Reference

How w2w Handles Your Personal Data

At w2w, we collect only what we need to run your account, process payments via UPI, Paytm and PhonePe, and keep your sessions secure.

Data collected only as neededUPI, Paytm, PhonePe payment privacyYour right to access and deleteIndia-region data handlingDirect privacy contact available
w2w How w2w Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact w2w About Your Privacy

If you want to access the data we hold about you, correct something inaccurate, or request deletion of your account records, our privacy team is ready to help. Responses are sent within 7 working days of a verified request. You can reach us through the channels below — pick whichever works for you.

Team online

Email Privacy Request

Send a written request to our dedicated privacy address. Include your registered email and the nature of your request so we can verify your identity and respond within 7 working days.

Live Chat Support

Open the live chat widget on any w2w page and select the Privacy topic from the menu. Our agents can log your request and escalate it to the privacy team on your behalf.

In-Account Help Centre

Log in and head to Account Settings, then Help. The Privacy section lets you download a copy of your stored data or submit a deletion request directly without needing to email us.

DATA HANDLING PRACTICES

How We Protect and Manage Your Data

w2w uses encrypted connections for every account session, stores payment references in tokenised form, and restricts staff access to your personal records on a need-to-know basis.

Encrypted Account Sessions

Every login and transaction on w2w runs over TLS-encrypted connections. Your password is hashed before storage and is never visible to our support staff or engineers at any point.

Payment Tokenisation

When you deposit via UPI, Paytm or PhonePe, we store only a tokenised reference — not your full VPA or bank details. The actual payment credentials remain with the respective payment processor.

Cookie and Tracking Policy

We use session cookies to keep you logged in, analytics cookies to understand page performance, and no third-party advertising trackers. You can adjust cookie preferences in your browser settings at any time.

Data Retention Schedule

Account records are kept for as long as your account is active and for a period required by applicable law thereafter. Once that period lapses and you request deletion, we remove your identifiable data from our systems.

Third-Party Data Sharing

We share your data only with processors essential to running your account — payment gateways, fraud-detection services and hosting providers. Each is bound by a data-processing agreement and may not use your data for their own purposes.

Requesting Changes to Your Data

You have the right to request a copy of your data, correct inaccuracies, or ask for deletion where law permits. Submit your request via email, live chat or the in-account Help Centre and we will respond within 7 working days.

Frequently Asked Questions About Your Privacy

The questions below cover what data we collect, how long we keep it, how payments like UPI and Paytm are handled, and how you can exercise your rights. If your question is not listed here, our privacy team can be reached via the contact options in the section above.

We collect your name, email address, phone number and date of birth during account creation. When you make a deposit, the payment processor shares a tokenised reference — we do not store your full UPI VPA, Paytm wallet number or PhonePe account details directly.

Your payment credentials stay with the respective gateway — UPI rail, Paytm or PhonePe — and we receive only a transaction token and status. We never log your VPA or bank account number in our own database, reducing exposure if our systems were ever accessed without authorisation.

Yes. Submit a data-access request through live chat, email or the in-account Help Centre. We will compile and send your data within 7 working days after verifying your identity against the email address registered to your account.

We retain your records for the period required under applicable Indian law and our internal data-retention schedule. Once that period ends and you have submitted a deletion request, identifiable personal data is removed from our live systems and backups within 30 days.

We share data only with processors needed to run your account — payment gateways, a fraud-detection service and our cloud-hosting provider. Each operates under a signed data-processing agreement. We do not sell your data or share it with advertisers or marketing companies.

Open the Help Centre inside your account, choose the Privacy section, and submit a correction or deletion request. Alternatively, email or live-chat our support team. After identity verification, corrections are applied within 5 working days and deletions within 30 days.

No. We use only session cookies and first-party analytics cookies scoped to the w2w.run domain. We do not deploy cross-site advertising trackers. You can disable non-essential cookies in your browser and your account will continue to function normally.