Effective Date: March 2025

1. Introduction

Zomint Tech Private Limited ("Zomint", "we", "our", or "us") respects your privacy and is committed to protecting your personal and financial information. This Privacy Policy explains how we collect, use, process, store, and safeguard your personal data when you access or use our website, applications, and related investment services.

Zomint processes personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other regulatory requirements applicable to financial service providers.

By accessing or using our services, you consent to the collection and processing of your personal data as described in this Privacy Policy.

2. Information We Collect

We may collect the following categories of information:

2.1 Personal Identification Information

This may include your full name, date of birth, email address and phone number, Permanent Account Number (PAN), Aadhaar or other KYC documents, and address and identity verification details.

2.2 Financial Information

To provide investment services, we may collect your investment preferences, portfolio details, income range and financial profile, risk appetite and investment goals, and transaction and investment activity data.

2.3 Usage Data

When you interact with our platform, we may automatically collect your IP address, device type and operating system, browser type, and website usage data and interaction logs.

2.4 Communication Data

This may include emails and messages sent to our support team, customer service interactions, and call logs related to advisory or account support.

3. Partner Platform: Investwell

Zomint partners with Excel Net Solutions Private Limited, which operates the Investwell investment platform, to manage backend investment operations including account setup, mutual fund transactions, portfolio tracking, investment reporting, and related services.

When you access Zomint's investment features, certain personal and financial data may be processed through Investwell's systems in order to facilitate these services.

3.1 Data Handling via Investwell

Zomint shares only the minimum information necessary to deliver investment services. Investwell acts as a data processor under Zomint's instructions. Both Zomint and Investwell follow strict confidentiality, regulatory compliance, and information security standards. Users remain the owners of their personal data, while Zomint and Investwell act as custodians for the purpose of delivering services.

4. Purpose of Data Processing

We process personal data only for lawful purposes and in accordance with user consent. Personal data may be used to verify identity and complete KYC requirements, execute investment transactions, maintain portfolio records, provide personalised investment insights and recommendations, communicate important service updates, comply with regulatory, legal, and compliance requirements, and improve platform performance and user experience.

Zomint does not sell, lease, or trade personal data to third parties.

5. Data Security and Protection

Zomint and Investwell implement industry-standard security practices to safeguard personal and financial information.

Encryption: All sensitive information is encrypted during transmission and storage using 256-bit encryption or equivalent security standards.

Access Controls: Access to user data is restricted to authorised personnel who require it for operational purposes and are bound by confidentiality obligations.

Infrastructure Security: Systems are hosted on secure cloud infrastructure with continuous monitoring, firewalls, and intrusion detection mechanisms.

Password Protection: User passwords are stored using secure one-way hashing mechanisms.

Security Audits: Periodic security and compliance audits are conducted to ensure adherence to privacy and cybersecurity standards.

Backup and Recovery: Secure backups and disaster recovery systems are maintained to ensure service continuity.

While we take reasonable measures to protect personal data, no digital platform can guarantee absolute security. Users are encouraged to maintain the confidentiality of their login credentials.

6. Data Sharing and Legal Compliance

Personal data may be shared with mutual fund houses, Registrar and Transfer Agents (RTAs), payment processors, financial institutions, and regulatory authorities, only when necessary.

Such sharing is limited to what is required for executing investment transactions, regulatory compliance, and fraud prevention and risk management.

Zomint remains the data fiduciary, while service providers such as Investwell may act as data processors under applicable data protection laws.

7. Rights of Users

Under the Digital Personal Data Protection Act, 2023, users ("Data Principals") have certain rights regarding their personal data. These include the right to request access to personal data processed by us, request correction or updating of inaccurate personal data, request deletion of personal data subject to regulatory retention requirements, withdraw consent for data processing where applicable, and seek grievance redressal related to personal data processing.

Requests can be submitted by contacting us at support@zomint.com.

8. Data Retention

Zomint retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including compliance with legal, regulatory, accounting, or operational requirements. Where retention is no longer required, personal data will be securely deleted or anonymised.

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance user experience, analyse website traffic, and improve platform performance. Users may choose to disable cookies through browser settings; however, certain website features may not function properly without them.

10. External Links

Our website or applications may contain links to third-party websites or services. Zomint is not responsible for the privacy practices, policies, or content of such third-party platforms. Users are encouraged to review the privacy policies of any external websites they visit.

11. Changes to This Policy

Zomint may update this Privacy Policy periodically to reflect regulatory changes, operational updates, or improvements to our services. Any revised policy will be posted on our website with the updated effective date. Continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact and Grievance Redressal

For questions, concerns, or requests related to this Privacy Policy or the processing of personal data, please contact us:

Email: support@zomint.com
Contact: +91 7696442264

We will make reasonable efforts to address all requests within a reasonable timeframe.