Privacy Policy

1. Introduction

CaratStone ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our neobanking services designed for the jewellery industry.

By accessing or using CaratStone's services, you agree to the terms outlined in this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

• Name, email address, phone number, and business address
• Business registration details, GST number, and tax information
• Bank account details and financial information
• Identity verification documents (Aadhaar, PAN, etc.)
• Business licenses and jewellery trade certifications

2.2 Transaction Data

• Payment and transaction history
• Gold, silver, and diamond inventory records
• Credit and loan application information
• Trading partner details and transaction records

2.3 Technical Data

• IP address, browser type, and device information
• Usage data, analytics, and interaction patterns
• Cookies and similar tracking technologies
• Location data (with your permission)

3. How We Use Your Information

• To provide and maintain our neobanking services
• To process transactions, payments, and credit applications
• To verify your identity and prevent fraud
• To comply with RBI regulations and legal obligations
• To send account notifications and service updates
• To improve our services and develop new features
• To provide customer support and respond to inquiries
• To conduct risk assessment and credit scoring

4. Data Sharing and Disclosure

We may share your information with:

• Partner Banks: To facilitate banking services and transactions
• Payment Processors: Razorpay, Cashfree, and other verified partners
• Credit Bureaus: For credit reporting and assessment
• Regulatory Authorities: RBI, tax authorities, and law enforcement when required
• Service Providers: Cloud storage, analytics, and security services
• Trading Partners: With your consent, for B2B transactions

We do not sell your personal information to third parties for marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption for data transmission
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA)
• Regular security audits and penetration testing
• Access controls and employee training
• Secure data centers with physical security measures

6. Your Rights

Under Indian data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@caratstone.com

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Transaction records are maintained for a minimum of 7 years as per RBI regulations. After the retention period, data is securely deleted or anonymized.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience. You can control cookie preferences through your browser settings. For more details, see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our platform. Your continued use of our services after changes constitute acceptance of the updated policy.