Privacy Policy

1. Introduction

BLOSTEM FINTECH Pvt. Ltd (“Blostem”, “we”, “our”, or “the Company”) is a fintech company providing aggregated financial solutions through its Platform. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you access our Platform through partner mobile and web applications.

By accessing or using our Platform, you agree to the terms of this Privacy Policy. If you have questions, please contact us at contact@blostem.com.

2. What Information Do We Collect?

We collect Personal and Non-Personal Information during registration and service usage through various means including registration forms and customer support interactions.

Personal Information

• Full name, mobile number, email address, password, photograph, date of birth, gender
• PAN, Aadhaar details, e-KYC through UIDAI, CKYC through CERSAI
• Income/salary information, marital status, nominee details
• Billing address, bank account details, credit/debit card details, payment methods, e-mandates, standing instructions

Non-Personal Information

• IP address, cookies, browser type, mobile OS, device details
• Geolocation, language preferences, access times
• Public domain information and KYC Registration Agency records

Important Notes

• We do not store Aadhaar numbers or any biometric information. Aadhaar authentication occurs through licensed entities compliant with UIDAI guidelines with user consent.
• The Company is not responsible for third-party websites' security, privacy practices, or content. Users should review third-party privacy policies independently.
• The Company's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
• Data transfers to third parties require matching data protection standards under the IT Act and SDPI Rules.

3. How Do We Use Your Information?

• Account creation, identity verification, and transaction processing
• Usage statistics and Platform effectiveness analysis
• Service improvement and personalization
• Dispute resolution, customer support, and troubleshooting
• Fraud detection, security protection, and criminal activity prevention
• Fee collection
• Marketing campaigns and service updates
• Experience customization
• Terms enforcement
• Service request fulfillment
• Important notices about service changes
• Other purposes based on user interaction consent

Text messages are sent solely related to transactions on your registered mobile number. You may revoke consent by writing to contact@blostem.com.

4. Disclosure of Information

We may disclose your information to:

• Statutory and regulatory authorities for legal compliance
• Company subsidiaries and affiliates in ordinary course of business
• Third-party service partners: business partners, service providers, SEBI-registered entities, payment gateways, banks, KRAs, and credit bureaus
• Recipients in corporate sales, mergers, acquisitions, reorganizations, or insolvency events
• Recipients as necessary to fulfill stated purposes

5. How Do We Retain Your Information?

• Information is retained while your account is active or services are being provided
• Retention as legally required for dispute resolution and business purposes
• Retention for periods prescribed under applicable law after account cancellation
• When no legitimate business need exists, data is deleted, anonymized, or securely stored and isolated from further processing

6. How Do We Protect Information We Collect?

• Industry-standard security technologies and procedures
• Regular security scans and penetration tests
• Regular malware scans
• SSL certificate implementation
• Strict access limitations to authorized personnel on a need-to-know basis
• Prevention of third-party unauthorized access
• Reasonable security measures for orders, data entry, registration, and app access

7. How Do You Update Your Information?

You must ensure your Personal Information is both accurate and current. Self-help tools allow you to review and update your details. Certain fields (name, Aadhaar, address) are locked once entered per legal requirements. Changes should be updated through self-help tools or by emailing contact@blostem.com. We respond to requests per applicable laws.

8. How Do You Delete/Deactivate Your Account?

Blostem does not sell, trade, or otherwise transfer to outside third parties your Personal Information. Account deletion terminates service provision; information may be retained during shutdown and billing processes. You may request deactivation instead, which temporarily blocks access pending reactivation.

Deletion/deactivation requests should be emailed to contact@blostem.com or mailed to our Delhi office address listed below.

9. GDPR & DPDP Compliance

We comply with the Digital Personal Data Protection Act, 2023 (DPDP) and acknowledge GDPR best practices for data protection standards.

10. Will We Update This Privacy Policy?

We reserve the right to revise this Privacy Policy at our discretion. Users should review this page periodically for any changes.

11. Copyright Policy

The contents of our website and Platform cannot be reproduced without permission as per the Copyright Act, 1957. Sources must be acknowledged, and contents cannot be used in misleading contexts.

12. Governing Law

This Privacy Policy is governed by the laws of India. Jurisdiction and venue are exclusive to the courts of New Delhi, except where Dispute Resolution provisions apply.

13. Dispute Resolution

All claims, disputes, or differences shall be referred to arbitration before a sole arbitrator under the Arbitration and Conciliation Act, 1996. The seat of arbitration is New Delhi, India. Proceedings shall be conducted in English, and the award shall be final and binding on both parties.

14. Privacy Questions & Grievance Redressal

If you have any questions or concerns about this Privacy Policy, please contact: