Reference

How kolkatafota Handles Your Personal Data

At kolkatafota, we are clear about what data we collect when you open an account, how we store it, and exactly who can access it.

End-to-end encryptionNo third-party data salesUPI & Paytm data protectedPrompt deletion requests honouredIndia-region data handling
kolkatafota How kolkatafota Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Questions

If you have a question about how your data is handled, want to correct an entry on your account, or would like to request a copy of the information we hold, our…

Email Privacy Team Send a written request to our dedicated privacy address. Include your registered mobile number and a brief description of your request so we can locate your account records without delay.
Live Chat Support Start a live chat session from your account dashboard at any hour. Our agents can raise a formal privacy ticket on your behalf and provide a reference number for follow-up within the same conversation.
In-App Help Centre Navigate to Settings → Help → Privacy Request inside the kolkatafota app. The form routes directly to our data team and confirms receipt instantly, so you know your request is logged.
DATA HANDLING STANDARDS

Six Ways We Protect Your Account Data

Every safeguard listed below is active from the moment your account is created.

AES-256 Data Encryption

All personal data stored on our servers — including name, address, and linked payment details such as your UPI handle…

Cookie Controls in Your Account

You can review and adjust which cookie categories kolkatafota uses from your account Preferences page.

Payment Data Tokenisation

When you transact through Paytm or PhonePe, we never store raw card or wallet credentials.

Defined Data Retention Periods

Account data is held for the period required under applicable Indian law.

Access Request Fulfilment

You may request a copy of every data point we hold about you.

Third-Party Processor Vetting

Any processor we engage — such as payment gateway partners or fraud-detection services — must agree to data-handling standards equivalent…

Common Questions About Your Privacy at kolkatafota

The answers below cover the questions we receive most often about data collection, storage, access and deletion. If your question is not listed here, please reach our privacy team through live chat or email and we will respond with a written answer within five business days.

We collect your name, email address, mobile number, and the identity document you submit for verification. When you deposit via UPI or Paytm, we also receive the transaction reference number linked to that payment, which we use solely for reconciliation and dispute resolution.

No. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share data only with processors who help us operate the service — such as payment gateways — and only under strict contractual data-handling obligations.

Send a written request to our privacy email or raise a ticket through the in-app Help Centre under Settings → Help → Privacy Request. We verify your identity, then compile and deliver your data in a structured format within ten working days.

Yes. Once you close your account, submit a deletion request via email or live chat. We remove personal identifiers from our live systems within thirty days, subject to any retention period required under applicable Indian law for financial or regulatory records.

We use strictly necessary session cookies by default. Analytics and marketing cookies require your explicit consent and are off until you enable them. You can change these settings at any time through the Preferences page in your account dashboard.

We store only the transaction reference token returned by the payment gateway — never your raw wallet credentials or bank account details. Tokenisation happens at the gateway level, so your actual PhonePe or UPI account details are never written to our databases.

Contact our privacy team immediately via live chat or email with your account details and a description of the concern. We acknowledge all breach-related reports within twenty-four hours and provide a written response outlining the steps we are taking to investigate and resolve the matter.