Reference

How 4matic Handles Your Personal Data

At 4matic, your personal data belongs to you — we collect only what we need to run your account, process deposits via UPI, Paytm or PhonePe, and keep…

Data collected only as neededUPI, Paytm, PhonePe details encryptedRight to access your dataIndia-region data handlingDeletion requests accepted
4matic How 4matic Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you have a question about how your data is stored, want to request a copy of what we hold, or need to report a suspected data issue, our privacy team is reachable through three channels. We aim to respond to all data-related queries within 72 hours of receiving them.

Team online

Email Privacy Team

Write to [email protected] with your registered account email and the nature of your request. We acknowledge receipt within 24 hours and resolve data access or deletion queries within 72 hours.

Live Chat Support

Start a live chat session from your account dashboard and select the Privacy topic. Our support agents can escalate data requests to the privacy team directly during the chat, reducing back-and-forth email.

Account Settings Portal

Log in, go to Account Settings, and open the Data and Privacy section. From there you can download a copy of your stored profile data or submit a deletion request without contacting us manually.

HOW WE PROTECT YOUR ACCOUNT

Data Handling, Cookies and Account Security at 4matic

We apply encryption at rest and in transit for all account and payment data, including UPI and Paytm identifiers.

Encryption in Transit

All data exchanged between your device and our servers — including PhonePe and UPI payment confirmations — travels over TLS 1.2 or higher. We do not expose raw payment identifiers in any client-side log or analytics stream.

Cookie Management

We use session cookies to keep you logged in, analytics cookies to understand which pages load slowly, and no third-party advertising cookies by default. You can opt out of analytics cookies at any time using the cookie preference panel in the footer.

Account Security Measures

Two-step verification is available for your account login. We send an SMS or email alert each time a new device is used to access your account, giving you a chance to flag any access you did not authorise.

Data Retention Schedule

Active account data is held for the life of the account plus the regulatory retention window required under applicable Indian financial rules. Non-essential data — such as browsing session logs — is purged on a 90-day rolling cycle.

Who to Contact for Changes

To update your registered email, phone number, or linked Paytm address, write to [email protected] or use the Account Settings portal. Identity verification is required before any change to primary contact details takes effect.

Requesting Data Access or Deletion

Under applicable data protection principles, you may request a full export of the data we hold about you, or ask us to delete non-regulatory records. Submit the request via email or the in-app portal; we confirm completion within 30 days.

Your Privacy Questions, Answered

Below are the questions we hear most often about how 4matic collects, stores and handles your personal data. If your question is not here, reach us at [email protected] and we will respond within 72 hours.

We collect your name, email address, mobile number, date of birth for age verification, and the payment identifiers you link — such as your UPI ID, Paytm mobile number or PhonePe handle. We do not collect data beyond what is needed to operate your account.

We do not sell your personal data. We share it only with payment processors like UPI networks, Paytm and PhonePe to complete transactions, and with fraud-detection services where required. All third parties are contractually bound to the same data-protection standards we follow.

Log in to your account, go to Account Settings, and open the Data and Privacy section to download your data export. Alternatively, email [email protected] from your registered address and we will prepare the export within 14 days.

Yes. Data that is not subject to regulatory retention can be deleted on request. Submit the request via the Account Settings portal or email us. We confirm deletion within 30 days; records required under applicable financial regulations are retained for the mandatory period only.

Payment identifiers are encrypted at rest using AES-256 and in transit over TLS 1.2 or higher. We tokenise UPI and Paytm references so raw account numbers are never stored in our application database or exposed in any log file.

We use session cookies for login continuity and optional analytics cookies to measure page performance. No advertising or cross-site tracking cookies are placed by default. Adjust your cookie preferences at any time using the panel linked in the footer of every page.

Email [email protected] immediately with your account email and a brief description of the concern. Our privacy team will open an internal review within 24 hours and keep you updated at each stage until the matter is resolved.