Reference

How 0ctober Handles Your Personal Data

At 0ctober, we are clear about what data we collect from you, why we collect it, and how long we keep it — so you can make informed…

Data collected only as neededUPI, Paytm, PhonePe transactions coveredYour rights clearly explainedContact us to request changesIndia account holders addressed
0ctober How 0ctober Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have questions about how your personal data is used, want to request a copy of your data, or need to report a concern, our…

Email Privacy Request Send a written request to our privacy inbox at [email protected].
Live Chat Support Open the live chat widget from any page on 0ctober.
Account Settings Panel Log into your account, navigate to Settings, and select Data and Privacy.
DATA HANDLING PRACTICES

Six Ways We Protect and Manage Your Data

From the moment you open an account to every UPI or PhonePe transaction you complete, your data moves through encrypted channels and is processed under defined retention rules.

Encrypted Data Storage

All personal data — name, contact details, payment identifiers like UPI handles — is stored using AES-256 encryption at rest. Access logs are audited quarterly, and no team member can retrieve raw payment credentials outside a verified operational request.

Cookie Usage and Control

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit most. You can manage cookie preferences from the footer of any page. Declining analytics cookies does not affect account functionality or payment processing via Paytm or PhonePe.

Account Security Protocols

Your account password is hashed and never stored in plain text. Login attempts are monitored, and unusual activity — such as a new device accessing your account from an unrecognised location — triggers an email verification step before access is granted.

Data Retention Schedule

We retain active account data for the duration of your account. After a closure request is processed, personal data is held for a legally required period then deleted from live systems. Transaction records linked to UPI or Paytm payments are retained as required by applicable financial regulations.

Third-Party Data Sharing

Data is shared with third parties only where necessary — for example, passing a UPI transaction reference to a payment processor or sharing fraud signals with a security partner. We do not share your data with advertisers or data brokers under any circumstances.

Requesting Data Changes

You have the right to access, correct or request deletion of your personal data. Submit a request through the Account Settings panel or email [email protected]. We will confirm receipt within 48 hours and complete the action within seven business days where law permits.

Common Questions About Your Data at 0ctober

These questions cover the data topics we hear about most from India account holders — from how payment details are stored to how you can request deletion. If your question is not listed here, reach out via [email protected].

We collect your name, email address, phone number and date of birth at registration. If you transact via UPI, Paytm or PhonePe, we also store the relevant payment identifier tied to those transactions for reconciliation and fraud prevention.

Payment identifiers like your UPI handle or PhonePe reference are stored in an encrypted data store separate from your profile. Only authorised payment-processing systems can query this store, and access is logged with a timestamp and reason code.

Yes. Log into your account, go to Settings, then Data and Privacy, and submit a data access request. Alternatively, email [email protected] with your registered details. We will compile and send your data within seven business days.

We share data only with service providers directly involved in operating your account — payment processors for UPI and Paytm transactions, security partners for fraud detection, and infrastructure providers for hosting. Your data is never sold to advertisers or marketing platforms.

After your account is closed, personal profile data is retained for the minimum period required by applicable financial and regulatory law in India. Once that period expires, the data is permanently deleted from our live systems and backup stores.

Submit a deletion request via the Data and Privacy section in your account settings, or email [email protected]. We will acknowledge your request within 48 hours. Deletion is completed within seven business days, subject to any legal retention requirements.

Write to [email protected] with a description of your concern. Our privacy team will investigate and respond within five business days. If you remain unsatisfied, you may escalate to the relevant data protection authority for your region in India.