Reference

How kheloexchange Handles Your Personal Data

This Privacy Policy sets out exactly what personal data we collect when you open an account with kheloexchange, how we use it, and the rights you hold over…

Data collected with your consentUPI, Paytm, PhonePe transaction privacyYour right to access and deleteNo data sold to third partiesSecure account-level encryption
kheloexchange How kheloexchange Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you need to exercise any right under this policy — access your data, request correction, or ask us to delete your account records — our privacy team is reachable through all…

Email Us Send your data request or privacy query to our dedicated address. Include your registered mobile number so we can locate your account records quickly and respond without delay.
Live Chat Start a live chat session on kheloexchange.co and select the Privacy topic from the help menu. Our agents can log formal data requests and escalate them to the privacy team on the same session.
In-Account Request Logged-in account holders can submit a data access or deletion request directly from the Account Settings page under the Privacy section, without needing to contact support separately.
HOW WE PROTECT YOUR DATA

Data Handling, Cookies, Security and Retention

We apply account-level encryption across all stored personal data and enforce strict internal access controls so that only the teams who need your data to do their job can see it.

Data Collection

We collect your name, mobile number, email address and payment identifiers at registration. Additional KYC documents may be requested before your first withdrawal is processed to confirm identity under applicable law.

Cookie Use

We use session cookies to keep you logged in and analytics cookies to understand which pages load slowly on your device. You can disable non-essential cookies in your browser at any time without losing account access.

Account Security

Your password is stored as a one-way hash and never in plain text. We send a verification code to your registered mobile every time a new device logs in, giving you immediate notice of any unrecognised access.

Data Retention

Account data is retained for as long as your account is active and for the period required by applicable financial regulations after closure. Data no longer needed is deleted from our systems on a scheduled cycle.

Third-Party Sharing

We share your data only with payment processors handling your UPI, Paytm or PhonePe transactions, identity verification partners, and regulatory authorities when legally required. No data is passed to advertisers.

Your Rights

You may request a copy of your data, ask us to correct inaccuracies, restrict processing, or request deletion. We will confirm receipt within 72 hours and complete the action within 30 days where law allows.

Answers to Common Privacy Questions

The questions below address the data rights and privacy practices we are asked about most. If your question is not covered here, reach our privacy team via live chat or the in-account request form and we will respond within 72 hours.

We collect your name, email address, mobile number and date of birth at registration. If you make a withdrawal, we also collect the payment identifier you use — such as your UPI ID or Paytm-registered number — solely to process that transaction.

Your UPI handle and Paytm number are stored in encrypted form linked to your account profile to speed up future withdrawals. We do not share these with any third party outside the payment processor needed to complete your transaction.

Yes. Submit a data access request via Account Settings or contact our privacy team by email or live chat. We will compile and deliver a copy of your personal data within 30 days, consistent with the rights available under applicable law.

You can submit a deletion request from the Privacy section in Account Settings or write to our privacy email. We will delete data that is not required to be retained under financial regulations and confirm completion within 30 days.

We use essential session cookies to keep your account session active and optional analytics cookies to identify performance issues. You can disable analytics cookies in your browser settings at any time; your account will continue to work normally.

Access to personal data is restricted to teams with a documented need — such as our payments team verifying a PhonePe withdrawal or our support team handling your query. Access is logged and reviewed internally on a regular schedule.

When we update this policy, we post the revised version at kheloexchange.co/privacy-policy/ with a new effective date at the top of the page. For significant changes, we will also send a notification to your registered email address.