Privacy Policy

This Privacy Policy governs the Multiplyy mobile application and the website www.multiplyy.co.in (together, the “Platform”), owned and operated by Samay Fintech Private Limited (“Multiplyy”, “we”, “us”, “our”), having its registered office at 806, 8th Floor, Mahabir Tower, Main Road, Ranchi, Jharkhand – 834001.

By creating an account, submitting information, or continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the collection, storage, processing, and sharing of your personal data as described below. If you do not agree, please do not use the Platform.

1. How Multiplyy works

Multiplyy is a technology platform. Your financial products are distributed by an AMFI/IRDAI/other-regulator registered distributor or intermediary (“your Distributor”) whose client you are, and are issued by the respective product manufacturer (asset management company, insurer, lender, or issuer). Transactions are executed through regulated infrastructure such as stock exchange platforms, registrars and transfer agents, and payment systems.

We process your data to enable this — we do not offer investment advice and we are not the manufacturer of any product available on the Platform. Your Distributor and the manufacturer are independent entities and process your data under their own policies.

2. Information we collect

Identity and contact data: name, date of birth, gender, PAN, Aadhaar-based identifiers (in the redacted/masked form permitted by law), father’s or spouse’s name, photograph, signature, in-person verification video, address, mobile number, email address, and nominee details.

KYC, financial and suitability data: bank account details and supporting proof (cancelled cheque or passbook image), income range, occupation, tax residency and FATCA/CRS declarations, risk profile responses, and stated financial goals.

Transaction data: purchases, redemptions, switches, systematic instructions, mandates, payment references, and holdings created through the Platform.

Externally held portfolio data (optional): where you choose to consolidate holdings not transacted through us, we may access the consolidated account statement you request from an RTA to your registered email, or data you import through MF Central or upload manually. We access only the statement relating to that request; we do not read, open, or store any other message in your mailbox.

Technical and usage data: device identifiers, IP address, operating system, app version, crash and diagnostic logs, and in-app activity.

Communications: your correspondence with our support channels, which may be recorded or retained for quality, training, and regulatory purposes.

We do not access your SMS inbox, call logs, contacts, or personal media library.

3. How we use your information

We use your information to onboard you and complete KYC; to execute, settle, and report your transactions; to display your portfolio, statements, and reports; to enable your Distributor to service you; to process payments and refunds; to provide customer support; to detect and prevent fraud, money laundering, and misuse; to comply with obligations under applicable law and the directions of regulators; to improve and secure the Platform through internal analytics; and — where you have opted in — to send you product updates and marketing communications.

4. Legal basis and consent

We collect and process personal data with your consent, or for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023, and in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Prevention of Money-Laundering Act, 2002, and applicable SEBI, AMFI, RBI, and IRDAI requirements, each as amended.

You are responsible for the accuracy and completeness of the information you provide. We may decline or discontinue services if information provided is incomplete, inaccurate, or cannot be verified.

5. Who we share your information with

We never sell, rent, or trade your personal data. We share it only as follows:

• Your Distributor, including their authorised employees and sub-users, so that they can service your account and meet their own regulatory obligations.
• Product manufacturers and their registrars — asset management companies, insurers, lenders, issuers, and RTAs such as CAMS and KFin Technologies.
• Transaction and market infrastructure — stock exchange distribution platforms, KYC Registration Agencies, the Central KYC Records Registry, depositories, banks, payment aggregators, and NPCI.
• Service providers — cloud hosting, communication, e-sign, video KYC, analytics, and support vendors, engaged under contract and bound to confidentiality and security obligations.
• Regulators, statutory authorities, and courts, where disclosure is required by law, or where we believe in good faith that it is necessary to comply with legal process, enforce our terms, report suspected illegal activity, or protect the rights, property, or safety of Multiplyy, our users, or the public.
• Successors in interest, in the event of a merger, acquisition, restructuring, or transfer of business, subject to the transferee honouring this Policy.

