Privacy Policy

1. Information We Collect
• Personal Identification Data: Name, email, phone number, address, government IDs (PAN, Aadhaar, Passport) for KYC/AML compliance.
• Financial Data: Payment details, transaction history, invoices.
• Token & Platform Data: Token purchase history, staking, booking usage, referral activity.
• Device & Technical Data: IP address, browser, cookies, log files, geolocation (if enabled).
• Communication Data: Queries, feedback, support tickets, chat transcripts with AI Assistant.
2. How We Use Your Information
• Process token purchases, staking, resale, and bookings
• Comply with legal & regulatory requirements (KYC/AML, GST).
• Provide customer support via AI Assistant & human team.
• Improve platform experience, personalization, and security.
• Send relevant updates, newsletters, offers (with consent).
• Fraud detection, risk prevention, and audit.
3. Legal Basis of Processing
• Contractual necessity (to fulfill token purchase, booking).
• Legal compliance (KYC/AML, tax laws).
• Consent (marketing communication, cookies).
• Legitimate interest (fraud prevention, service improvement).
4. Data Sharing & Disclosure
We never sell your data. We may share information only with:
• Payment gateways (Razorpay, Stripe, banks).
• KYC providers for verification.
• Hospitality partners for booking redemptions.
• Auditors, legal advisors, regulators as required by law.
• Technology partners (cloud hosting, analytics, AI services).
5. Data Retention
• Personal data retained as long as required for legal, regulatory, and business purposes.
• KYC records: minimum 5 years post relationship termination (per RBI/AML laws).
• Booking & transaction data: 7 years (tax compliance).
• Non-mandatory data can be deleted upon request.
6. Cookies & Tracking
We use cookies and tracking technologies to:
• Remember preferences & login state.
• Measure traffic and improve performance.
• Serve personalized offers.
You can manage cookie preferences in your browser.
7. Your Rights
Depending on your jurisdiction (India DPDP Act, GDPR, CCPA):
• Access and get a copy of personal data.
• Correct inaccurate data.
• Request deletion (subject to compliance obligations).
• Withdraw marketing consent.
• Data portability (on request).
• Lodge complaint with data protection authorities.
Contact: [email protected]
8. Data Security
• Encryption (in transit & at rest).
• Role-based access controls.
• Regular audits and penetration testing.
• Secure cloud hosting (ISO 27001 providers).
9. Children’s Privacy
BRIKx services are not intended for individuals under 18 years. We do not knowingly collect data from minors.
10. International Transfers
Your data may be processed on servers outside India (e.g., Singapore, EU). We ensure safeguards (SCCs, DPA compliance).
11. Updates to this Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.