Privacy Policy

1. Introduction

BASEKYC ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Video KYC platform, visit our website, or interact with our services.

By using our services, you consent to the practices described in this policy. We comply with applicable data protection regulations including the Digital Personal Data Protection Act (DPDPA) 2023, RBI guidelines on data localization, and other relevant Indian laws.

2. Information We Collect

2.1 Information You Provide

• Account registration details (name, email, company, industry)
• Contact form submissions and demo requests
• Newsletter subscription email addresses
• Payment and billing information processed through our payment partner

2.2 Information Collected During KYC Sessions

• Video recordings and photographs captured during verification sessions
• Identity documents (Aadhaar, PAN, Passport, etc.) submitted for verification
• Geolocation data and device information during video sessions
• Biometric data including facial features for liveness detection

2.3 Automatically Collected Information

• Browser type, IP address, and device information
• Usage analytics and interaction data on our website
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information for the following purposes:

• Providing and maintaining our Video KYC platform and services
• Processing identity verification requests on behalf of our clients
• Fraud detection and prevention using AI-powered analysis
• Responding to inquiries, support requests, and demo scheduling
• Sending relevant product updates and compliance newsletters (with consent)
• Improving our platform, features, and user experience
• Meeting regulatory and legal obligations

4. Data Storage & Security

All data is stored on servers located within India in compliance with RBI data localization requirements. We employ industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• SOC 2 Type II certified infrastructure

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Our client institutions who initiated the KYC verification (as data processors)
• Regulatory authorities when required by law (RBI, SEBI, IRDAI)
• Trusted third-party service providers who assist in operating our platform
• Law enforcement when legally compelled

6. Data Retention

KYC verification records are retained as per regulatory requirements (minimum 5 years from the date of transaction or cessation of business relationship, as mandated by RBI). Marketing data such as newsletter subscriptions are retained until you choose to unsubscribe. You may request deletion of non-regulatory data at any time.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data (subject to regulatory retention requirements)
• Withdraw consent for marketing communications
• Lodge a complaint with the relevant data protection authority

8. Cookies

We use essential cookies for site functionality and analytics cookies to understand how visitors interact with our website. You can manage cookie preferences through your browser settings. Disabling essential cookies may impact site functionality.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or to exercise your rights, please contact us: