Reference

How 3shape Handles Your Personal Data

At 3shape, we take the privacy of your account details seriously — this page sets out exactly what data we collect, why we collect it, and how you…

Data Collected TransparentlyUPI & Paytm Payment PrivacyAccount Security ProtocolsRight to Access Your DataIndia-Compliant Data Practices

Browse lobby Read FAQ

What Data We Collect and Why

3shape Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

When you open an account with us, we collect the details you provide during registration — your name, email address, and contact number. When you make a deposit via UPI, Paytm, or PhonePe, our payment processor receives transaction metadata such as amount and timestamp; we do

1
not store your full UPI handle or Paytm wallet credentials on our servers. We also collect device identifiers and session logs to keep your account secure and to detect irregular activity. This data is used solely to operate your account, process withdrawals, and improve the platform
2
for India conditions. We do not sell your personal information to third parties.

Service availability depends on jurisdiction. It is the user's responsibility to check local law before access.

PRIVACY CONTACT PATHS

Reach Us About Your Privacy

If you have a question about how we process your data, want to request a copy of your account information, or need to update details we…

DATA HANDLING STANDARDS

How We Protect and Manage Your Information

We apply layered security to your account data — from how it enters our system through UPI or PhonePe flows, to how long we retain it after account closure.

Encrypted Data Storage

All personal data stored on our servers is encrypted at rest using industry-standard AES-256 encryption. Payment reference data from UPI and Paytm transactions is tokenised before it reaches our database layer.

Cookie Usage Explained

We use session cookies to keep you logged in and analytics cookies to understand which lobby sections you visit most. You can manage cookie preferences from the settings panel without affecting your core account functions.

Account Security Alerts

Any login from an unrecognised device triggers an automatic SMS alert to your registered Indian mobile number. You can flag and terminate unrecognised sessions directly from your account security page.

Data Retention Schedule

We retain active account data for the duration your account remains open. After closure, transaction records are held for the period required under applicable Indian financial regulations, then securely deleted.

Third-Party Data Sharing

We share data only with payment processors like UPI networks and PhonePe, and with fraud-prevention partners. These processors operate under data agreements that prohibit them from using your information for their own marketing.

Your Right to Request Changes

You may request a full export of the data we hold, ask us to correct inaccurate records, or submit a deletion request at any time. We confirm receipt within 24 hours and complete verified requests within 30 days.

Common Privacy Questions from Our Users

The questions below cover the data rights and account privacy topics we hear most from people in India. If your question is not addressed here, reach out via the privacy contact paths listed above and we will respond within 72 hours.

We collect your name, email address, mobile number, and the device identifier used to access the account. Payment details like UPI reference IDs are handled by the payment processor and are not stored in full on our servers.

We share data only with payment processors — UPI networks, Paytm, PhonePe — and with fraud-detection partners. None of these parties may use your information for their own marketing or sell it to unrelated third parties.

Send a written request from your registered email address to our privacy desk or submit the form in Settings → Help → Privacy inside the app. We complete verified export requests within 30 days of confirming your identity.

Yes. Submit a deletion request through live chat or email. We will remove personal data not required for legal or regulatory retention. Transaction records tied to Indian financial compliance rules are kept for the mandatory period, then deleted.

Every login from an unrecognised device sends an SMS alert to your registered Indian mobile number. Account data is stored with AES-256 encryption, and you can force-terminate any active session you do not recognise from the security page.

Active data is held while your account is open. After closure, we retain transaction records only for the period required under applicable Indian financial regulations. Once that period ends, your records are securely deleted from our systems.

Our policy covers data we receive from those transactions — amounts, timestamps, reference IDs. The full payment flow is also subject to the privacy terms of PhonePe and Paytm themselves, which we recommend you read separately.

How 3shape Handles Your Personal Data

Reach Us About Your Privacy

How We Protect and Manage Your Information

Encrypted Data Storage

Cookie Usage Explained

Account Security Alerts

Data Retention Schedule

Third-Party Data Sharing

Your Right to Request Changes

Common Privacy Questions from Our Users

01 What personal data does 3shape collect when I open an account?

02 Does 3shape share my data with other companies?

03 How do I request a copy of the data 3shape holds about me?

04 Can I ask 3shape to delete my personal data?

05 How does 3shape protect my account from unauthorised access?

06 How long does 3shape keep my data after I close my account?

07 Does the privacy policy apply to PhonePe and Paytm transactions?

Related Pages