- Right to erasure and restriction
Data retention
We retain personal data only for as long as necessary:
- Account information — while active + 3 years
- Transaction records — 7 years
- Usage analytics — 2 years (anonymized)
- Marketing data — until you withdraw consent
International transfers
When we transfer data internationally, we put appropriate safeguards in place, such as standard contractual clauses.