Privacy Policy - GoldFin

Welcome to GoldFin Technologies ("GoldFin", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our gold loan management platform.

                In short: We collect information you give us, information we collect automatically, and information from third-party sources. We use this information to provide, improve, and secure our services. We do not sell your personal data to anyone.
            

1 Information We Collect

We collect information in the following ways:

Information You Provide Directly

Account Registration: Name, business name, email address, phone number, and password when you create an account.
Business Information: Company registration details, GST number, branch addresses, and other information required for compliance.
Customer Data: Your customers' names, Aadhaar/PAN numbers, addresses, and financial data that you upload or enter into GoldFin as part of your loan operations. You are the data controller for this information.
Payment Information: Billing details processed securely through Razorpay. We do not store your full card details.
Communications: Messages you send us via email, support tickets, or contact forms.

2 How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain the GoldFin platform.
To process transactions and send related information, including purchase confirmations and invoices.
To send administrative messages, such as updates, security alerts, and support responses.
To send promotional communications (only if you opted in — you may opt out at any time).
To monitor and analyse usage trends to improve the platform's performance and features.
To detect, investigate, and prevent fraudulent transactions and other illegal activities.
To comply with applicable laws and regulations in India, including the RBI guidelines for NBFCs.

3 Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in these limited circumstances:

Service Providers: We share data with vetted sub-processors (e.g., Razorpay for payments, AWS for hosting) who assist us in operating the platform, subject to strict confidentiality obligations.
Legal Requirements: We may disclose information if required by law, court order, or government authority (e.g., RBI audits, income tax notices).
Business Transfers: If GoldFin is acquired or merges with another company, your information may be transferred as part of that transaction. You will be notified via email.
With Your Consent: We may share information for any other purpose with your explicit consent.

4 Data Security

We implement industry-standard technical and organizational measures to protect your information:

All data is encrypted in transit .
Sensitive data at rest (customer PAN, Aadhaar) is encrypted.
Access to production systems is restricted by role-based access controls and multi-factor authentication.
Regular security audits and penetration testing are performed.
Automatic daily backups with 30-day retention.

Important: While we strive to protect your data, no security system is impenetrable. In the event of a data breach affecting your rights, we will notify you within 72 hours as required under applicable law.

5 Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

Account Data: Retained for the duration of your subscription and for 3 years after account closure, unless a longer period is required by law.
Financial Records: Loan transaction logs and payment records are retained for a minimum of 8 years as required by Indian financial regulations.
Logs: Server and application logs are retained for 90 days.
Marketing Data: Retained until you unsubscribe or request deletion.

When you terminate your subscription, you may request a full export of your data within 30 days. After this window, data is securely deleted.

6 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data (subject to legal retention obligations).
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request your data in a machine-readable format (CSV/JSON).
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Right to Lodge a Complaint: You may file a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us at evergreeninfotechngl@gmail.com. We will respond within 30 days.

7 Cookies & Tracking

We use cookies and similar tracking technologies to improve your experience:

Essential Cookies: Required for the platform to function (e.g., session authentication). Cannot be disabled.
Preference Cookies: Remember your settings such as language and branch selection.
Analytics Cookies: Help us understand how users interact with the platform (anonymised). You may opt out.

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from logging in to GoldFin.

8 Third-Party Services

GoldFin integrates with the following third-party services. Please review their respective privacy policies:

Razorpay — Payment processing (razorpay.com/privacy)
Amazon Web Services (AWS) — Cloud infrastructure & storage
Google Fonts — Typography delivery
WhatsApp Business API — Notification delivery (if enabled on your plan)

9 Children's Privacy

GoldFin is a business-to-business (B2B) platform intended solely for use by registered financial businesses and their adult staff. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our platform, please contact us immediately at evergreeninfotechngl@gmail.com.

10 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Send an in-app notification and/or an email to all account administrators at least 14 days before the changes take effect.

Your continued use of GoldFin after the effective date constitutes your acceptance of the updated policy.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer:

Email: evergreeninfotechngl@gmail.com
Phone: 9789011848
Address: poovancode junction , verkilambi to attoor road , Kanniyakumari district , Tamil Nadu , India

You may also review our Terms of Service for the full legal agreement governing your use of GoldFin.