Reference

How thambola Handles Your Personal Data

At thambola, we take what you share with us seriously — your name, contact details, payment method choices like UPI or PhonePe, and your account activity are held…

Data collected transparentlyRetention periods disclosedYour rights, clearly statedContact route always openIndia-applicable framework
thambola How thambola Handles Your Personal Data
REACH OUR PRIVACY TEAM

How to Contact Us About Your Data

If you have a question about your personal data, want to correct something we hold, or wish to make a formal request to delete your account information, our privacy team is ready to help. We aim to acknowledge every data-related request within 48 hours and resolve it fully within 30 days. You can reach us through any of the channels below — whichever suits you from Mumbai, Delhi or anywhere else in India.

Team online

Email Privacy Team

Write to our dedicated privacy address and describe your request. We respond within 48 hours and keep you updated on every step of the resolution process.

Live Chat Support

Open the chat window inside your thambola account to speak with a support agent who can raise a privacy ticket on your behalf and track it through to closure.

In-App Request Form

Navigate to Account Settings and choose the Data Request option. Fill in the form, submit it, and we will send a confirmation to your registered email address within one working day.

DATA HANDLING PRACTICES

How We Protect and Manage Your Information

Security is built into how we store and process your account data — from the moment you register to the day you request deletion.

Encrypted Storage

All personal data — name, phone number, email and linked payment details such as UPI handles — is stored with encryption at rest. No raw personal data sits in an unprotected database layer.

Cookie Policy

We use session cookies to keep you logged in and analytics cookies to understand which pages you visit most. You can adjust cookie preferences in your browser settings at any time without affecting your account.

Account Security

Every login attempt is verified against registered device fingerprints. If a new device tries to access your account, we send an alert to your registered phone number or email before access is granted.

Data Retention Schedule

We keep active account data for as long as your account remains open. Once you close your account, personal data is deleted within 90 days except where financial regulations require a longer retention window under applicable local law.

Third-Party Sharing

Payment processors like Paytm and PhonePe receive only the data fields needed to authorise your transaction — nothing more. We do not share your data with advertisers or data brokers under any circumstances.

Your Right to Access and Correct

You can view the personal data we hold by visiting Account Settings, and you can update name, phone or email directly there. For deletion requests or data portability, contact our privacy team directly and we will action the request within 30 days.

Frequently Asked Questions About Our Privacy Policy

We know that reading a privacy policy raises real questions. Below are the ones we hear most often — answered plainly so you know exactly where you stand when you use thambola from India.

We collect your name, email address, phone number and the payment method you choose — UPI, Paytm or PhonePe. We also record device identifiers and IP addresses to maintain account security and meet obligations under applicable local law.

We share data only with payment processors — UPI gateways, Paytm, PhonePe — and only the fields those providers need to complete a transaction. We do not sell your data to advertisers, data brokers or any third party for marketing purposes.

Once your account is closed, we delete personal data within 90 days. Financial transaction records may be retained beyond that window where applicable local law or financial regulations require it, and no longer than that period.

Yes. Submit a deletion request through Account Settings or email our privacy team. We will action verified requests within 30 days and send a confirmation once your data has been removed from our systems.

We use session cookies to keep you logged in and analytics cookies to see which pages you engage with. You can disable analytics cookies in your browser without losing access to any account feature; session cookies are necessary for the account to function.

Go to Account Settings and edit your name, phone number or email directly. For fields you cannot change yourself — such as identity-verified details — contact our privacy team and we will update the record after verifying your identity.

Yes. Payment data passed to UPI or PhonePe is encrypted in transit and we receive only a transaction reference, not your full payment credentials. No card numbers or UPI PINs are stored on our servers at any point.