Draft · pending legal review · not yet in force

Privacy policy

Version draft 2026-10-12

What personal data GrowwTap collects, why, who processes it, and the choices you have.

What we collect

When you request an invite: your name and email address.

When you join and verify: your mobile number, date of birth, PAN, the result of your Aadhaar verification, and your bank account details. For companies: registration details and director verification.

When you use the application: your contributions, settlements, documents accepted, and a record of sign-ins and security actions.

How it is protected

Sensitive fields are encrypted individually using post-quantum cryptography. No single member of staff can read them on their own.

Your Aadhaar number is not stored. We keep only its last four digits and the verification reference.

Who processes it

Verification providers check your PAN, Aadhaar and bank account. Email and SMS providers deliver codes and notices. The funding company for a deal receives the details needed to record your contribution and pay your settlements.

How long we keep it

We keep verification, contribution and settlement records for as long as the law requires after your relationship with us ends, then delete or anonymise them. Invite requests that do not lead to membership are deleted after twelve months.

Your choices

You may ask for a copy of your data, ask us to correct it, or ask us to delete what we are not required to keep. Contact the grievance officer named on the grievance page.

Not a member yet? Request an invite