At DigiGullak, we value your trust. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

1. Data We Collect

• Personal: Name, mobile number, email, DOB.
• KYC: PAN, Aadhaar, government IDs.
• Financial: UPI ID, bank details (via secure partners).
• Transaction: Auto-debits, purchases, redemptions.
• Device: IP, cookies, device ID for analytics and security.

2. How We Use Data

• To process savings, purchases, and redemption of gold.
• To comply with KYC and regulatory obligations.
• To improve experience and send alerts.
• To prevent fraud or misuse.

3. Data Sharing

• MMTC-PAMP for gold operations.
• Banks & payment partners for settlements.
• Authorities when legally required.

We never sell or rent your data for marketing.

4. Security

• End-to-end encryption.
• Regular audits and role-based access.

5. Your Rights (DPDP Act 2023/25)

• Access, correct, or delete data.
• Withdraw consent anytime.
• Nominate a data representative if applicable.

6. Data Retention

• Data retained as per law or until account closure.
• Inactive accounts may be deleted after 3 years.