Privacy Policy
Kovus Fintech Solutions Pvt Ltd (“Kovus”, “we”, “our”, or “us”) is committed to safeguarding any information submitted to us on our website, mobile applications and online platforms (“Website” or “Services”). This Privacy Policy outlines how we collect, use, store, disclose, protect and manage personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable global data-protection standards.
This Policy applies to all users accessing our Website and Services, including users interacting with content relating to financial markets, investments, market commentary and crypto-asset-related articles. While Kovus may publish content about crypto products, market developments or sponsored crypto-related articles, Kovus does not promote, endorse, solicit, or recommend investment in any cryptocurrency or digital asset.
-
USER CONSENT
1.1 Consent for Processing
By accessing or using our Services, you provide your free, specific, informed, unconditional and unambiguous consent to the processing of your personal data. This means:
- You understand the nature and purpose of data collection.
- You agree that Kovus may process your personal data for the lawful purposes detailed in this Policy.
- You acknowledge that some Services may require certain information to operate, and refusal to provide such information may result in limited access or functionality.
Under the DPDP Act, consent must be revocable, unbundled, and clearly affirmative, and Kovus follows these legal requirements.
1.2 Withdrawal of Consent
You may withdraw consent at any time by writing to:
Upon withdrawal:
- Processing of data will cease except where mandated by law.
- Access to Services may be restricted or discontinued.
- Personal data may be deleted or anonymised, unless:
- laws require its retention,
- it is necessary for legal claims, compliance, or regulatory purposes,
- or the purpose for which it was collected has not yet been fulfilled.
Withdrawal of consent does not affect processing that occurred prior to the withdrawal.
-
CHANGES TO THIS POLICY
Kovus reserves the right to amend, update or modify this Privacy Policy at any time to reflect changes in law, technological evolution, business operations, or regulatory expectations.
Changes shall be effective immediately upon posting on the Website. Where required under the DPDP Act, users may be notified of material changes. Users are advised to review this Policy periodically.
-
WHAT IS PERSONAL DATA?
Under the DPDP Act, “Personal Data” refers to any data about an individual who is identifiable by or in relation to such data.
This includes data that:
- identifies you (“direct identifiers”), such as your name or mobile number,
- can be used with other data to identify you (“indirect identifiers”), such as device IDs or IP addresses.
It applies to digital data and digitised physical data.
-
PERSONAL DATA WE COLLECT
Depending on your interaction with our Website and Services, we collect the following categories of data:
4.1 Personal Data You Provide Directly
This includes, but is not limited to:
- Name, address, email address, mobile number
- Payment information (processed through secure gateways; we do not store full card details)
- Login credentials (username, encrypted password)
- Profile preferences
- Information submitted for newsletters, reports, surveys, webinars, events or promotions
- Information shared while communicating with customer support
- Employment-related information if you apply for a job
- User-generated content, feedback or queries
This data is collected through forms, subscription modules, voluntary submissions and interactions with our Website.
4.2 Data Collected Automatically
Through cookies, log files and analytic tools, we may automatically collect:/p>
- IP address and geolocation
- Device type, operating system, browser type
- Pages visited, time spent, interactions and clickstream data
- Session information and access timestamps
- Cookie identifiers and tracking pixels
This is essential for analytics, fraud detection, security, personalisation, and business improvement.
4.3 Data Obtained from Third Parties
We may receive data from:
- Affiliate companies, group entities
- Marketing partners and list providers
- Social media platforms
- Regulators, law enforcement (where legally permitted)
- Payment and analytics service providers
- Recruitment agencies, if you apply for employment
All such third-party data is processed strictly in accordance with legal permissions.
-
WHY WE COLLECT & USE PERSONAL DATA (PURPOSES OF PROCESSING)
Kovus processes personal data only for lawful purposes, consistent with the DPDP Act.
These purposes include:
- Registering, maintaining and managing user accounts
- Providing subscription services, reports, newsletters and publications
- Delivering content, including financial and crypto-related articles
- Sending service-related messages, alerts and administrative communications
- Personalising user experience and tailoring content
- Conducting analytics, research, optimisation and service improvement
- Detecting, preventing and investigating fraud, abuse or suspicious activity
- Marketing Kovus’s and related entities products and services (with opt-out options)
- Processing job applications and performing due diligence
- Responding to queries, complaints and customer-support needs
- Complying with legal requirements, regulatory inspections, audits or governmental requests
- Any purpose reasonably connected to the operation of our Services and expected by users
Under the DPDP Act, personal data will not be processed beyond the stated purposes unless:
- additional consent is obtained, or
- such processing is legally permitted.
