Terms of Use and Privacy Policy

Upstox includes RKSV Securities India Private Limited (CIN: U74900DL2009PTC189166) or Upstox Securities Private Limited (CIN: U65100DL2021PTC376860) or RKSV Commodities India Private Limited (CIN: U65190DL2012PTC236371), its affiliates, associates Companies, subsidiaries or any Company formed under the group referred to hereafter as 'Company', 'we', 'us', or 'our', or Upstox is dedicated to respecting your privacy and preferences. This Privacy Statement (hereinafter referred to as the "Statement") outlines our privacy practices concerning the Personal Information collected and processed, in accordance with applicable data privacy regulations.

We prioritise privacy and are dedicated to safeguarding personal information. This Privacy Policy details how we collect, use, and protect your data. This policy applies to the website or application. This policy applies to all the products, services, and businesses of Upstox. The terms of this policy may be in addition to the existing terms of the products, services or businesses

• "Data" means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means;
• "Personal data" means any data about an individual who is identifiable by or in relation to such data;
• "Processing" in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organising, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction;
• Data fiduciary: The person or entity that decides how to process personal data.
• Data processor: The person who processes personal data on behalf of the data fiduciary.
• Data principal: The individual whose personal data is being processed.

Upstox may collect Personal Information, Transaction Information, and Non-Personal Information (as defined below) when you register an account or create an account on our Platform or when you use our Services. However, certain areas of the Platform may be accessed without requiring you to create an account or register as a member. Information includes Data from credit information companies/credit reference agencies, risk management and fraud prevention agencies, and national and government databases.

• We collect and verify location, IP address, and device details (e.g., device type, operating system, IMEI) to confirm residency and meet regulatory requirements. Information, including browser data and unique identifiers, is securely stored, with passwords/PINs encrypted for protection.
• To utilise features on platforms/ apps by granting us access to Data
• For system development, planning, audit, and administrative purposes, as well as to personalise and enhance the user experience on the platform or app.

• Upstox may collect information such as full name, mobile number, email address, password, date of birth, gender, Permanent Account Number (PAN), signature, marital status, nominee details, residential/current address, any national identifiers such as identity card/passport details/Aadhaar card details/Voter ID/driving license, bank account details or any other personal information as required by the law or for providing you various services.
• Conversations during meetings/calls/correspondences/discussions with staff.
• Records of correspondence and other communications with you, including email, telephone conversations, live chat, instant messages and social media communications containing information concerning your grievances, complaints and disputes.
• Any other information, data, or records which you may consent to be collected or used.

Upstox may use users' Personal Information for the following purposes:

• To identify users, create login credentials, and facilitate access to the platform.
• To enhance user experience, troubleshoot issues, and conduct platform maintenance.
• To deliver and improve requested services and tailor user experience.
• To protect data and company assets from security threats, unauthorised access, or data misuse.
• To support marketing communications and related activities.
• To enforce terms and conditions and communicate policy updates.
• To process service requests and respond to user inquiries.
• To notify users of important updates, platform changes, and policy information.
• To ensure compliance with applicable laws and regulatory requirements.
• To provide or refer to the various other products of Upstox and its associate company.

The following are obligations of Upstox for data processing

• Upstox may process user Personal Information to fulfil a contract, support legitimate interests (like platform use and login generation), meet legal obligations, and with user consent when needed.
• Upstox may process data for offering the products and to manage relations.
• To contact you and enhance user experience.
• Upstox may analyse and process user preferences, account activities, and service usage patterns to identify potential areas of interest in its array of financial products and services.
• While ensuring compliance with applicable laws and regulations, Upstox may leverage such insights to communicate opportunities, promotions, or additional products that may enhance the user's experience.

Upstox may be required to share user Personal Information with

1. RKSV Securities India Private Limited, its subsidiaries and associates, Affiliates
2. Business Partners;
3. Service Providers, Vendors, agents;
4. Third-party Agents
5. Auditors;

We may share your Data, without obtaining your consent or without intimating you: (a) with governmental, statutory, regulatory, executive, law-enforcement, investigating or judicial/ quasi-judicial authorities, departments, instrumentalities, agencies, institutions, boards, commissions, courts, tribunals, who ask for such Data including by way of an order, direction, etc; or (b) with any person, where disclosure is necessary for compliance of any legal or regulatory obligation. Wherever the Data is shared as above, we will not have control over how such Data is further processed by such authorities, persons, etc.

Upstox may engage the services of a Cloud Service Provider (CSP), whose data servers might be located outside India. In such cases, there is a possibility that Personally Identifiable Information (PII) could be stored beyond Indian territorial boundaries. This will, however, be in compliance with applicable regulations and prevailing laws.

If it becomes necessary or incidental to transfer data outside a user's country or region of residence, Upstox will take reasonable and appropriate measures to ensure that such transfers are conducted in compliance with applicable laws and regulations, safeguarding the data throughout the process.

Additionally, Upstox may disclose Personal Information to law enforcement or regulatory authorities when necessary to comply with legal obligations.

We will comply with all applicable data retention regulations as mandated by regulatory authorities including but not limited to the retention of customer data such as personal, financial, and transactional information for the duration required by relevant laws and regulations to meet legal, audit, and operational needs. Once the retention period expires, we will securely delete or anonymise the data in accordance with industry best practices, unless extended retention is necessary for legitimate business purposes or to fulfill legal obligations.

