Reference

How kurlasatta Handles Your Personal Data

This Privacy Policy sets out exactly what personal data kurlasatta collects when you open an account, how we use it, and the rights you hold over that data…

Data collected only as neededStored on secured serversNo sale of personal dataUPI / Paytm / PhonePe payment data protectedRight to access your data anytime

Explore the Lobby Read FAQ

What Data We Collect and Why

kurlasatta Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account on kurlasatta.co, we collect identification details (name, date of birth, email address, mobile number), device and browser data, and payment-related identifiers linked to UPI, Paytm or PhonePe transactions. We collect this data solely to operate your account, process deposits and withdrawals,

1
and meet obligations under Indian law where access is permitted. Location signals are captured at login to confirm eligibility in accordance with local law. We do not store full payment-instrument numbers; instead, tokenised references are held to match your payment rail. Log data such as IP
2
addresses and session timestamps are kept for fraud-prevention purposes and deleted on a rolling schedule. Any data we hold is used only for the stated purpose for which it was gathered.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you need to request a copy of your data, ask us to correct inaccurate records, or raise a concern about how your information is being used, our privacy team is reachable…

Email Privacy Team Send a written request detailing your concern to our dedicated privacy address. We log every submission and reply with a reference number so you can track progress on your data request.

Live Chat on Site Open the chat widget on kurlasatta.co and select the Privacy topic from the menu. An agent will confirm your identity, raise a formal ticket and share the expected resolution timeline with you.

Postal Address For formal written notices or legal correspondence about data handling, send a letter to our registered postal address. We acknowledge postal privacy requests within five business days of receipt.

DATA HANDLING PRACTICES

How We Protect and Manage Your Data

Our data handling practices are designed around the principle that your personal information exists to serve your account — not our marketing.

Encrypted Data Storage

All account data is stored using AES-256 encryption at rest and TLS 1.3 in transit. This means your name, contact details and payment-rail tokens cannot be read even if the underlying storage is accessed without authorisation.

Cookie Controls

We use session cookies to keep you logged in, analytics cookies to understand page performance, and preference cookies to remember your language choice. You can withdraw consent for non-essential cookies at any time through the cookie settings panel on kurlasatta.co.

Account Security Measures

Two-factor authentication is available for all accounts. Login attempts from unrecognised devices trigger an email or SMS alert. Repeated failed login attempts lock the account temporarily and prompt a verification step before access is restored.

Data Retention Schedule

Active account data is kept for as long as your account remains open. After account closure, we retain the minimum records required by Indian financial regulations, then delete remaining personal data on a documented schedule — typically within 90 days of the regulatory hold period ending.

Third-Party Data Sharing

We share your data only with payment processors (UPI network, Paytm, PhonePe) and identity-verification partners where required to operate your account. We do not sell, rent or trade your personal data to advertisers or data brokers under any circumstance.

Requesting Data Changes

You can request a full export of the personal data we hold on you, ask us to correct any inaccuracy, or request deletion of data we are not legally required to retain. Submit your request via email or live chat and we will confirm the action taken in writing.

Common Questions About Your Privacy Rights

The questions below address what we get asked most often about data collection, storage and your rights on kurlasatta. If your question is not covered here, reach out through the support channels listed on this page and we will give you a direct answer.

We collect your name, email address, mobile number, date of birth and device identifiers. Payment-rail tokens from UPI, Paytm or PhonePe are stored in tokenised form. We collect only what is needed to run your account and meet Indian legal requirements.

Yes. Submit a data-access request via email or live chat, verify your identity and we will send a structured export of your account data within 30 days. The export covers profile details, transaction references and communication logs we hold on file.

Contact our privacy team through email or live chat with a deletion request. We will remove data we are not legally required to retain and confirm the deletion in writing. Some records must be kept for a defined period under Indian financial regulations before deletion.

Only with parties essential to your account: payment processors such as UPI networks, Paytm and PhonePe, and regulated identity-verification services. We do not sell or share your data for advertising purposes, and every third-party contract includes strict data-use restrictions.

After closure, we retain the minimum records required by applicable Indian regulations — typically transaction records for a set statutory period. Once that hold period ends, remaining personal data is permanently deleted within 90 days under our documented retention schedule.

We use session cookies (essential, cannot be disabled), analytics cookies and preference cookies. Non-essential cookies can be turned off at any time via the cookie settings panel on kurlasatta.co. Disabling analytics cookies does not affect your account or any platform features.

Raise your concern with our privacy team via email or live chat first. We will investigate and respond within 30 days. If you remain unsatisfied, you may escalate to the relevant Indian data-protection authority as permitted under applicable local law.

How kurlasatta Handles Your Personal Data

Reach Us About Your Privacy Rights

How We Protect and Manage Your Data

Encrypted Data Storage

Cookie Controls

Account Security Measures

Data Retention Schedule

Third-Party Data Sharing

Requesting Data Changes

Common Questions About Your Privacy Rights

01 What personal data does kurlasatta collect when I open an account?

02 Can I request a copy of all the data you hold about me?

03 How do I ask kurlasatta to delete my personal data?

04 Does kurlasatta share my data with third parties?

05 How long does kurlasatta keep my data after I close my account?

06 What cookies does the site use and can I turn them off?

07 Who should I contact if I believe my privacy rights have been violated?

Related Pages