Privacy Policy

This Privacy Policy explains how Dhathu Technologies Pvt. Ltd. ("Dhathu", "we", "us") collects, uses, shares, and protects your information when you use the Dhathu website and mobile app (together, the "Platform"). By using the Platform, you agree to this policy.

1. Information we collect

• Identity & KYC data: name, date of birth, gender, PAN, and Aadhaar-based verification details, collected and verified through our KYC partner, Cashfree, as required by law to buy gold and silver.
• Contact data: mobile number, email address, and postal/delivery address.
• Financial data: UPI ID, bank account details (for withdrawals), and AutoPay mandate details, processed through our payment partner, Razorpay/RazorpayX. We do not store full card or banking credentials.
• Transaction data: your gold/silver holdings, purchases, sales, AutoPay activity, savings goals, coin orders, and nominee details.
• Device & usage data: device identifiers, IP address, app and website interactions, and cookies (see our Cookie Policy).

2. How we use your information

• To create and verify your account and complete mandatory KYC.
• To process purchases, sales, AutoPay, withdrawals, and coin deliveries.
• To store your gold and silver with MMTC-PAMP and reflect accurate holdings.
• To send transactional alerts, OTPs, Muhurth notifications, and service updates via SMS (MSG91), push, and email.
• To provide support, prevent fraud, meet legal and tax obligations, and improve the Platform.

3. How we share your information

We share data only with the partners required to run the service, and only to the extent needed: MMTC-PAMP (asset storage), Razorpay/RazorpayX (payments & AutoPay), Cashfree (KYC), MSG91 (SMS/OTP), and our cloud and infrastructure providers. We may disclose information where required by law, regulation, or valid legal process. We do not sell your personal data.

4. Data storage & security

Your data is stored on secured cloud infrastructure (including AWS and managed databases) with encryption in transit and at rest. PAN, Aadhaar, and bank details are masked in our interfaces. Access is restricted and logged. While we use industry-standard safeguards, no system is perfectly secure.

5. Data retention

We retain your data for as long as your account is active and as required by applicable laws (including tax, anti-money-laundering, and record-keeping rules). KYC and transaction records may be retained for the statutory period even after account closure.

6. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is consent-based. To exercise these rights, contact our Grievance Officer. Some data must be retained to meet legal obligations even after a deletion request.

7. Children

The Platform is intended only for users aged 18 and above. We do not knowingly collect data from minors.

8. Changes & contact

We may update this policy and will post the revised version here with a new 'last updated' date. Questions? Contact grievance@dhathu.in or support@dhathu.in.