Privacy Policy

When you create and use a Dovapay account, we collect certain information necessary to provide our services. The types of information we collect include:

Category	Data Collected	Purpose
Identity	Full name, date of birth (if provided)	Account registration and verification
Contact	Email address, mobile number	Authentication, OTP delivery, communication
Payment	UPI IDs associated with your account	Processing deposits and withdrawals
Transaction	Deposit amounts, withdrawal requests, cashback history, task completions	Maintaining your account records
Technical	IP address, browser type, device information	Security, fraud prevention
Usage	Pages visited, features used, session duration	Platform improvement

We collect only the information that is necessary to operate our platform and provide our services. We do not collect or store payment card details.

The information we collect is used solely to operate and improve Dovapay. Specifically, we use your data to:

• Process Transactions: Verify deposits, credit cashback to your wallet, and process withdrawal requests to your registered UPI ID.
• Send OTPs: Deliver one-time passwords to your registered mobile number for secure authentication and verification.
• Provide Support: Respond to your queries, resolve disputes, and assist with account-related issues.
• Prevent Fraud: Analyze activity patterns to detect and prevent fraudulent or abusive behavior.
• Send Notifications: Communicate important updates about your account, transactions, or changes to our services.
• Improve the Platform: Analyze usage patterns to improve features, performance, and user experience.
• Legal Compliance: Meet our legal and regulatory obligations under applicable laws.

Dovapay does not sell, rent, or trade your personal information to third parties for commercial purposes. We are committed to keeping your data private.

We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers strictly necessary to operate our platform (such as SMS and email providers). These partners are contractually bound to protect your data and may not use it for any other purpose.
• Legal Requirements: We may disclose information if required to do so by law, court order, or a valid government request from law enforcement authorities.
• Fraud Prevention: We may share information with relevant parties where there is a reasonable belief of fraudulent activity, in order to protect the platform and its users.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will provide notice before such a transfer occurs.

We do not disclose your UPI IDs or financial transaction data to any third party beyond what is strictly necessary to process your transactions.

We take reasonable and industry-standard measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Passwords are stored using strong cryptographic hashing algorithms — we never store plaintext passwords.
• Sensitive data is encrypted in transit using HTTPS/TLS protocols.
• Access to user data is restricted to authorized personnel only, on a need-to-know basis.
• Regular security reviews and monitoring of our systems for vulnerabilities.
• Session management controls to protect active user sessions.

Your mobile number is a core component of your Dovapay account and is used for the following purposes only:

• Sending one-time passwords (OTPs) for account registration and secure login verification.
• Account recovery and identity verification when required.
• Critical account notifications such as large withdrawal alerts or security events.

Your mobile number is never shared with third parties for marketing, sold to data brokers, or used for any purpose other than those described above. OTPs expire within a short time window and cannot be reused.

SMS delivery for OTPs is handled by our SMS service provider (Fast2SMS), which processes your mobile number solely for message delivery and is bound by a data processing agreement.

Dovapay uses cookies and similar session technologies in a minimal and purposeful manner. We use only:

• Session Cookies: These are essential cookies that keep you logged in during a browsing session. They are deleted when you close your browser and do not track you across other websites.
• Security Tokens: Used to prevent cross-site request forgery (CSRF) attacks and protect the integrity of your account actions.

We do not use:

• Advertising or targeting cookies
• Third-party analytics cookies (e.g., Google Analytics)
• Persistent tracking cookies that follow you across the web
• Fingerprinting technologies

To deliver our services effectively, Dovapay works with the following carefully selected third-party service providers:

Provider	Service	Data Shared
Fast2SMS	SMS / OTP Delivery	Mobile number (for message delivery only)
Brevo (Sendinblue)	Transactional Email	Email address and name (for email delivery only)

Each of these providers is contractually obligated to use your data only for the specific service they provide to us, and to comply with applicable data protection laws. We do not share your financial or transaction data with these providers.

Dovapay does not integrate with any advertising networks, social media tracking pixels, or data broker services.

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Active Accounts: Account data (name, contact details, transaction history) is retained while your account remains active on the platform.
• Closed Accounts: Upon account deletion, most personal data is deleted within 30 days. Transaction records may be retained for up to 7 years as required by financial regulations and legal compliance obligations.
• OTP Logs: OTP delivery logs are retained for a short period for security purposes and then automatically deleted.
• Security Logs: Login history and security event logs are retained for up to 12 months to support fraud detection and investigation.

After the applicable retention period, your data is securely deleted or anonymized so it can no longer be associated with you.

You have the following rights regarding your personal information held by Dovapay:

• Right to Access: You can request a summary of the personal information we hold about you.
• Right to Update: You can update your contact information, UPI ID, and other account details directly from your account dashboard.
• Right to Delete: You can request deletion of your account and associated personal data. Note that transaction records may be retained as required by law.
• Right to Portability: You can request an export of your transaction history in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time, though this may affect your ability to use certain features.

To exercise any of these rights, please contact us via our Telegram support channel. We will respond to your request within a reasonable timeframe.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:

• Telegram Support: t.me/dovapay_support — fastest response
• Platform: Available through the Help section within your Dovapay dashboard when logged in.

We take privacy matters seriously and aim to address all inquiries within 24–48 business hours. This Privacy Policy was last updated in April 2026. We encourage you to review it periodically, as we may update it to reflect changes to our data practices or applicable law.