Privacy Policy

We hold your money and your identity documents, so we owe you a plain account of what we collect, why, who sees it, and how long we keep it. This policy is written under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

01Who we are

Aryavart Digital Technologies Private Limited (CIN U66190MP2026PTC085484), Jabalpur, Madhya Pradesh, India, is the data fiduciary for the personal data described here. We operate the American Crypto Card mobile application — a custodial wallet and peer-to-peer marketplace for digital assets — and this website.

We are not a bank, not a payment system operator, and not regulated by the Reserve Bank of India. We are registering with the Financial Intelligence Unit – India (FIU-IND) as a reporting entity under the Prevention of Money Laundering Act, 2002.

02What we collect

Identity and verification

• Name, date of birth, gender and address as they appear in your Aadhaar, fetched through DigiLocker with your consent. We store only the last four digits of your Aadhaar number, never the full number.
• Your PAN and the name registered against it.
• Images captured during the liveness check, which are compared against the photograph in your Aadhaar record.
• Where we ask for it, additional documents for enhanced due diligence.

Contact and account

• Mobile number (verified by one-time password) and email address.
• If you sign in with Google or Apple, the name and email address those services share with us.
• Your chosen display name, language and app settings; your transaction PIN, stored only as a salted hash.

Financial and transactional

• Deposit addresses assigned to you, balances, and the full history of deposits, withdrawals, swaps, transfers, gifts, marketplace trades and referral rewards.
• Bank account or UPI details you add in order to pay or be paid in marketplace trades, and the name on those accounts.
• Records of tax deducted at source and statements generated for you.
• Blockchain addresses you withdraw to and the results of screening those addresses.
• Messages, payment proofs and other evidence submitted in a marketplace trade or dispute.

Device and usage

• Device model, operating system version, app version, a device identifier, push-notification token, IP address and approximate location derived from it.
• In-app events (screens opened, features used, errors) used to keep the app working and to understand which features matter.
• Security signals such as whether the device is rooted or the app has been tampered with.

03Why we use it

We do not use your data for advertising, and we do not sell it.

04Who we share it with

If the company is reorganised or acquired, your data may be transferred to the successor, who will be bound by this policy.

05Where it lives, how it is protected

• Production systems run on Amazon Web Services in Mumbai. Data is encrypted in transit (TLS) and at rest.
• Private keys that control platform wallets are generated once and wrapped with AWS Key Management Service; only ciphertext is stored.
• Access to production is limited to named staff, controlled by role, and logged. Every action that moves money is written to an append-only journal.
• Database backups are taken hourly, encrypted, and test-restored.
• In the app: a PIN on every money action, biometric lock, screenshot blocking, and refusal to run on rooted devices.

No system is perfectly secure. If a breach affects your personal data we will notify you and the Data Protection Board of India as the DPDP Act requires.

06How long we keep it

• Identity records and transaction history: for as long as your account is open and for five years after it closes, as the Prevention of Money Laundering Act requires. Tax records are kept for the period the Income-tax Act requires.
• Liveness images: used to complete the check; we keep only what is needed to evidence the outcome of your verification for the period above.
• Device and usage logs: 90 days, unless needed for a security investigation.
• Marketplace dispute evidence: until the dispute and any appeal are closed, then with the transaction record.
• Website waitlist email: until you ask to be removed or the beta programme ends.

07Your rights

Under the DPDP Act you can:

• Access a summary of the personal data we hold about you and how it has been processed.
• Correct data that is inaccurate or incomplete.
• Erase data we no longer need — subject to the retention periods the law imposes on us.
• Withdraw consent for processing that relies on it. Withdrawing consent to identity verification means we must close the account, since we cannot serve an unverified customer.
• Nominate a person to exercise these rights if you die or become incapacitated.
• Raise a grievance with our Grievance Officer, and, if you are not satisfied, with the Data Protection Board of India.

Write to connect@aryavartdigitaltechnologies.com from your registered email. We will confirm receipt within 48 hours and respond within 30 days.

08Data outside India

Your data is stored in India. Some of the service providers listed above — email delivery, phone verification and push notifications — process limited data on infrastructure outside India under their standard contractual protections. We do not transfer your data to any country the Central Government has restricted under the DPDP Act.

09This website

This website sets no advertising or tracking cookies. If you enter an email address to ask for a beta invitation, we store it with the date and the form you used, and use it only to write to you about the beta. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

10Children

The service is for adults. You must be 18 or older to open an account, and identity verification enforces this. If we learn that we hold data about a person under 18, we delete it.

11Changes

We will update this policy as the service and the law change. Material changes are announced in the app and by email at least 30 days before they take effect. The date at the top is the date of the current version.

12Contact & grievances