Privacy Notice (India DPDP)

1. Who we are

Aadinath Ventures is the Data Fiduciary for the account of the jeweller and its staff: name, mobile, firm, address, subscription, and device metadata. We use that data for login, support, security, and billing.

The jeweller is the Data Fiduciary for vault data: customer name, mobile, address, Aadhaar, loans, collateral, and bills. Aadinath Ventures is the processor. We use vault data only to run that firm’s books.

2. Account data

• Your full name - Account identity, support, and device attribution
• Mobile number - Login OTP, support callbacks, and service messages
• Firm name and contact details - Account operation, admin firm management, and support
• City, state, address - Regional support and firm profile
• Subscription and device metadata - Plan limits, push notifications (if enabled), and security

Marketing to the jeweller (product updates) uses these contact details only if you opt in. You can withdraw that consent in Settings → Help & Privacy.

3. Business vault data

• Customer name, mobile, address, Aadhaar - Loan management on your behalf (you are the Data Fiduciary)
• Loan, collateral, and transaction records - Business operations on your behalf - encrypted at rest

We do not sell vault data. We do not use it to market to borrowers or retail buyers. Sensitive fields are encrypted at rest. Data in transit uses TLS. No method of storage is perfect. You should keep your own export of records that matter to you.

Aadhaar in the vault is collected by the firm for its loan file. We store it only on the firm’s instruction, encrypted. We do not use it to authenticate anyone with UIDAI.

4. Your rights

Under India's Digital Personal Data Protection Act, you may:

• Access and correct your personal data
• Withdraw marketing consent with ease comparable to giving it
• Request erasure where it applies
• Export a local data backup from Settings → Help & Privacy
• Nominate another person to exercise rights if you die or become unable to
• Raise a grievance with us, or complain to the Data Protection Board

Requests about a borrower's data are for the jeweller, as Data Fiduciary, to answer. We help the firm where the product allows it.

5. Retention and security

We keep account data while the subscription is active and for as long as the law requires. Audit logs may be kept for up to 7 years because the firm’s own books need a trail, not because we are the lender. Personal-data access logs are kept for at least one year. We use encryption, access limits, and monitoring. They reduce risk. They do not make loss impossible.

6. Grievance and the Board

Grievance contact: hello@sthirapp.com. A partner of Aadinath Ventures reads that inbox. We have not published a separate personal name here.

You may also complain to the Data Protection Board of India. See MeitY guidance.

7. Related documents

This notice is part of the agreement with your firm, together with the Terms and the Data Processing Agreement.