Privacy Policy

This policy explains how personal data is collected, used, stored, and protected during KYC verification.

Data Collected

We may collect name, email, phone, profile photo, address, date of birth, identity document details, PAN, Aadhaar last four digits, occupation, uploaded documents, selfie image, GPS coordinates, fingerprint/biometric records including device biometric proof, Mantra RD encrypted PID payloads, scanner exports, IP address, browser/device information, OTP logs, email logs, and audit logs.

Purpose

Data is used for identity verification, fraud prevention, legal/compliance obligations, account security, customer support, and audit trail maintenance.

Camera, Selfie and GPS

The portal can request camera permission for selfie and profile photo capture. Fingerprint capture does not use camera. During selfie upload, the browser asks location permission directly. If permission is granted, latitude, longitude, accuracy, timestamp, IP address, and device details are saved with the KYC record.

Fingerprint / Biometrics

Built-in fingerprint sensors such as Mac Touch ID, Windows Hello and mobile biometrics do not expose raw fingerprint images to websites. The portal stores a WebAuthn/device-biometric proof. External scanner capture can store encrypted Mantra RD PID data or scanner-exported files for KYC review.

Access Control

Only authorized admins/reviewers may access KYC data. Document, selfie, profile photo and biometric downloads are served through controlled authentication checks.

Retention and Requests

Data is retained as required for business, legal, compliance, audit, and fraud-prevention purposes. Users may contact support for correction or privacy requests.