RozGold Privacy Policy

NRF Fintech LLP - Represented as a brand "RozGold" ("Company", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application, website, or related services.

1. Information We Collect

When you use RozGold (a brand of NRF Fintech LLP), we may collect:

• Personal Information: Name, Date of Birth, Gender, Email, Mobile number, PAN, Aadhaar (if required for KYC).
• Financial Information: Bank account details, UPI ID, payment instrument details.
• KYC & Compliance Data: Documents submitted for identity verification as per RBI/FIU-IND guidelines.
• Transaction Data: Gold purchase, sale, redemption, and wallet transaction history.
• Device & Technical Data: IP address, device model, OS, geolocation, cookies, and app usage statistics.

2. How We Use Your Information

We use the collected data to:

1. Provide and improve our gold savings and investment services.
2. Verify your identity (KYC) and comply with regulatory obligations (PMLA, FIU-IND).
3. Process transactions including buying, selling, and redeeming gold.
4. Communicate updates, offers, and gold price alerts.
5. Prevent fraud, unauthorized access, and ensure account security.
6. Improve user experience, customer support, and app performance.

3. Sharing of Information

We do not sell your personal data. We may share data with:

• Gold Aggregator Partner (e.g., Augmont): To execute transactions, store gold, and ensure redemption.
• Payment Gateways/Banking Partners: For secure payment processing.
• Regulatory Authorities: If required by law, court order, or government regulations (RBI, FIU-IND, UIDAI).
• Service Providers: KYC verification, IT infrastructure, SMS/email services.

4. Data Security

• All data is encrypted in transit (SSL/HTTPS) and at rest.
• Gold holdings are stored securely with SEBI/IBJA-recognized custodians via Augmont.
• Only authorized personnel have access to sensitive information.
• In case of a data breach, users will be notified as per DPDP Act requirements.

5. User Rights

As per Indian Data Protection laws, you have the right to:

• Access, correct, or update your personal data.
• Withdraw consent for non-essential data processing.
• Request deletion of your account and personal data (subject to regulatory record-keeping).
• Opt-out of marketing communications.

6. Data Retention

• KYC and transaction data will be stored for minimum 5 years as required by PMLA/FIU-IND regulations.
• Other personal data is retained only as long as necessary to provide services.

7. Cookies & Analytics

We use cookies and analytics tools to enhance user experience, personalize content, and analyze app performance. Users can disable cookies in browser/app settings.

8. Grievance Redressal

If you have any concerns about data usage, please contact our Grievance Officer:

9. Policy Updates

We may update this Privacy Policy from time to time. Updates will be posted on the app and website. Continued use of our services constitutes acceptance of the updated policy.