Reference

How sattmatak Handles Your Personal Data

This Privacy Policy sets out exactly what personal data sattmatak collects when you open an account, how we use it, who we may share it with, and the…

Data collected only as neededAccount security with encryptionYour right to access and deleteUPI and Paytm transaction privacyContact us to raise any concern
sattmatak How sattmatak Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you have a question about how your data is handled, want to request a correction, or need to submit a deletion request, our support team…

Email Privacy Team Send your data access, correction or deletion request directly to our dedicated privacy address.
Live Chat Support Open the live chat window from any page on sattmatak to speak with a…
Help Centre Form Submit a structured privacy request through the help centre form, where you can specify…
DATA HANDLING STANDARDS

Browse How We Protect Your Account Data

From the moment you open an account, sattmatak applies a set of consistent data handling practices covering storage, access controls, cookies, retention periods and your rights as an account holder.

Encryption in Transit and at Rest

All personal data transmitted between your device and our servers is encrypted using TLS. Data stored on our infrastructure, including your account details and payment history from UPI or PhonePe, is encrypted at rest using AES-256 standards.

Cookie and Tracking Practices

We use session cookies to keep you logged in, analytics cookies to understand how pages are used, and preference cookies to remember your settings. You can manage cookie preferences from your account settings at any time without affecting core account functions.

Account Security Controls

Your account is protected by password hashing, two-factor authentication options and automatic session timeouts after periods of inactivity. Any login from an unrecognised device triggers an email verification step before access is granted.

Data Retention Schedule

We retain account data for as long as your account is active and for the legally required period after closure. Transaction records linked to Paytm or UPI payments are kept for the minimum period mandated by applicable financial regulations, after which they are deleted.

Who Can Access Your Data

Only staff with a legitimate operational need can access your personal data, and that access is logged. We do not sell your data to third parties. We may share limited data with payment processors such as Paytm or PhonePe solely to process your transactions.

Requesting Changes or Erasure

Contact our privacy team via email or live chat to request a correction to inaccurate data, an export of the data we hold, or erasure of your account data where no legal retention obligation applies. We confirm every request in writing.

Switch Through Your Most Common Privacy Questions

The questions below cover the data rights and privacy practices we hear about most from account holders in India. If your question is not here, reach our support team directly and we will point you to the right part of this policy.

We collect your name, email address, phone number, date of birth and any identity documents required for verification. We also record your device type, IP address and session data each time you log in to maintain account security.

Payment transaction data is passed to the relevant processor — UPI, Paytm or PhonePe — only to complete the transaction. We store a record of the amount, date and method but do not retain your full UPI ID or Paytm wallet credentials on our servers.

Yes. Submit a data access request through our help centre form or by emailing our privacy team. We will compile a readable export of the personal data we hold on your account and deliver it within 30 days of verifying your identity.

Contact the privacy team via live chat or email with a deletion request. We will erase your data within the permitted timeframe, except where we are required to retain specific records — such as transaction histories — under applicable financial regulations.

We share data only with payment processors to complete transactions and with service providers who operate under strict data processing agreements with us. We do not sell personal data to advertisers or any unaffiliated third party.

After account closure, we retain your data for the minimum period required by the financial and legal regulations applicable to the jurisdictions where you accessed the platform. Once that period ends, we permanently delete or anonymise your records.

Start by contacting our privacy team directly — most concerns are resolved quickly at that stage. If you are not satisfied with our response, you have the right to escalate to the relevant data protection authority in your jurisdiction where local law permits.