Privacy Policy

Welcome to DhanGrow, operated by DhanGrow Financial Services Pvt. Ltd. ("DhanGrow", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application, website, and related financial services ("Services"). By using DhanGrow, you agree to this Privacy Policy.

We are registered with SEBI as an Investment Adviser (Registration No. INA000XXXXX) and comply with all applicable data protection laws including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.

01 Information We Collect

We collect information to provide and improve our services, ensure regulatory compliance, and protect the security of your investments. The categories of information we collect include:

Personal Identification Information:

• Full name, date of birth, gender as per PAN card
• PAN number, Aadhaar number (masked), Voter ID, or Passport
• Mobile number, email address, and residential address
• Bank account details (account number, IFSC, account type)
• Nominee information for investment accounts

Financial Information:

• Income range and source of funds (for KYC compliance)
• Investment history, portfolio holdings, and transaction records
• Risk profile assessment responses
• UPI ID and payment instrument details

Technical Information:

• Device ID, operating system, and browser type
• IP address, geolocation data (if permitted)
• App usage patterns, session data, and navigation logs
• Crash reports and performance diagnostics

02 How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your DhanGrow account and complete KYC verification as required by SEBI and AMFI regulations
• To process investments, redemptions, and all financial transactions on your behalf
• To provide personalized investment recommendations and AI-powered financial insights
• To send transaction confirmations, account statements, and investment reports
• To detect, prevent, and investigate fraud, money laundering, and security threats
• To comply with legal obligations including SEBI reporting, income tax regulations, and AML requirements
• To improve our products, services, and user experience through analytics
• To communicate promotions, new features, and financial education content (with your consent)

03 Information Sharing & Disclosure

We do not sell your personal information to third parties. We share your information only in these specific circumstances:

• Regulated Entities: SEBI, AMFI, BSE, NSE, depositories (CDSL/NSDL), and other regulatory bodies as required by law
• Financial Partners: Banks, mutual fund AMCs, insurance companies, and payment processors to execute your transactions
• Service Providers: KYC verification partners (CERSAI, NSDL), cloud infrastructure providers (AWS, GCP), and analytics platforms — all bound by strict data processing agreements
• Legal Requirements: Court orders, regulatory subpoenas, or as required by applicable law
• Business Transfers: In the event of merger, acquisition, or asset sale, with prior notice to users

04 Data Security

We implement industry-leading security measures to protect your data and investments:

• 256-bit AES encryption for all data at rest and in transit (SSL/TLS 1.3)
• Multi-factor authentication (OTP + biometric + device binding)
• Regular third-party security audits and penetration testing by CERT-In empanelled agencies
• ISO 27001 certified data centers with 24/7 monitoring
• Automatic session timeout and suspicious activity detection
• Data minimization principles — we only collect what is absolutely necessary

While we employ best-in-class security, no system is 100% impenetrable. Please protect your login credentials and report any suspicious activity to security@dhangrow.in immediately.

05 Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience. Categories include:

• Essential Cookies: Required for login sessions, security tokens, and core functionality
• Analytics Cookies: Help us understand how users navigate the platform (Google Analytics, Mixpanel)
• Preference Cookies: Remember your language, theme, and display settings
• Marketing Cookies: Used to show relevant ads (only with explicit consent)

You can manage cookie preferences in your browser settings or through our Cookie Consent Manager. Disabling essential cookies may affect core functionality.

06 Your Rights & Choices

Under applicable Indian data protection laws and DPDPA 2023, you have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Update incorrect or incomplete information through account settings or by contacting support
• Right to Erasure: Request deletion of your data (subject to regulatory retention requirements of 8 years for financial records)
• Right to Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Opt out of marketing communications at any time
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer

To exercise any of these rights, email: privacy@dhangrow.in or call 1800-123-DHAN. We respond within 30 days.

07 Children's Privacy

DhanGrow Services are intended exclusively for individuals 18 years of age and older. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a person under 18, please contact us immediately at privacy@dhangrow.in and we will delete such data within 72 hours.

08 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes via:

• In-app push notification and banner
• Email to your registered email address
• Prominent notice on our website homepage

Continued use of DhanGrow after the effective date of changes constitutes acceptance of the updated policy.

09 Contact Us

For any privacy-related concerns, requests, or grievances, please contact our Data Protection Officer: