Reference

How 2qa Handles Your Personal Data

At 2qa, we keep your personal data under strict controls — what we collect, why we collect it, and how long we hold it are all spelled out…

Data collected only as neededNo sale of personal dataYour right to access & erasureIndia-region data handlingSecure encrypted storage
2qa How 2qa Handles Your Personal Data
REACH OUR PRIVACY TEAM

Contact Us About Your Data

If you have a question about how your personal data is handled, want to request a copy of what we hold, or need to ask for deletion, our privacy support team is available through the channels below. We aim to respond to all data-related requests within 30 days, in line with applicable requirements where local law applies.

Team online

Email Privacy Desk

Send a written data request to our privacy team at any time. We acknowledge receipt within 48 hours and aim to resolve data access or deletion requests within 30 calendar days.

Live Chat Support

Reach our support agents directly through the in-platform chat. For privacy matters, our agents escalate your query to the privacy desk on the same day you contact us.

In-Account Help Centre

Log in and head to the Help section in your account dashboard. A dedicated privacy request form lets you submit a data access, correction or deletion request without leaving the platform.

DATA HANDLING PRACTICES

How We Protect and Manage Your Account Data

From the moment you create an account, we apply layered security controls — encrypted storage, access-restricted databases and routine audits — to keep your information safe.

Encrypted Data Storage

All personal data — name, contact details, payment reference numbers from UPI or Paytm — is stored using AES-256 encryption. Access is restricted to authorised personnel with a documented business need, and access logs are audited quarterly.

Cookie Use and Control

We use session cookies to keep you logged in and analytics cookies to understand how pages are navigated. You can adjust cookie preferences through your browser settings at any time without affecting core account functions like deposits via PhonePe.

Account Security Measures

Your account is protected by password hashing and optional two-step verification. Suspicious login attempts trigger an automatic hold and an email alert, giving you a chance to confirm or deny access before anything changes.

Data Retention Schedule

We hold active account data for as long as your account remains open. After closure, transaction records are retained for the period required under applicable financial regulations, then permanently deleted. Non-essential logs are cleared within 90 days.

Your Right to Request Changes

You may request a copy of the data we hold, ask us to correct inaccurate records, or request deletion of your account data. Requests submitted through our Help Centre or privacy email desk are processed within 30 days.

Privacy Desk Contact Path

Our dedicated privacy desk handles all data-related queries separately from general support. Send a request by email or through the in-account form; include your registered email address so we can locate your records and respond accurately.

Frequently Asked Privacy Questions

We have put together answers to the questions we hear most often about how your data is handled on 2qa. If your question is not here, reach out to our privacy desk directly.

We collect your name, email address, phone number and the payment reference identifiers linked to UPI, Paytm or PhonePe transactions. We also log device type and IP address for security purposes. We do not collect or store UPI PINs or full payment credentials.

We do not sell or share your personal data with third-party advertisers. Data may be shared with payment processors — such as your UPI or Paytm provider — strictly to complete transactions, and with service partners bound by confidentiality agreements.

Transaction and identity records are retained for the period mandated by applicable financial regulations after account closure. Non-essential data such as session logs is deleted within 90 days of account closure, and all remaining data is purged once the retention period expires.

Submit a data access request through the privacy form in your account Help section, or email our privacy desk with your registered email address. We acknowledge the request within 48 hours and deliver the data summary within 30 calendar days.

Yes. Submit a deletion request via the in-account Help form or by emailing our privacy desk. We will delete all non-mandatory data within 30 days. Certain transaction records must be kept for the regulatory period before deletion, and we will inform you which records fall into that category.

We use session cookies for login continuity and analytics cookies to understand navigation patterns. You can disable non-essential cookies through your browser settings. Disabling analytics cookies does not affect deposits, withdrawals or any account function.

Contact our privacy desk by email or through the in-platform chat. If you feel your concern has not been resolved satisfactorily, you may escalate to the relevant data-protection authority applicable in your region where local law permits. We cooperate fully with such inquiries.