Legal
Privacy Policy
Last updated: May 1, 2026
This Privacy Policy explains how XYBIT collects, uses, shares and protects your personal information.
1. Information We Collect
- Identity data (name, DOB, PAN, Aadhaar, photo) for KYC
- Contact data (email, phone, address)
- Financial data (bank account, transactions, balances)
- Device & usage data (IP, device ID, app interactions)
2. How We Use It
- To verify your identity and comply with PMLA, FIU-IND and tax laws
- To operate the platform, execute orders and process payments
- To detect fraud, money laundering and other prohibited activity
- To provide customer support and product updates
3. Sharing
We share data with KYC vendors, chain analytics providers, payment partners, cloud providers and regulators when required by law.
4. Security
Data is encrypted at rest and in transit. Access is restricted via RBAC and audited continuously.
5. Retention
We retain regulatory records for at least 5 years as required by Indian law.
6. Your Rights
Email privacy@xybit.in to request access, correction or deletion.