Privacy Policy

ISHMART ("ISHMART", "we", "our", "us") is a fintech company operating in compliance with applicable Reserve Bank of India (RBI) guidelines, the Information Technology Act, 2000, and related rules. This Privacy Policy explains how we collect, use, store, process, and protect personal and financial information of users ("User", "you", "your") who access our website, mobile application, or services ("Services").

1. Personal Information We Collect

In accordance with RBI and KYC/AML regulations, ISHMART may collect and process the following Personal Information:

• Full name
• Mobile number and email address
• Date of birth
• Residential or business address
• Government-issued identification (PAN, Aadhaar, Passport, Voter ID, etc.)
• Photograph, signature, or video KYC data (where required)

This information is collected only for lawful purposes such as identity verification, regulatory compliance, and service delivery.

2. Financial Information

To provide payment and financial services, ISHMART may collect:

• Bank account details
• UPI or wallet identifiers
• Transaction details and payment history
• Merchant or beneficiary information

ISHMART does not store sensitive authentication data such as card CVV, PINs, or passwords, in line with RBI data security norms.

3. Purpose of Data Collection

Your information is collected and used for:

• Customer onboarding and KYC verification
• Processing digital payments and transactions
• Fraud detection, prevention, and risk management
• Customer support and grievance redressal
• Regulatory reporting and RBI compliance
• Improving system security and service quality

4. Legal Basis for Processing

ISHMART processes personal data based on:

• User consent
• Performance of contractual obligations
• Compliance with RBI and statutory requirements
• Legitimate interests such as fraud prevention and platform security

5. Data Sharing & Disclosure

User data may be shared strictly on a need-to-know basis with:

• RBI-regulated banks, NBFCs, and payment partners
• KYC and identity verification service providers
• Technology and cloud infrastructure partners
• Government authorities or regulators when legally required

ISHMART does not sell or rent personal data to any third party.

6. Data Security Measures

ISHMART implements RBI-recommended security controls including:

• Encryption of data at rest and in transit
• Restricted access and role-based controls
• Regular system audits and vulnerability assessments
• Continuous monitoring for suspicious activities

While we follow strong security practices, users acknowledge that no digital system is completely risk-free.

7. Data Retention

Personal and financial data is retained only for:

• The duration required to provide services
• Compliance with RBI, legal, and audit requirements
• Dispute resolution and fraud investigations

After the retention period, data is securely deleted or anonymized.

8. User Rights

Subject to applicable laws, users may:

• Access and review their personal data
• Request correction of inaccurate information
• Withdraw consent where legally permissible
• Request data deletion (subject to regulatory obligations)

9. Cookies & Tracking

ISHMART may use cookies and similar technologies to enhance user experience, analyze usage patterns, and improve security. Users may control cookie preferences through browser or device settings.

10. Children's Privacy

ISHMART services are not intended for individuals below 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Privacy Policy

ISHMART reserves the right to update this Privacy Policy in line with regulatory or business changes. Updates will be published on this page with a revised effective date.

12. Contact & Grievance Redressal

For privacy-related queries or grievances, contact ISHMART TECHNOGLOBAL SERVICES PVT LTD at +917303999829.