Your Privacy Matters To Us

Our Commitment

RichStone Assets Private Limited ("RichStone", "we", "our", "us") is engaged in providing wealth management, investment advisory facilitation, loan advisory services, insurance facilitation, corporate advisory, and allied financial services.

To provide these services, RichStone may be required to collect, use, share, or retain your Personal Data in compliance with regulatory, legal, and applicable requirements. Accordingly, your Personal Data may be shared with several regulatory authorities, or service providers, as applicable.

This Privacy Policy explains how RichStone collects, uses, shares, and safeguards your Personal Data when you access our website, mobile application (the "RichStone Assets" app), or interact with us through any other platform.

Legal Framework

RichStone is governed by applicable data laws in India, including:

• The Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023
• Other applicable rules, regulations, and guidelines, as amended from time to time

RichStone collects and processes Personal Data only to the extent necessary to provide services and comply with applicable laws. If you choose not to share required Personal Data, we may be unable to provide certain services.

"Personal Data" refers to any data about an individual who can be identified directly or indirectly. This includes data that a statutory authority makes or maintains accessible to the public person. "Protecting your privacy and Personal Data is a core commitment of RichStone."

Information / Personal Data Collected

RichStone may collect the following Personal Data, including but not limited to, directly or indirectly through its affiliates and authorised intermediaries:

• Personal Details: Name, contact details, email/postal address, date of birth, PAN, Aadhaar, passport, voter ID, driving licence, education details
• Financial Details: Income, expenses, net worth, credit history, bank details
• Transaction Details: Investment data, insurance, loan, equities, and payment history
• Employment details: Occupation, industry, employer name, designation, salary, benefits
• KYC and related data: Risk profile, assessment preferences, nominee and KYC documents, client photographs
• Voice recordings / Calls with customer support for service or grievance handling
• Behavioural data: Preferences, geolocation, device identifiers
• Complaint & dispute: Customer interactions, electronic signatures, transcripts, workflows
• Feedback: Opinions, survey responses, and reviews

Usage of Personal Data

Subject to applicable laws, RichStone may also use Personal Data to:

• Facilitate and process transactions
• Verify identity and conduct KYC/AML checks
• Provide brokerage, loan, insurance, and advisory services
• Respond to queries, complaints, and grievances
• Provide training updates to advisors / stakeholders
• Review, monitor, and assess products and services
• Conduct audits, compliance checks, and regulatory reporting
• Maintain accounts as required by law
• Communicate service updates, new products, and personalised offers
• Fulfil legal, regulatory, or account mandated requirements
• Protect and defend the rights of RichStone or its users

Sharing of Personal Data

RichStone may share Personal Data on a need-to-know basis with:

• Registrars & Transfer Agents (RTAs)
• Mutual funds, AMCs, insurers, banks, NBFCs
• Depositories, exchanges, clearing corporations
• KYC Registration Agencies (KRAs), CKYC Registry
• Regulatory / statutory bodies, government authorities and bodies
• Technology, cloud, CRM, payment gateways, and service providers

All such sharing is done subject to applicable stipulations and reasonable security practices. RichStone shall not be responsible for inaccuracies of Personal Data provided by you or those not attributable to RichStone.

Other Websites

Our website or app may contain links to third-party websites. RichStone is not responsible for the privacy practices or content of such third-party sites. Users are encouraged to review their privacy policies separately.

Storage & Security Practices

All Personal Data is stored in government-approved locations as mandated by the website or applicable competent agency, in accordance with applicable law.

• Secure servers, encryption, access controls, and audit trails to ensure data is accurate
• Regular reviews to ensure privacy controls are effective
• App-level security through multi-factor authentication for OTP, and identity binding

While we take reasonable security measures, RichStone shall not be liable for losses caused by security breaches, including force majeure events such as cyber attack, natural disasters, or government actions.

Personal Data is retained only for as long as necessary to fulfil the purpose for which it was collected or as required on the applicable basis. Upon conclusion of the retention period, data is securely deleted or anonymized and where technically feasible.

Your Rights

You have the right to:

• Access, correct, update, or erase your Personal Data
• Withdraw consent, subject to legal or regulatory requirements
• Request deletion of data where legally permissible

Requests can be made by contacting us with name and details for verification.

Communications

RichStone may communicate with you via calls, SMS, as well as WhatsApp, or any notification form for service updates, transactional alerts, educational content, and promotions.

Grievance Redressal

If you have any concerns or a grievance regarding this Privacy Policy or use of your Personal Data, please contact:

Grievance Officer: email - contact@richstoneassets.com – contact@richstoneassets.com

We will make reasonable efforts to address and resolve your concerns promptly.

Policy Updates

This Privacy Policy may be updated from time to time. The latest version will always be available on our website and app. Users are encouraged to review this policy periodically.