• Data means a representation of information, facts, concepts, opinions or instructions in a manner suitable for communication, interpretation or processing by human beings or by automated means.
• Personal data means any data about an individual who is identifiable by or in relation to such data.
• Processing in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organising, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.
• Data fiduciary: The person or entity that decides how to process personal data.
• Data processor: The person who processes personal data on behalf of the data fiduciary.
• Data principal: The individual whose personal data is being processed.

Upstox may collect Personal Information, Transaction Information, and Non-Personal Information (as defined below) when you register an account or create an account on our Platform or when you use our Services. However, certain areas of the Platform may be accessed without requiring you to create an account or register as a member. Information includes Data from credit information companies/credit reference agencies, risk management and fraud prevention agencies, and national and government databases.

We collect and verify location, IP address, and device details (e.g., device type, operating system, IMEI) to confirm residency and meet regulatory requirements. Information, including browser data and unique identifiers, is securely stored, with passwords/PINs encrypted for protection.

To utilise features on platforms/ apps by granting us access to Data

For system development, planning, audit, and administrative purposes, as well as to personalise and enhance the user experience on the platform or app.

Upstox may collect information such as full name, mobile number, email address, password, date of birth, gender, Permanent Account Number (PAN), signature, marital status, nominee details, residential/current address, any national identifiers such as identity card/passport details/Aadhaar card details/Voter ID/driving license, bank account details or any other personal information as required by the law or for providing you various services.

Conversations during meetings/calls/correspondences/discussions with staff.

Records of correspondence and other communications with you, including email, telephone conversations, live chat, instant messages and social media communications containing information concerning your grievances, complaints and disputes.

Any other information, data, or records which you may consent to be collected or used.

To ensure compliance with applicable laws and regulatory requirements.

To provide or refer to the various other products of Upstox and its associate company.

Users acknowledge that Upstox has the right to use and process their data in accordance with the consent provided by the user. No action can be taken against Upstox for data transfer or processing conducted within the scope of the user's consent. These rights may include, but are not limited to, the rights to information, access, rectification, erasure, objection, restriction of processing, right to nominate and the right to file a complaint. If the processing of Personal Information is based on the user's consent, the user retains the right to withdraw this consent at any time subject fulfillment of the requirements. It is important to note that the withdrawal of consent will not affect the legality of any data processing conducted prior to the withdrawal. Upstox will ensure that any further processing of Personal Information ceases immediately upon the withdrawal of consent, except where otherwise permitted or required by law.

By providing this consent, users empower Upstox to process their data in a transparent and lawful manner, while retaining full control over their rights as data subjects. Upstox remains committed to respecting and protecting these rights in compliance with applicable data protection laws.

Exercising rights: To exercise user rights, Upstox may need to request specific information from users to verify their identity and confirm their entitlement to those rights. User can exercise their rights by contacting Upstox at ”privacy@rksv.in”.

To withdraw consent for processing your personal data, please email privacy@rksv.in from your registered email ID. The request will be processed within 30 business days. Note: Some data may be retained for legal purposes, and withdrawal may affect services provided.

At Upstox, we seamlessly integrate Governance, Process, and Technology, demonstrating our commitment to our customers and stakeholders. We implement appropriate security measures, including administrative, physical, and technical controls, to protect your Personal Information.

If you have any questions about our privacy practices or this privacy statement, or if you would like to request this statement in a different format, please reach out to us at: privacy@rksv.in

In case of any queries or grievances related to privacy please contact us at - privacy@rksv.in. The DPO appointed will be the Grievance Officer and can be contacted at privacy@rksv.in

This policy will be governed by and construed in accordance with the laws of India and subjected to the exclusive jurisdiction of the Courts of Mumbai.

Upstox may update its data privacy practices and revise this privacy statement as needed, with the updated version posted on our website. Nonetheless, our commitment to safeguarding the privacy of website users will remain steadfast.