Privacy Policy

Background

India Gold Metaverse Limited (formerly known as India Gold Metaverse Private Limited and Indian Gold Metaverse Private Limited), a company incorporated under the Companies Act, 2013, having its registered office at FT Tower, CTS No. 256 & 257, Suren Road, Chakala, Andheri (East), Mumbai, India – 400093, is committed to protecting the privacy and security of your personal data (hereinafter IGM, Company, our, us or we).

This privacy policy (Privacy Policy) applies to all individuals (User, you, your) who are: (a) users of the IGM's karatometer product known as Goldsense, comprising a hardware device (Device) and/or its companion mobile application (Application), standard accessories, and user documentation (together, Product); or (b) representatives of organisations which are purchasers of the Device; and describes how we collect and process personal data about you. This Privacy Policy is incorporated into and subject to our Application Terms and Conditions (Terms) and shall be read harmoniously and in conjunction with them.

It is important that you read and understand this Privacy Policy as it will inform you about:

1. The types of personal data that we collect about you;
2. How we use this personal data, including how and when we share this information with third parties;
3. How we store and secure this information;
4. The rights you have in relation to this personal data; and
5. The grievance redressal process.

What personal data we may collect and process

Personal data is any data about an individual who is identifiable by or in relation to such data. We do not knowingly collect personal data from individuals under the age of 18. Where it becomes apparent that such data has been inadvertently collected, we will take appropriate steps to delete it, and we do not owe any responsibility to such individuals or their parents or lawful guardians to the extent permitted under applicable laws.

We only collect personal data that is specifically and voluntarily provided having regard to the purpose for its disclosure. It is our policy to limit the information collected to only the minimum information required.

We may collect and process the following categories of personal data in relation to your use of the Product.

1. Account / Registration Information: Name, telephone numbers, email addresses, and password.
2. Financial Information: Bank account details in the event you carry out commercial transactions with us.

You shall ensure that all personal data you provide to us is complete, accurate, consistent and always up-to-date. We may anonymise, de-identify, or aggregate personal data so that it no longer identifies an individual. Information that has been irreversibly anonymised is not treated as personal data under this Privacy Policy and may be used for statistical analysis, research, service improvement, product development, risk management, and security monitoring.

We may also collect the following information automatically by your use of the Product and operation of the Application, which may contain personal data.

1. Mobile Device Information: Such as Bluetooth / connectivity data.
2. Device Information: Such as the Device model, operating system, unique device identifiers, and the Device's serial / hardware ID.
3. Usage Information: Such as traffic data, location data, logs and other communication data, usage data, app interaction data, crash reports, diagnostic and performance data, and the resources that you access and use on or through the Product.
4. Measurement Data: Data generated through your use of the Device such as gold purity readings, timestamps, and associated test records saved in the Application.
5. Location Information: Location of your mobile device, only if permission to access location has been enabled by you. We ask for your permission at the time of onboarding.

We may also receive information in relation to your use of the Product from authorised third-party partners in connection with device registration, warranty, and after-sales support.

Cookies and tracking information

Cookies are small text files that are stored on browsers or devices by websites, apps, online media, and ads. The Application may use cookies, SDKs and similar tracking technologies to enhance user experience, remember preferences, and collect analytics regarding app usage. You may control certain tracking preferences through your device settings, though disabling certain technologies may affect the functionality of the Application.

How we may use your personal data

We process your personal data and information only where we have legal grounds of processing to:

1. Create and manage your account;
2. Administer User preferences;
3. Authenticate Users and pair your Device with the Application;
4. Provide you with full use of the Product and its features;
5. Record, store, and display gold purity test results and maintain your test history within the Application;
6. Provide customer support, respond to queries, investigate complaints, resolve disputes, provide technical support, and manage warranty / service requests;
7. Send you promotional or marketing communications if you have opted for it;
8. Detect, investigate, and prevent fraudulent, unauthorised, or illegal activity, monitor suspicious activity, protect User accounts, and to ensure the security and integrity of the Product;
9. Undertake internal research, analytics, and product development on an aggregated and / or anonymised basis wherever feasible;
10. Notify you of changes to this Privacy Policy or the Terms;
11. Carry out obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
12. Notify you when there are changes or updates to the services we offer you in connection to the Product;
13. Send you other service-related communications, including updates, alerts, and notices;
14. Notify you of your warranty status;
15. Comply with obligations under applicable laws;
16. Provide you with any other information, products, or services that you request from us;
17. Pair your Device to the Application;
18. Improve, operate, and maintain the Product and to deliver a better and more personalised experience by enabling us to undertake calibration, provide firmware updates and accuracy improvements, and estimate our audience size and recognise usage patterns of our Product;
19. Tag test records to the location of the mobile device, if you have enabled permission to access location;
20. Help you locate service centres near you, if you have enabled permission to access location;
21. Use automated tools and algorithms to support: (i) identity verification; (ii) fraud detection and prevention; (iii) transaction monitoring; (iv) cybersecurity monitoring; (v) account security; (vi) risk scoring; and (vii) suspicious-activity detection. Where automated processing is likely to materially affect a User, IGM shall provide for human oversight of the relevant decision, to the extent required under applicable law; and
22. Process payments and settlements, validate payment instructions, reconcile financial transactions, prevent payment fraud, and comply with payment-network requirements.

