GoldWalt

Data Retention Policy

Supplements the Privacy Policy and Account Deletion page. Describes how long GOLD WALT INDIA (OPC) PRIVATE LIMITED retains personal and transactional data under Indian law, including the DPDP Act, 2023.

Last Updated: 26 July 2026

1. Principles

  • Retain data only as long as needed for the purpose collected or as required by law.
  • Apply encryption and access controls during retention.
  • Delete or anonymize when no longer required.

2. Retention Schedule (Indicative)

Account profile

While account is active; after deletion request, anonymized after the 14-day grace period except where a legal hold or admin block requires limited identity data.

KYC records

While active and typically up to 7 years after permanent deletion for PMLA/tax/audit compliance.

Transactions & payments

Typically up to 7 years for financial and tax records.

Support tickets & uploads

Retained with related account records until statutory purge where linked to disputes or transactions.

OTP records

Short term (minutes to days) until used or expired.

API logs

Rolling retention per security policy; may contain encrypted request metadata.

Price-lock sessions

Purged after approximately 180 days when expired (configurable).

FCM tokens

Until logout, deletion, or token refresh.

3. Account Deletion Flow

  1. User clears holdings and open obligations, then requests deletion in-app or by email.
  2. Account marked DELETE_PENDING; sessions, FCM tokens, and SIPs cancelled/expired.
  3. 14-day grace: recovery possible via OTP login on the same mobile.
  4. After grace: personal profile anonymized; KYC and financial records retained typically 7 years.
  5. 90-day cooldown: same mobile/PAN/Aadhaar cannot register a new account; then new registration is allowed unless admin-blocked.

4. Backups

Encrypted backups may retain deleted data until overwritten in rotation. Backups are not used to restore deleted accounts except for disaster recovery.

5. Processors

Partners (Cashfree, KYC vendors, AWS, Firebase, MSG91) retain data under their policies; we require deletion or return where contractually feasible.

6. Your Requests

Contact support@goldwalt.com for retention questions or correction requests. Grievance timelines apply per the Privacy Policy.