Privacy Policy for
Soni Pannalal Bhojraj
This Privacy Policy explains how Soni Pannalal Bhojraj ("we", "our", "us") collects, uses, stores, and protects your information when you use our mobile app, backend services, and push notifications. By using the app, you agree to the practices described in this policy.
Information We Collect
- Full name, email address, mobile number, and password (stored in hashed form)
- WhatsApp number and country code (optional — only if provided during registration)
- User role (trader / admin) and account approval status
- Firm name, firm address, city, state, and pincode
- PAN number (optional), GST number (optional), and Aadhaar number (optional) — collected only if provided during registration
- Bank account details including account name, number, IFSC code, and branch (optional)
- PAN card, Aadhaar card, bank proof, profile photo, GST certificate, firm registration, and trade license
- Document metadata: type, filename, storage key, upload timestamp, and verification status
- Rate view history, news reads, and account activity timestamps
- Operational remarks and admin actions on accounts
- Push notification token (FCM token) and device registration details
- Device ID, name, platform, model, OS version, app version, and build number
- IP address, user agent, and last-seen timestamp
- Authentication token and current user profile stored locally on your device for session continuity
How We Use Your Data
- Create and manage your account, and authenticate access to the app
- Process onboarding, KYC review, and account approval workflows
- Display live bullion rates, market news, and bank information
- Deliver push notifications for market alerts and account updates
- Maintain registered device tokens for notification delivery
- Protect platform security, detect abuse, and enforce rate limits
- Maintain, troubleshoot, and improve app performance and reliability
Legal Bases for Processing
Depending on your jurisdiction, we process personal data under one or more of the following legal bases:
- Contract performance — processing required to provide the app and services you signed up for
- Legal obligations — compliance with applicable Indian laws and regulations
- Legitimate interests — platform security, fraud prevention, and service operations
- Consent — optional permissions such as push notifications, which you can withdraw at any time
App Permissions & Device Access
- Push Notifications — sends market updates and account alerts. You can disable this in your device settings at any time.
- Camera — used to capture KYC and verification documents during onboarding.
- Media Library / File Access — used to select and upload KYC and business documents.
- Internet / Network Access — required to communicate with backend APIs, pricing, and notification services.
- Vibration & Notification Support — used for notification behavior on supported Android devices.
Third-Party Services
We do not sell your personal information. We share data only with service providers necessary to operate the app:
- Cloud Infrastructure — secure database and API backend hosting (AWS)
- Document Storage — cloud object storage for KYC and business document uploads
- Push Notifications — Firebase Cloud Messaging (FCM) for delivery of alerts and updates
All third-party providers are bound by data processing agreements. We may also disclose information when required by law, legal process, or to protect the rights and security of our users and platform.
Data Retention
We retain your data for as long as necessary to provide services, meet legal compliance requirements, resolve disputes, and enforce our terms:
- Account data — retained for the lifetime of the account and a reasonable period after deletion
- KYC documents — retained as required under applicable regulatory obligations
- Activity records — retained for audit and compliance purposes
- Device & log data — retained for a limited period for security monitoring
Security Practices
We implement technical and organisational measures to protect your data against unauthorised access, loss, or disclosure:
Your Rights
Children's Privacy
This app is intended exclusively for adult business users engaged in bullion and jewellery operations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided personal data, we will delete it promptly.
International Data Transfers
Your data may be processed and stored in regions where our infrastructure and service providers (including AWS) operate. By using the app, you acknowledge that your data may be transferred outside your local jurisdiction, subject to appropriate safeguards consistent with applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted with a revised "Last Updated" date. Material changes may be communicated through the app or by email. Continued use of the app after updates constitutes your acceptance of the revised policy.
Contact Us
For privacy questions, data requests, or concerns, reach us through any of the following:
Amli Ka Bas, Chowk Ka Chowk
Jodhpur – 342001, Rajasthan, India