Reference

How x18 Handles Your Personal Data

At x18, your personal data belongs to you — and we treat it that way.

Data collected only as neededEncrypted account storageUPI & Paytm transaction privacyRight to access your dataIndia-aware data handling
x18 How x18 Handles Your Personal Data
PRIVACY CONTACT PATHS

Reach Us About Your Privacy Rights

If you want to access, correct, or delete the personal data we hold about you, our privacy support team is reachable around the clock. Choose the channel that works best for you and we will respond within the timeframes set out below.

Team online

Email Privacy Team

Send a written request to our dedicated privacy address. We acknowledge receipt within 24 hours and aim to resolve data access or deletion requests within 30 days of receiving them.

Live Chat Support

Open the live chat window on x18 and ask to speak with a privacy agent. Agents are available around the clock and can raise a formal data request on your behalf while you wait.

Account Settings Panel

Log into your account and navigate to the Privacy section of Settings. You can download a copy of your stored data or submit a deletion request directly without contacting support.

HOW WE PROTECT YOU

Data Handling, Cookies and Account Security

Security is not a checkbox for us — it is woven into every layer of how account data moves through x18.

Encryption at Rest and in Transit

All personal data stored on our servers is encrypted using AES-256. Data in transit between your device and our platform travels over TLS 1.3, meaning your UPI or PhonePe payment details are never exposed in plain text at any point.

Cookie Policy and Your Choices

We use session cookies to keep you logged in and analytics cookies to understand which pages are visited most. You can manage cookie preferences through your browser settings at any time; opting out of analytics cookies does not affect your ability to use the platform.

Payment Data Isolation

We do not store full Paytm wallet credentials or UPI PIN data on our servers. Payment authentication happens on the processor's own secure environment; x18 receives only a transaction confirmation reference once the transfer clears.

Account Access Security

Every login attempt is logged with device fingerprint, IP, and timestamp. Suspicious access patterns — such as logins from a new device in a different city — trigger an email alert to the address on your account before access is granted.

Data Retention Schedule

Active account data is retained while your account remains open. If you close your account, we retain only the minimum records required by applicable local law, then delete the rest within 90 days of the legal retention period expiring.

Requesting Changes to Your Data

You have the right to correct inaccurate personal data at any time. Submit a correction request via live chat or the Account Settings panel; our team will update verified records within seven working days and confirm the change by email.

Frequently Asked Privacy Questions

Below are the questions we hear most often about how x18 manages personal data, your rights as an account holder, and how to act on those rights.

We collect your name, email address, contact number, and the payment method details you provide — such as your UPI ID or the mobile number linked to Paytm or PhonePe. We also log device and session data for security purposes.

We share only the minimum data necessary with payment processors — Paytm, PhonePe, UPI networks — to complete your transactions. We do not sell personal data to advertisers or unrelated third parties under any circumstances.

Log into your account and go to Settings, then Privacy, where a data export request can be submitted directly. Alternatively, contact our privacy team via live chat or email and we will prepare your data package within 30 days.

Yes. Submit a deletion request through Account Settings or by contacting our privacy team. We will delete all data not required by applicable local law within 90 days of your request being verified.

Payment authentication is handled entirely on the processor's secure infrastructure. x18 receives only a transaction reference code — not your UPI PIN, PhonePe credentials, or full account number — and stores that reference in an encrypted database.

We use essential session cookies to keep you logged in and optional analytics cookies to understand page performance. You can disable analytics cookies through your browser settings without affecting access to any part of the platform.

Once you close your account, we retain only the records that applicable local law requires us to keep, then delete the rest within 90 days of that retention period ending. We will confirm deletion by email when complete.