Privacy Policy

This Privacy Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. By using Mokssh, you consent to the collection and use of your data as described below.

1. Who we are

Ewig Fintech Pvt. Ltd. ("Ewig Fintech", "we", "us", "our") operates the Mokssh platform accessible at mokssh.in and related mobile applications. We are incorporated under the Companies Act, 2013, with our registered office at Pune, Maharashtra.

Data Fiduciary: Ewig Fintech Pvt. Ltd.
Contact: privacy@mokssh.in

2. Data we collect

2.1 Information you provide

Identity: Name, mobile number, email address, date of birth
Financial: Insurance policy numbers, EPFO UAN, investment folio numbers, bank account details (masked)
Documents: Aadhaar-linked eSign data (not stored — processed at eSign service), will content, policy documents uploaded to vault
Family: Names, mobile numbers, and relationship of nominated family members

2.2 Information we collect automatically

Device identifiers, IP address, browser type
App usage patterns (for Smart Alerts inactivity detection)
Payment transaction records via Razorpay (we do not store card or bank account numbers)

2.3 Information from third parties

DigiLocker: Policy document metadata (with your explicit consent)
EPFO: PF balance and employer details (with your UAN-based consent)
SPARSH: Service verification for Defence Gold (for eligible personnel only)

3. How we use your data

To provide and improve the Mokssh platform
To operate Smart Alerts — detecting inactivity and notifying your nominated family members
To generate and store your Digital Will
To process subscription payments via Razorpay
To send transactional notifications (OTPs, alerts, reminders)
To comply with IRDAI, EPFO, RBI, and other regulatory requirements

4. Smart Alerts — special notice

The Smart Alerts feature involves sharing your financial summary with nominated family members upon detecting inactivity. You explicitly configure this sharing, choose the recipients, and can cancel any triggered alert within 12 hours. We treat this as a lawful sharing under your prior consent. You may disable Smart Alerts at any time from the app settings.

5. Data storage and security

All data is stored on servers located in India (AWS ap-south-1, Mumbai). Financial payload data is encrypted at rest using AES-256. Access cards issued via Smart Alerts are time-limited (72 hours) and single-use. We maintain an immutable audit log of all data access events.

We are not liable for data breaches caused by factors outside our reasonable control, including but not limited to state-sponsored attacks, zero-day vulnerabilities, or user negligence.

6. Data sharing

We do not sell your data. We share data only:

With your nominated family members — via Smart Alerts, as configured by you
With service providers: Twilio (SMS/IVR), Razorpay (payments), AWS (infrastructure), Anthropic (AI Advisor responses) — all under data processing agreements
With regulators: IRDAI, EPFO, IT Department — when legally required
In a business transfer — as disclosed under a subsequent privacy notice with user consent

7. Your rights under DPDP Act, 2023

Right to access — Request a copy of your personal data
Right to correction — Request correction of inaccurate data
Right to erasure — Request deletion of your account and data
Right to grievance redressal — Raise a complaint with our Grievance Officer
Right to nominate — Nominate a person to exercise rights on your behalf in case of incapacity

To exercise these rights, contact privacy@mokssh.in with subject "DPDP Rights Request". We will respond within 30 days.

8. Cookies

We use essential cookies only. We do not use advertising cookies or third-party tracking. You may disable cookies in your browser, but some features may not function correctly.

9. Children

Mokssh is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes to this policy

We will notify you of material changes via in-app notification and email (if provided) at least 15 days before the changes take effect.

11. Contact

For privacy queries: privacy@mokssh.in
For grievances: Grievance Officer →
Ewig Fintech Pvt. Ltd., Pune, Maharashtra