Consent Policy

A. NATURE OF PERSONAL DATA COLLECTED

By proceeding, you expressly consent to the Company collecting and processing the following categories of personal data:

  • Identity information (such as PAN, Aadhaar, Passport, Driving Licence or other officially valid documents

  • Photograph, video recording, or live video verification (where applicable)

  • Residential address and contact details

  • Bank account details including account number, IFSC, bank name, and cancelled cheque

  • Financial profile information required for suitability and compliance assessment

  • Nominee details (where provided)

B. PURPOSE OF PROCESSING

Your personal data shall be processed strictly for the following lawful purposes:

  • Identity verification and KYC compliance

  • Compliance with applicable tax, AML, and regulatory requirements

  • Processing of investments and execution of transactions

  • Credit of dividends, returns, refunds, or other payouts

  • Fraud prevention, risk management, and security monitoring

  • Maintenance of investor records

Your data will not be used for unrelated purposes without obtaining fresh consent.

C. STORAGE AND SECURITY

  • Access will be restricted to authorized personnel on a need-to-know basis.

  • Banking details may be masked or tokenized for internal use.

  • Your data will be stored in encrypted form on secure servers.

D. SHARING OF DATA

Your personal data may be shared, strictly on a need basis, with:

  • KYC verification service providers

  • Payment gateways and banking partners

  • Regulatory authorities as required by law

  • Auditors and compliance advisors

Such third parties shall be contractually bound to maintain confidentiality and security safeguards.

E. RETENTION

Your personal data will be retained:

  • For the duration of your investment relationship; and

  • Thereafter, for such period as required under applicable financial, tax, and anti-money laundering laws.

Upon expiry of the retention period, your data will be deleted or anonymized in accordance with applicable law.

F. WITHDRAWAL OF CONSENT

You may withdraw your consent at any time by:

  • Using the in-app consent management option; or

  • Contacting the Grievance Officer at Hello@getfrax.com

Withdrawal shall not affect processing required to comply with legal obligations.

G. RIGHTS OF DATA PRINCIPAL

You have the right to:

  • Seek access to your personal data

  • Request correction or updating

  • Request erasure (subject to legal retention requirements)

  • Nominate another person to exercise your rights

  • Raise a grievance

H. AFFIRMATION

By clicking “I Agree” / “Proceed”, you confirm that:

  • The information provided is accurate and belongs to you;

  • You have read and understood this consent;

  • You voluntarily agree to the processing of your personal data for the purposes stated above.