Privacy Policy

1. Introduction & Scope

Delta AI Exchange India Private Limited ("Delta AI," "we," "our," or "us"), incorporated under the Companies Act, 2013 (CIN: U74999MH2024PTC000001), operates the Delta AI Exchange India cryptocurrency trading platform accessible via our website at deltaaiexchange.in and our mobile applications on Google Play Store and Apple App Store.

This Privacy Policy ("Policy") describes how Delta AI collects, uses, stores, shares, and protects your personal information when you access or use our platform, services, website, or mobile application. This Policy applies to all users, visitors, and registered account holders worldwide, with specific provisions for users residing in India.

By registering an account, downloading our app, or using any of our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue using our services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Full legal name, email address, mobile number, date of birth, and country of residence.
• KYC Documents: Aadhaar card number (masked), PAN card number, selfie/photograph for liveness verification, and bank account details (IFSC, account number).
• Financial Information: UPI ID, bank account details for INR deposits and withdrawals, transaction history, and trading records.
• Communications: Messages you send us via support tickets, live chat, email, or feedback forms.
• Preferences: App settings, notification preferences, and trading preferences.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, device ID, browser type, and screen resolution.
• Usage Data: Pages viewed, features used, time spent on platform, click patterns, and trading behaviors.
• Network & Location: IP address, approximate geographic location (city/region level), and time zone.
• Transaction Data: All buy/sell orders, deposits, withdrawals, staking activities, and wallet addresses.
• Log Data: Server logs including login timestamps, API calls, error logs, and security events.

2.3 Information from Third Parties

• Identity verification data from UIDAI (Aadhaar verification), NSDL (PAN verification), and DigiLocker.
• KYC/AML screening results from CIBIL, bureau partners, and government databases.
• If you connect a third-party exchange or wallet, we receive limited account information with your permission.

3. How We Use Your Information

We process your personal information for the following purposes, each grounded in a lawful basis under applicable Indian data protection law:

• Account Management & Authentication: Creating and maintaining your account, verifying your identity, and securing access.
• Service Delivery: Processing your trades, managing your wallet, executing deposits and withdrawals, and providing AI trading signals.
• Regulatory Compliance: Fulfilling KYC/AML obligations under the Prevention of Money Laundering Act (PMLA) 2002, collecting TDS as required under Section 194S of the Income Tax Act, 1961, and responding to lawful government requests.
• Security & Fraud Prevention: Detecting suspicious activities, preventing unauthorized account access, and protecting the integrity of our platform.
• Communications: Sending transaction confirmations, security alerts, product updates, and customer support responses.
• Analytics & Improvement: Analyzing aggregate usage patterns to improve our platform, AI models, and user experience.
• Marketing (with consent): Sending promotional offers, newsletters, and personalized recommendations if you have opted in.
• Legal Defense: Establishing, exercising, or defending legal claims.

4. Information Sharing & Disclosure

Delta AI does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements: cloud hosting (AWS India Region), payment processors, KYC verification providers, customer support tools, and fraud detection services.

4.2 Regulatory & Legal Obligations

We may disclose your information to: the Financial Intelligence Unit — India (FIU-IND), the Income Tax Department (for TDS compliance under Section 194S), SEBI or other regulatory authorities upon lawful request, and law enforcement agencies with a valid court order or legal process.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred to the successor entity. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your data with third parties when you have given us explicit consent, such as connecting third-party portfolio trackers or tax filing services.

5. Data Security

We implement industry-leading security measures to protect your personal data:

• 256-bit AES encryption for all data at rest; TLS 1.3 for all data in transit.
• Multi-factor authentication (MFA) for all staff access to production systems.
• Regular third-party security audits and penetration testing (conducted quarterly).
• ISO 27001-aligned information security management framework.
• 24/7 security operations center (SOC) monitoring for anomalous activities.
• Bug bounty program for responsible disclosure of security vulnerabilities.

Despite our efforts, no security system is impenetrable. In the unlikely event of a data breach that affects your rights, we will notify you within 72 hours as required by law.

6. Data Retention

We retain your personal data for as long as your account is active and for a period thereafter as required by law:

• KYC & Identity Documents: 5 years after account closure (PMLA requirement).
• Transaction Records: 7 years (Income Tax Act requirement).
• Communication Logs: 2 years from creation.
• Marketing Preferences: Until you withdraw consent.
• Account Data: For the duration of account activity + 5 years.

7. Your Rights & Choices

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention obligations).
• Right to Withdraw Consent: Withdraw marketing consent at any time via app settings.
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer or with the Data Protection Board of India.
• Right to Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, submit a request to: privacy@deltaaiexchange.in. We will respond within 30 days.

8. Cookies & Tracking Technologies

Our website and app use cookies and similar tracking technologies to enhance your experience, analyze platform usage, and deliver relevant content. We use:

• Strictly Necessary Cookies: Essential for platform functionality (login sessions, security tokens). Cannot be disabled.
• Analytics Cookies: Google Analytics, Mixpanel — help us understand how users interact with our platform.
• Preference Cookies: Remember your language, theme, and trading settings.
• Marketing Cookies (opt-in only): Used for personalized advertising on third-party platforms.

You can manage cookie preferences in your browser settings or through our Cookie Consent Manager available in the app settings.

9. Children's Privacy

Delta AI Exchange India is strictly for users aged 18 years and above. We do not knowingly collect personal information from minors. If we discover that a minor has registered an account, we will immediately terminate the account and delete all associated data. If you believe a minor has registered, please contact us at privacy@deltaaiexchange.in.

10. Cross-Border Data Transfers

Your data is primarily stored on servers located within India (AWS Mumbai Region). In limited cases, we may transfer certain data to servers in Singapore or the United States for business continuity, global support, or analytics purposes. Any such transfer is subject to appropriate safeguards including standard contractual clauses and data processing agreements.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify you via:

• A prominent notice on our website and app
• An email to your registered email address
• A push notification via the mobile app

The "Last Updated" date at the top of this Policy reflects the date of the latest revision. We encourage you to review this Policy periodically.

12. Contact Us & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer: