Privacy Policy

We collect information you provide when registering — your name, mobile number, email address, and identity documents (PAN, Aadhaar) for KYC verification. We also collect transaction data, device identifiers, and usage information to provide and improve our services.

Your information is used to: create and manage your DigiRich account; process gold purchases, sales and withdrawals; complete KYC verification as required by law; send transaction alerts and service updates; prevent fraud and ensure platform security; and comply with applicable laws and regulations.

We share your data only with: our licensed gold custody partner for transaction processing; Razorpay for payment processing; KYC verification agencies; and regulatory authorities as required by law. We do not sell your personal data to third parties.

We use industry-standard encryption (TLS/SSL) for data in transit and AES-256 for data at rest. Access to your personal data is restricted to authorised personnel only. We regularly audit our security practices to protect your information.

Your gold holdings are held in certified, insured vaults by our licensed gold custody partner. All transaction records are maintained securely and are available to you through your account history. We retain transaction records for a minimum of 7 years as required by law.

We use session cookies to keep you logged in and collect anonymised usage data to improve the app experience. We do not use third-party advertising cookies. You can clear cookies through your browser settings, though this may affect app functionality.

You have the right to access, correct, or request deletion of your personal data (subject to legal retention requirements). To exercise these rights, contact us at support@digirich.co. Note that some data cannot be deleted while your account remains active or during the legal retention period.

We may update this Privacy Policy from time to time. We will notify you of significant changes via app notification or email. Continued use of DigiRich after changes constitutes acceptance of the updated policy.