6. If your Distributor changes

If your Distributor ceases to use the Platform, transfers their business, or you move to a different distributor, your account and the personal data necessary to continue servicing you may be transferred to the incoming distributor or handled as directed by the relevant regulator or registrar. You may instruct us in writing not to make such a transfer, in which case servicing through the Platform may be discontinued.

7. Storage, retention and security

Your data is stored on servers located in India. We retain personal data for as long as your account is active and thereafter for the period required under applicable law — including the minimum record-retention periods prescribed under SEBI, AMFI, and PMLA requirements — after which it is deleted or anonymised.

We maintain reasonable physical, technical, and administrative safeguards, including encryption in transit, access controls, and periodic reviews. However, no system is fully secure. Transmission of data over the internet carries inherent risk, and you transmit information at your own risk. You are responsible for keeping your login credentials, device, OTPs, and PIN confidential, and we are not liable for any loss arising from unauthorised access resulting from your disclosure, sharing, or negligent safekeeping of these. Notify us immediately if you suspect any compromise of your account.

8. Your rights

Subject to applicable law and our regulatory record-keeping obligations, you may: obtain confirmation of and access to your personal data; request correction of inaccurate or incomplete data; request erasure of data no longer required for a lawful purpose; nominate another individual to exercise your rights in the event of death or incapacity; and withdraw your consent at any time.

You can update most of your information directly in the app; some changes require supporting documents and additional identity verification. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and may result in our inability to continue providing services to you. Data we are required to retain by law will be retained notwithstanding a request for erasure.

9. Minors

The Platform is not intended for independent use by individuals under 18 years of age. Where an account or folio is held in the name of a minor, it must be opened and operated by a parent or lawful guardian, who provides consent under this Policy on the minor’s behalf and is responsible for all activity on that account.

10. Cookies and analytics

We use cookies and similar technologies on our website, and analytics tools within the app, to keep you signed in, remember preferences, measure usage, and improve performance. You can restrict or disable cookies through your browser settings, though some features may not function correctly as a result.

11. Communications

Transactional and regulatory communications — confirmations, statements, alerts, and notices — are an essential part of the service and cannot be opted out of while your account is active. Marketing communications can be declined at any time using the unsubscribe option in the message or by writing to us.

12. Third-party links and platforms

The Platform may contain links to third-party websites, applications, or payment interfaces. We do not control and are not responsible for the content, security, or privacy practices of such third parties. Once information is provided to a third party, its use is governed by that party’s own policy. Please review those policies before submitting any information.

13. Limitation of liability

To the maximum extent permitted by law, Multiplyy, its directors, officers, employees, and service providers shall not be liable for any indirect, incidental, consequential, or punitive loss arising from the use or inability to use the Platform, from unauthorised access to your data not attributable to our gross negligence or wilful default, or from the acts or omissions of your Distributor, any product manufacturer, or any third party.

14. Changes to this policy

We may update this Policy from time to time. The revised version will be posted on the Platform with an updated revision date and takes effect on posting. We will not reduce your rights under this Policy without your consent, and we will notify you of material changes. Please review this page periodically.

15. Termination

If your relationship with us ends, we will continue to protect your personal data in accordance with this Policy for as long as it is retained. You may write to us to request that we stop sharing or further storing your data, and we will honour that request to the extent permitted by our legal and regulatory obligations.

16. Grievances and contact

For any question, request, or grievance relating to this Policy or your personal data, write to us at grievances@multiplyy.co.in, quoting your registered mobile number or client code. We will acknowledge your communication and endeavour to resolve it within 30 (thirty) days of receipt.

Samay Fintech Private Limited, 806, 8th Floor, Mahabir Tower, Main Road, Ranchi, Jharkhand – 834001 · www.multiplyy.co.in

17. Governing law and jurisdiction

This Policy is governed by and construed in accordance with the laws of the Republic of India. The courts at Ranchi, Jharkhand shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.