Legal
DPDP Notice
Effective date: 1 January 2026
This is the formal notice DhanSafe (the "Data Fiduciary") provides you (the "Data Principal") before processing your personal data under Section 5 of the Digital Personal Data Protection Act, 2023.
1. Who is collecting your data?
Data Fiduciary: WealthGuard Global LLP
Registered office: Bengaluru, Karnataka, India.
CIN: U72900KA2024PTC000000.
Data Protection Officer: Mr. Nitish Kumar, service@dhansafe.com.
2. What personal data is being processed?
- Identity: name, date of birth, PAN, masked Aadhaar (post-verification), mobile, email.
- Financial: documents you upload — insurance, bank, MF, EPF, property papers.
- Relationship: details of family members you grant access to.
- Technical: device data, IP address, usage logs (for security only).
3. Purpose of processing
Your personal data is processed for the following specified purposes only:
- To deliver the DhanSafe vault and Readiness Score service.
- To verify your identity via authorised methods (UIDAI Aadhaar OTP, PAN).
- To handle claim recovery against Indian financial institutions, on your authority.
- To communicate transactional updates (recovery progress, KYC issues).
- To comply with applicable Indian financial, tax, and regulatory obligations.
- To detect, prevent and respond to security incidents.
We do not process your personal data for advertising, marketing to third parties, or profiling.
4. Basis of processing
Processing is based on your explicit consent, granted at signup, and reaffirmed at each material change. Where processing is required for legitimate uses under Section 7 (such as compliance with law), this is clearly indicated.
5. Your rights as a Data Principal
Under Sections 11–14 of the DPDP Act:
- Right to information: know what data is held about you.
- Right to access: get a copy of your data anytime.
- Right to correction and erasure: ask us to update or delete your data.
- Right to grievance redressal: we respond within 30 days.
- Right to nominate: appoint a person to exercise your rights if you become incapacitated.
- Right to withdraw consent: with one-click data export.
Exercise any right by writing to service@dhansafe.com.
6. Your duties as a Data Principal
Under Section 15 of the DPDP Act, you agree to:
- Not impersonate another person.
- Not suppress material information.
- Not file false or frivolous grievances.
- Provide authentic and verifiable information when exercising your rights.
7. Data retention
We retain your data only as long as necessary for the purposes above, or for the duration required by Indian law (such as 7 years for financial records under the Income Tax Act, 1961).
8. Sharing & transfer
- Sharing with authorised Indian institutions during claim recovery, on your authority.
- Processing by India-resident vendors under data-processing agreements.
- No transfer of personal data outside India — your data lives in Mumbai (primary) and Hyderabad (DR).
9. Security safeguards
We use reasonable security practices in line with Rule 8 of the IT (Reasonable Security Practices) Rules, 2011, including AES-256 encryption at rest, TLS 1.3 in transit, zero-knowledge architecture, MFA for staff access, and quarterly third-party penetration testing.
10. Breach notification
In the event of a personal data breach affecting your information, we will notify the Data Protection Board of India and you within 72 hours of becoming aware, in accordance with Section 8(6) of the DPDP Act.
11. Grievance redressal
Grievance Officer: Mr. Nitish Kumar, service@dhansafe.com.
Address: WealthGuard Global LLP, 1237, First Floor, Sri Sai Crystal, 5th Main, 7th Sector, HSR Layout, Bangalore 560102.
Grievances are acknowledged within 24 hours and resolved within 30 days.
If unsatisfied, you may appeal to the Data Protection Board of India once it is operational.
12. Changes to this notice
We will notify you of any material change to this notice at least 30 days in advance via email and an in-app notice, and provide an opportunity to withdraw consent.