-
CONTENT ON CRYPTO PRODUCTS – ADDITIONAL DISCLOSURE
Our Website may publish educational content, sponsored content, commentary, news and market-related articles regarding cryptocurrencies, blockchain, digital tokens and similar assets.
6.1 No Promotion or Recommendation
Kovus does not promote, endorse, recommend, solicit or encourage investment in any cryptocurrency or digital asset. All content is general, informational and educational in nature.
6.2 User Responsibility
Crypto assets involve significant financial risk, volatility, regulatory uncertainty, and potential capital loss.
Users Must:
- evaluate information independently,
- seek professional financial advice, and
- comply with jurisdiction-specific laws.
6.3 Sponsored Content Disclosure
Where content is sponsored, supported or paid for by third parties, this will be transparently disclosed in accordance with legal and ethical standards.
-
DIRECT MARKETING
We may use your personal data to send marketing communications relating to our products, services, analysis, events, newsletters and promotions. You can opt out at any time by:
- clicking “unsubscribe” in any marketing email, or
- writing to [email protected]
Marketing will comply with applicable communication laws and the opt-out requirements of the DPDP Act.
-
RECORDING OF PHONE CALLS
Calls may be recorded for:
- Training
- Quality improvement
- Dispute resolution
- Compliance and audits
You will be notified at the start of the call. If you do not wish to be recorded, you may choose not to proceed with the call.
-
SHARING PERSONAL DATA
We may share personal data with third parties strictly for legitimate business purposes, including:
- Group companies (India, Australia, New Zealand, UK, USA, Canada)
- Third-party service providers (IT, cloud hosting, CRM tools, marketing, analytics)
- Payment processors
- Call-centre and customer-support providers
- Legal, tax, regulatory and compliance advisors
- Law enforcement agencies, governmental authorities and courts of law
- Buyers or transferees in the event of business restructuring, acquisition or sale
We ensure that such third parties:
- follow confidentiality obligations,
- implement security standards,
- use data only for approved purposes.
-
SECURITY OF PERSONAL DATA
We implement reasonable technical, organisational and administrative safeguards, including:
- encryption, firewalls and intrusion detection,
- access controls and role-based permissions,
- secure cloud infrastructure located in India,
- regular audits, vulnerability assessments and security monitoring.
We comply with strict information security requirements and hold ISO 27001:2022 certification.
However, no system is completely immune to breaches. If any breach occurs, Kovus will comply with DPDP Act’s breach notification obligations.
-
DATA STORAGE, RETENTION & DELETION
- Personal data is stored on secure cloud servers located in India.
- Data is retained only for the period necessary to fulfil lawful purposes, or for the duration required by regulatory or legal obligations.
- Once retention is no longer necessary, data will be securely deleted or anonymised.
- Upon withdrawal of consent, data will be erased unless legal exceptions apply.
-
YOUR RIGHTS AS A DATA PRINCIPAL (DPDP ACT)
As a Data Principal, you have the following rights:
- Right to Access: To obtain a summary of personal data processed by Kovus and details of processing.
- Right to Correction, Completion & Updating: To request that inaccurate, incomplete or outdated personal data be rectified.
- Right to Erasure: To request deletion of personal data when:
- consent is withdrawn,
- purpose is fulfilled, or
- retention is no longer necessary.
- Right to Withdraw Consent You may revoke consent at any time.
We may require identity verification to prevent unauthorised access or misuse.
Send requests to [email protected]
-
COOKIES & TRACKING TECHNOLOGIES
Our Website uses cookies, pixels and similar technologies for:
- analytics,
- performance optimisation,
- session management,
- personalisation,
- fraud detection.
You may disable cookies through browser settings, but doing so may affect the functionality of the Website.
-
THIRD-PARTY LINKS
Our Website may contain links to external websites or third-party platforms. Kovus is not responsible for:
- Their privacy practices
- Data-handling procedures
- content or security measures.
Users should review third-party privacy policies before engaging with such sites.
-
COMPLAINTS & GRIEVANCE REDRESSAL
If you have concerns or complaints regarding our handling of personal data, please write to us at Grievance Officer [email protected]