How we may disclose and transfer your personal data

We do not routinely disclose or transfer an individual's personal data to other organizations unless we have the prior and specific permission of the individual or the entity that provided such information on behalf of such individuals.

We may share your personal data under the following circumstances, to the categories of entities identified below:

1. Group companies/affiliates of IGM if required for the purposes of processing listed above;
2. Third-party service providers who perform services on our behalf, such as cloud hosting, analytics, payment processing, customer support, and SMS / e-mail communication, who are contractually bound to protect your information;
3. Authorised dealers, distributors, or service centres solely for warranty, repair and after-sales service purposes;
4. Government agencies, regulators, enforcement authorities, judicial and adjudicatory bodies, and other such entities to respond to requests from authorities or where required to be provided under applicable laws; and
5. In connection with a merger, acquisition, restructuring, or sale of assets, subject to the acquiring entity agreeing to honour the terms of this Privacy Policy.

Except as set out in this Privacy Policy or specifically allowed under applicable laws, we will not disclose, share, sell, or rent your personal data to any third party.

Third-Party Links

The Application may link to a website, application or online service a third party operates. IGM does not own, operate, or control such a third-party platform and is not responsible for its privacy practices, information-security measures, availability, content accuracy, or the products or services it offers. A User should review the privacy policy and terms of use of a third-party platform before providing personal data to it. Inclusion of a third-party link does not constitute IGM's endorsement of that party.

Withdrawal of consent

Personal data is provided to IGM voluntarily. Should you subsequently choose to withdraw your consent in respect of your personal data or to unsubscribe from mailing lists or any registrations, you may do so by clicking here. However, in accordance with applicable law, you or your organisation will bear the consequences of such withdrawal as regards the goods or services provided by IGM. Further, withdrawal of consent shall not affect the validity of processing by IGM under any other lawful ground of processing.

Your rights in relation to your personal data and how you can exercise them

You have certain rights under the data protection laws of India (as and when the relevant provisions are brought into effect and subject to any legislative changes). In particular, you have:

1. The right to request access to information about your personal data, including a summary of personal data which is being processed and the processing activities undertaken with respect to such personal data.
2. The right to request the correction, completion, updating, and erasure of your personal data.
3. The right to nominate any other individual who shall in the event of your death or incapacity exercise your rights in accordance with law.
4. The right to a readily available means of grievance redressal.

You may exercise your rights by writing to our Grievance Officer as provided below.

How we protect and store your personal data

We have implemented reasonable security measures and appropriate technical, administrative, and organisational measures, including encryption, access controls, and secure servers, to protect your personal data and information against unauthorised access, alteration, disclosure, or destruction, in accordance with applicable data protection laws.

We maintain business-continuity and disaster-recovery procedures to minimise disruption to the services we offer you and to protect the availability of personal data, including redundant infrastructure, encrypted backups, disaster-recovery environments, periodic restoration testing, contingency planning, and incident-response coordination.

We conduct periodic assessments of our information-security controls, including vulnerability assessments, penetration testing, configuration reviews, internal audits, third-party security assessments, and compliance reviews.

Personal data collected under this Privacy Policy is hosted on servers located in India or other jurisdictions, subject to applicable law and you hereby consent to the same.

Unless otherwise required by applicable laws, we will retain your personal data for as long as necessary to fulfil the specified purposes set out under Clause 4 above or until you withdraw your consent to the specific processing activities (unless we have an alternate legal basis to process your data), whichever is earlier.

Changes to Privacy Policy

We may update this Privacy Policy from time to time as our privacy practices change or as required by law. In such cases, we will obtain your consent as required. The effective date will be displayed at the beginning of this Privacy Policy. Where applicable law requires it, we shall notify you of a material change through appropriate electronic means.

While this Privacy Policy and request for consent are made available in English, in case you wish to access the same in any other official Indian language, you may contact our Grievance Officer as provided below.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) to be invalid, illegal, or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.

Grievance Officer

If you have any questions or grievances regarding this Privacy Policy or how we handle your personal data, please contact the Grievance Officer whose details have been provided below:

Consent

If you give us personal data about others, please make sure that they are aware of how their personal data may be used as set out in this Privacy Policy and that they have agreed to the processing of their personal data for such purposes. Where required by us, you shall be required to provide us with proof of consents obtained from such persons.