Reference

How a90 Handles Your Personal Data

At a90, we take the handling of your personal data seriously — this page sets out exactly what we collect, why we collect it, and how long we…

Data TransparencyIndian Account HoldersYour Rights ExplainedSecure StorageContact Us Anytime
a90 How a90 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about how your personal data is handled, want to request a copy of your data, or need to raise a concern, our privacy team is available through the channels below. We aim to respond to all privacy-related requests within 72 hours of receipt.

Team online

Email Privacy Team

Send your data request or privacy concern to our dedicated email address. Include your registered account email so we can locate your records and respond accurately within the stated timeframe.

Live Chat Support

Open the live chat widget from any page on a90 and ask to be connected to the privacy or data team. Our agents are available around the clock to log your request and escalate it immediately.

In-Account Help Centre

Log in to your account, navigate to the Help Centre, and select the Privacy and Data category. From there you can submit a formal data access, correction or deletion request directly through the platform.

HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

We have built our data practices around clarity and control — here is a breakdown of the six core areas that cover how your information is managed from…

Data Collection Scope

We collect only what is needed to run your account: contact details, payment method references such as your UPI ID…

Cookie Usage

Our platform uses functional cookies to keep you logged in and analytical cookies to understand how pages are navigated.

Account Security Measures

Your account is protected by password hashing, two-factor authentication and session timeout controls.

Data Retention Periods

Transaction records are retained for a period required by applicable financial regulations.

Third-Party Data Sharing

We share data only with payment processors who handle your UPI, Paytm and PhonePe transactions, and with fraud-prevention services.

Requesting Changes to Your Data

You have the right to access, correct or request deletion of your personal data at any time.

Your Privacy Questions Answered

Below are the questions we receive most often about data handling, account privacy and your rights as an a90 account holder in India. If your question is not listed here, contact our privacy team directly through any of the channels above.

We collect your name, email address, mobile number, date of birth and payment method references such as your UPI ID or Paytm number. We also log your device type and IP address for security and fraud-prevention purposes.

Payment identifiers like your UPI handle or Paytm number are encrypted in transit and at rest. We store a tokenised reference only — never your full bank account details — and our payment processors are contractually bound to match our security standards.

Yes. Submit a data access request through the Help Centre in your account or by emailing our privacy team. We will compile and deliver a copy of all personal data we hold on your account within the timeframe required by applicable law.

Log in to your account and use the Privacy and Data section of the Help Centre to submit a deletion request. We will remove your data from live systems once any mandatory legal retention periods have been satisfied and confirm deletion by email.

No. We do not sell or rent your personal data to advertisers, marketing agencies or data brokers. Data is shared only with payment processors and fraud-prevention partners who are each bound by a data processing agreement.

Transaction records are retained for the period required under applicable financial and regulatory law. Profile data is held for as long as your account is active. After a verified deletion request and any legal hold period, data is purged from all live systems.

Contact our privacy team immediately via live chat or email. We will investigate the incident, lock any suspicious sessions, and inform you of our findings within 24 hours. You should also change your password and review your two-factor authentication settings right away.