Skip to content

How we protect your data

What DigiKYC does with your identity details, and what it never does.

  • Masked identity numbers

    On your screens in DigiKYC, your PAN, CKYC number, tax identification numbers and nominee ID numbers are shown with only the last 4 characters.

  • Only a masked Aadhaar

    We keep only a masked Aadhaar, where just the last 4 digits are visible. Our forms accept only those 4 digits and refuse anything that looks like a full Aadhaar number, and an Aadhaar image from which our document reader has read the full number is not stored.

  • Your permission for each check

    Before an identity check sends your details to our verification provider, Finanalyz, you approve that one check with a code we send by WhatsApp to the mobile number on your record. Each approval covers one check, and we never send this code by email. Linking your bank through an Account Aggregator shares data only after you approve the consent on the Account Aggregator’s own screens.

  • Encrypted connections

    Every page is served over HTTPS, and our site tells browsers to use only encrypted connections to it (HTTP Strict Transport Security). Our pages cannot be shown inside another website’s frame.

  • Access limited to Sampadha staff

    In DigiKYC, your records are open only to you and to Sampadha staff signed in with their own staff accounts; a staff account that is switched off is signed out at once. Documents are kept in private storage, each viewing link works for 60 seconds, and every time a staff member opens one of your documents it is recorded: who, which document and when.

  • Kept as long as SEBI requires

    Your records are kept while you are a client and for 7 years after your account closes, as SEBI regulations require of investment advisers, and then deleted. The Privacy Notice sets out each kind of data.

  • Your rights

    Under the DPDP Act, 2023 you can see and download your data, have it corrected or erased, withdraw a consent, nominate someone to act for you and raise a grievance. Our Privacy Notice explains how.

Spotting a fake message

  • The links we email you to sign in, set your password or reset it go to digikyc.fintecindia.com. The e-signature link opens our e-signature provider’s page, and once your account is approved we link you to Moneyanam, Sampadha’s advisory app, where you continue after your account opens.
  • DigiKYC never asks for your full Aadhaar number, only its last 4 digits, and never asks for a payment.
  • We never ask you for a one-time code over a phone call. Enter codes only on the screen that asked for them.
  • If a message looks wrong, don’t open its links. Tell us at service@sampadha.com, or see Grievance redressal.

Cookies we use: see Cookies.