Reference

How disabar Handles Your Personal Data

This Privacy Policy explains exactly what personal data disabar collects when you open an account, how we use it, who we share it with, and how long we…

Data collected only as neededNo third-party data salesSecure account storageYour deletion rights honouredIndia-applicable policy
disabar How disabar Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us With Any Privacy Request

Email Privacy Team Send your data access, correction or deletion request to our dedicated privacy inbox.
Live Chat Support Open the chat widget inside your disabar account to speak with a support agent…
Written Request by Post For formal written requests regarding your personal data — including subject-access requests — you…
DATA HANDLING PRACTICES

How We Protect and Manage Your Data

disabar applies layered security controls across every stage of data handling — from the moment you enter your details at registration through to how we store and eventually delete them.

Data Collection Scope

We collect only what we need: your name, contact details, date of birth for eligibility verification, and payment-method identifiers such as your UPI handle or Paytm-linked mobile number. Nothing beyond what account operation requires.

Cookie Usage

Our platform sets strictly necessary cookies for session management, plus optional analytics cookies if you consent. You can withdraw cookie consent at any time through the preference centre in your account settings without affecting your ability to use disabar.

Account Security Controls

Passwords are stored as salted hashes — never in plain text. We enforce two-factor authentication prompts on login from unrecognised devices, and all data in transit between your browser and our servers is encrypted via TLS 1.2 or higher.

Data Retention Schedule

Active account data is retained for the duration of your relationship with us. After account closure, we retain records for the period required by applicable financial and legal obligations, then schedule them for secure deletion within 90 days of that period ending.

Who Sees Your Data

We share your data with payment processors (such as the UPI network or Paytm gateway) only to the extent needed to complete a transaction, and with KYC verification partners when identity checks are legally required. We do not sell your personal data to any third party.

How to Request Changes

Log in and visit the Account Settings page to update your contact details directly. For data you cannot edit yourself — such as historical transaction records — submit a written request via email and our privacy team will process it within the statutory timeframe.

Frequently Asked Privacy Questions

These are the privacy questions we hear most often from people who have opened an account with us. Each answer is specific to how disabar actually operates, not a generic template response.

We collect your full name, email address, mobile number, date of birth and a payment-method identifier such as your UPI handle. We collect only what is needed to operate your account and verify eligibility where local law requires it.

No. We do not sell, rent or trade your personal data to advertisers, data brokers or marketing firms. Data shared with third parties is limited to payment processors and identity-verification partners, and only for the specific transaction or check in question.

You can submit a subject-access request by emailing our privacy team with your registered email address as proof of identity. We will compile and send you a copy of your data within the timeframe set by applicable Indian data-protection rules.

Yes. Once your account is closed, you can submit a deletion request via email. We will erase data that we are not legally obliged to retain, and schedule the remaining records for deletion once the required retention period ends — typically within 90 days after that.

We store only a tokenised reference from your UPI or Paytm transaction, not full payment credentials. All payment data in transit is encrypted. The actual processing of funds happens on the payment provider's own secured infrastructure, governed by their security standards.

We retain certain records — such as transaction histories and identity-verification documents — for the period mandated by applicable financial regulations. After that obligation period ends, records are queued for secure deletion within 90 days.

Start by contacting our privacy team by email or live chat; we aim to resolve concerns within 15 business days. If you feel our response is inadequate, you have the right to escalate the matter to the relevant data-protection authority under applicable Indian law.