1. Users acknowledge that Upstox has the right to use and process their data in accordance with the consent provided by the user. No action can be taken against Upstox for data transfer or processing conducted within the scope of the user's consent. These rights may include, but are not limited to, the rights to information, access, rectification, erasure, objection, restriction of processing, right to nominate and the right to file a complaint. If the processing of Personal Information is based on the user's consent, the user retains the right to withdraw this consent at any time subject fulfillment of the requirements. It is important to note that the withdrawal of consent will not affect the legality of any data processing conducted prior to the withdrawal. Upstox will ensure that any further processing of Personal Information ceases immediately upon the withdrawal of consent, except where otherwise permitted or required by law.
2. By providing this consent, users empower Upstox to process their data in a transparent and lawful manner, while retaining full control over their rights as data subjects. Upstox remains committed to respecting and protecting these rights in compliance with applicable data protection laws.
3. Exercising rights: To exercise user rights, Upstox may need to request specific information from users to verify their identity and confirm their entitlement to those rights. User can exercise their rights by contacting Upstox at privacy@rksv.in.

To withdraw consent for processing your personal data, please email privacy@rksv.in from your registered email ID. The request will be processed within 30 business days. Note: Some data may be retained for legal purposes, and withdrawal may affect services provided.

At Upstox, we seamlessly integrate Governance, Process, and Technology, demonstrating our commitment to our customers and stakeholders. We implement appropriate security measures, including administrative, physical, and technical controls, to protect your Personal Information.

If you have any questions about our privacy practices or this privacy statement, or if you would like to request this statement in a different format, please reach out to us at: privacy@rksv.in

In case of any queries or grievances related to privacy please contact us at - privacy@rksv.in. The DPO appointed will be the Grievance Officer and can be contacted at privacy@rksv.in

This policy will be governed by and construed in accordance with the laws of India and subjected to the exclusive jurisdiction of the Courts of Mumbai.

Upstox may update its data privacy practices and revise this privacy statement as needed, with the updated version posted on our website. Nonetheless, our commitment to safeguarding the privacy of website users will remain steadfast.

UPSTOX may for the purpose of rendering its services, collect personal information such as:

Name, gender, residential / correspondence address, telephone number, date of birth, marital status, email address or other contact information; PAN, KYC Status, Signature and Photograph; Bank account or other payment instrument details; or any other detail for providing services.

Upstox is a comprehensive wealth platform offering a range of financial services.To deliver these services, Upstox might collect personal information which may be shared with registered/authorised third parties and/or regulatory bodies such as SEBI, IRDAI, Stock Exchanges (NSE/ BSE, MCX, MSEI), BASL, AMFI, Mutual Fund AMCs, Registrar and Transfer Agents, Collecting Banks, KYC Registration Agencies (KRAs), DigiLocker and other regulatory bodies to facilitate seamless transaction processing and compliance with applicable laws.

Under certain circumstances we may be required to share the information given by you with the third parties, where we feel they can contribute to add value and improve the quality of services imparted by us to you. We shall take all reasonable steps to ensure that the confidentiality of your information is maintained by imposing strict confidentiality standards on all the third parties with whom we part this information. In all circumstances we shall ensure that your personal information is protected by strict confidentiality agreement. We shall not allow any third parties to retain your personal information longer than what is warranted by the nature of services rendered. We would also impart your personal information wherever it is required to be disclosed under law to any of the governmental agency or regulatory bodies. By agreeing to avail the service offered by UPSTOX you have agreed to the collection and use of your Sensitive Personal Data or Information by UPSTOX. You always have the right to refuse or withdraw your consent to share/dissemination of your Sensitive Personal Data or Information by contacting the customer care. However, in such an event, you would no longer avail the services of UPSTOX.

Upstox reserves the right to carry out necessary due diligence which may include sharing details with third party for checking their creditworthiness.

When You use the Website or send emails or other data, information or communication to us, You agree and understand that You are communicating with Us through electronic records and You consent to receive communications via electronic records from Us periodically and as and when required. We may communicate with you by email or by such other mode of communication, electronic or otherwise.

By agreeing to these terms and conditions, you confirm that you are interested in learning more about our products and features. You authorize Upstox or its representatives to contact you via email and calls with such information. This consent overrides any registration under the National Customer Preference Registry (NCPR). If you wish to opt out, you can do so through the profile section in the app or on the website.

By browsing or using our platform from mobile, website, or any other platform, you are strictly prohibited from hosting, displaying, uploading, modifying, publishing, transmitting, storing, updating, or sharing any information that

• Belongs to another person and to which the user does not have any right;
• Is defamatory, obscene, pornographic, paedophilic, invasive of another person's privacy (including bodily privacy), insulting or harassing on the basis of gender, libellous, racially or ethnically objectionable, or relating to or encouraging money laundering, gambling, or otherwise unlawful in any manner;
• Harms minors in any way;
• Infringes any patent, trademark, copyright, or other proprietary rights;
• Violates any law currently in force;
• Misleads or deceives the addressee about the origin of the message or knowingly and intentionally transmits information that is patently false, misleading, but may be perceived as a fact;
• Impersonates another person;
• Threatens the unity, integrity, defence, security, or sovereignty of India, friendly relations with foreign states, or public order, or causes incitement to the commission of any cognizable offence or prevents investigation of any offence or insults another nation;
• Contains software viruses or any other computer code, file, or program designed to interrupt, destroy, or limit the functionality of any computer resource;
• Is patently false and untrue, and is shared with the intent to mislead or harass a person, entity, or agency for financial gain or to cause injury.

In case of non-compliance with rules and regulations, privacy policy or user agreement, Upstox has the right to terminate the access or usage rights of the users to our platforms/computer resources immediately or remove non-compliant information or both, as the case may be.