Privacy Policy
How EkRatti and Openfin Fintech Private Limited collect, use, share and protect personal data.
Effective date: 04 October 2026
Last updated: 04 October 2026
1. Who we are
EkRatti is a brand owned and operated by Openfin Fintech Private Limited. References to “EkRatti”, “we”, “us” or “our” mean Openfin Fintech Private Limited.
2. Information we may collect
Depending on the service used, we may collect name, mobile number, email address, profile information, PAN/KYC details where legally required, bank or payment-related information necessary for transactions, address and delivery details, transaction history, device/browser/IP and security logs, support communications, and consent/preference records.
3. How we use information
- Account creation and identity/KYC workflows
- Transaction, settlement, redemption and delivery support
- Customer support and service communications
- Fraud prevention, security, monitoring and audit
- Legal, tax, accounting and regulatory compliance
- Product reliability and service improvement
4. Precious-metal and service partners
Where services are launched through a precious-metal infrastructure provider, information necessary for pricing, KYC, custody, settlement, redemption, delivery, customer support or compliance may be shared with that provider and its approved service chain. Augmont integration is currently proposed and subject to onboarding and agreement.
5. Payments and KYC
Specialised payment, banking and identity-verification providers may process relevant information directly. EkRatti does not intend to store payment authentication secrets such as UPI PINs or card PINs.
6. Sharing
We may share necessary data with precious-metal infrastructure providers, KYC providers, payment partners, banks, logistics providers, cloud and security providers, communication providers, professional advisers, auditors, and government or judicial authorities where required by law.
We do not sell personal data to advertisers or data brokers.
7. Security
We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, authentication, encryption where appropriate, monitoring and secure infrastructure. No internet service can guarantee absolute security.
8. Data retention
We retain personal data only for as long as necessary for the purpose collected and for applicable legal, regulatory, accounting, tax, fraud-prevention and contractual requirements.
9. Your rights
Subject to applicable Indian law, you may request access-related information, correction/completion of inaccurate data, erasure where permitted, withdrawal of consent for consent-based processing, and grievance redressal.
10. Cookies and analytics
We may use necessary cookies and similar technologies for security, functionality and performance. Optional analytics or marketing technologies will be used only in accordance with applicable consent requirements.
11. Children
EkRatti services are intended for users legally eligible to use the relevant service. Where a child’s personal data is involved, applicable parental-consent and child-data requirements will be followed.
12. Transactional communications
Transactional email may be sent from noreply@notify.ekratti.app with replies routed to support@ekratti.app.
13. Contact and grievance
Email: support@ekratti.app
Director’s Office: director@ekratti.app
Phone: +91 8960198439
Registered Office: C/O Geeta, Sudan Khera, Lalganj, Rae Bareli, Uttar Pradesh – 229206, India.
This policy is prepared for pre-launch partner review and should be revalidated against final production data flows and executed partner agreements before customer transactions are enabled.