1. Introduction
Vashiyat ("we", "us", "our") respects your privacy. This policy describes what data we collect, why, how we use it, and what rights you have under Indian law — particularly the Digital Personal Data Protection Act, 2023 (DPDP Act).
2. What we collect
We collect (a) account information you use to sign in (mobile number and email address, including when you continue with Google), (b) asset metadata you choose to add, (c) device and security signals required to protect your account, and (d) limited analytics about how you use Vashiyat.
3. What we never collect
We never collect or store: banking passwords, trading PINs, ATM PINs, UPI PINs, OTPs of third-party services, or any wallet seed phrase / private key. We do not need them and we will not ask for them.
4. Who can access your data
Only you and the nominees you have explicitly authorised through Vashiyat's active-notification workflow (including the configurable review window). Vashiyat employees cannot read your encrypted vault.
5. Cookies
We use only essential cookies required to keep you signed in and to protect against fraud. We do not use third-party advertising cookies.
6. Changes to this policy
If we make material changes to this policy, we will notify you at least 30 days in advance via email and an in-app banner.
7. Contact
Questions? Write or email contact@vashiyat.com.