Back to Homepage

Privacy Policy

Last updated: January 2026

1. Information We Collect

  • Account Information: Name, email address, phone number, and UPI ID you provide during registration or profile update.
  • Transaction Data: Order history, cart items, affiliate click IDs, cashback amounts earned and withdrawn.
  • Device & Usage Data: IP address, browser type, pages visited, and referrer URLs — used solely for click tracking and fraud prevention.
  • Payment Details: We do not store card numbers. UPI IDs and bank details are stored only for processing withdrawal requests initiated by you.

2. How We Use Your Information

  • To create and manage your account and process orders.
  • To track affiliate clicks and credit confirmed cashback to your wallet.
  • To process withdrawal requests to your UPI ID or bank account.
  • To send transactional emails (order confirmation, withdrawal status).
  • To detect and prevent fraudulent activity.
  • We never sell your personal data to third parties.

3. Affiliate Tracking

  • When you click a cashback deal, we generate a unique click ID (sub-ID) appended to the retailer URL. This lets us match your click to a confirmed purchase for cashback crediting.
  • Retailers (Amazon, Flipkart, Myntra, etc.) may place their own cookies. We have no control over their data practices. Please review each retailer's privacy policy before purchasing.

4. Cookies & Local Storage

  • We use browser localStorage to store your authentication token. No third-party tracking cookies are set by KoshVerse itself.
  • You can clear your browser data at any time to remove stored tokens.

5. Data Security

  • Passwords are hashed using bcrypt (12 rounds) — never stored in plain text.
  • All data transmission uses HTTPS/TLS encryption.
  • Authentication tokens are signed JWTs with a server-side secret key.
  • Admin panel access requires JWT role verification on every request.

6. Data Retention

  • Your account data is retained as long as your account is active.
  • You may request account deletion by contacting support. Transaction records may be retained for legal compliance for up to 3 years.

7. Your Rights

  • Access: Request a copy of the data we hold about you.
  • Correction: Update your name, phone, or UPI ID from your profile.
  • Deletion: Request deletion of your account and personal data.
  • Portability: Request your order and cashback history in CSV format.
  • Contact: Privacy Team

8. Changes to This Policy

  • We may update this policy periodically. Material changes will be notified via the email registered to your account. Continued use of the platform constitutes acceptance.
← Back to Home