Reference

How y28s Handles Your Personal Data

At y28s, we take the privacy of every account holder seriously — this page tells you exactly what data we collect, why we collect it, and how you…

Data collected with your knowledgeRetention limits clearly statedRight to request deletionIndia-region data practicesSecure account storage
y28s How y28s Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct or delete the personal data we hold on your account, our privacy team is available through the channels below.

Email Privacy Team Send your data access or deletion request to our dedicated privacy address. Include your registered email and account details so we can locate and action your request without unnecessary delays.
Live Chat Support Open the live chat widget inside your y28s account dashboard and select the Privacy or Account Data topic. Our agents can raise a formal data request on your behalf during chat hours.
In-App Request Form Log into your account, navigate to Settings, and use the Data Privacy form to submit a request directly. You will receive a confirmation reference number by email once we accept your submission.
DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

Security and transparency around your personal data are built into how we run y28s day-to-day. Below are the six areas where we apply specific, measurable practices — not vague commitments.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to understand which pages perform well. You can manage cookie preferences through your browser settings at any time without losing account access.

Account Security

Passwords are stored using one-way hashing. We do not store your UPI VPA, Paytm wallet ID or PhonePe credentials on our servers — those details remain with the respective payment processor after each transaction completes.

Data Retention

Active account data is retained for the lifetime of your account plus any period mandated by applicable law in your region. Once the retention period lapses, data is deleted from our live systems and scheduled for removal from backups.

Third-Party Sharing

We share data only with payment processors needed to complete your UPI or Paytm transactions, fraud-prevention services, and regulators where local law requires disclosure. No marketing or advertising partners receive your personal data.

Your Access Rights

You may request a copy of all personal data we hold, ask us to correct inaccurate records, or request full deletion of your account data. We process these requests within 72 hours and confirm completion by email.

Policy Updates

When this policy changes materially, we send a notification to your registered email address at least 14 days before the new terms take effect. Continued use of the account after that date constitutes acceptance of the revised policy.

Common Questions About Your Privacy at y28s

These questions cover the most common things account holders ask about how we handle personal data, cookies and account security. If your question is not here, use the live chat or email route listed in the contact section above.

We collect your name, email address, mobile number, date of birth and address to verify your identity. Payment-method details like your UPI VPA are processed by the payment provider and are not stored on our servers.

No. We do not sell or share your personal data with any marketing or advertising company. Data goes only to payment processors such as Paytm and PhonePe, and to regulators where local law in your jurisdiction requires it.

Log into your account, go to Settings and use the Data Privacy form, or email our privacy team directly. We will send a structured copy of your personal data to your registered email address within 72 hours of confirming your identity.

Yes. Submit a deletion request through the in-app form or via email. We will delete your data from live systems and schedule removal from backups, subject to any retention period required by applicable law where you are located.

We use session cookies for login continuity and analytics cookies to measure page performance. You can disable analytics cookies in your browser settings. Disabling session cookies may affect your ability to stay logged in during a session.

We retain data for the period required by the regulations applicable in your region. After that period expires, your data is removed from our live database and queued for deletion from encrypted backup storage on the next scheduled purge cycle.

We send an email to your registered address at least 14 days before any material change takes effect. The updated policy date is shown at the top of this page so you can verify which version currently applies to your account.