Published 3 November 2026

1. What the law is

The Digital Personal Data Protection Act, 2023 (DPDP Act) is India’s data protection law. The Digital Personal Data Protection Rules, 2025 were notified on 13 November 2025 and set out how it works in practice. The Act covers digital personal data processed in India, and processing outside India when it is connected to offering goods or services to people in India.

2. Key dates

• 13 November 2025: the Rules were notified, and the Data Protection Board of India and the framework provisions took effect.
• 13 November 2026: the consent manager provisions take effect.
• 13 May 2027: the main duties take effect, including notice, consent, security safeguards and breach notification. The older SPDI Rules under the IT Act stay in force until then.

Check the Ministry of Electronics and Information Technology for updates to these dates.

3. Who is who

• Data principal: the person the data is about.
• Data fiduciary: the organisation that decides why and how personal data is processed.
• Data processor: an organisation that processes data on a fiduciary’s behalf.
• Significant data fiduciary: a fiduciary the government notifies, with extra duties such as appointing a Data Protection Officer in India.

4. Core duties of a data fiduciary

• Give a clear notice, and obtain consent or rely on another purpose the Act allows.
• Use data only for the purpose you stated, and keep it accurate.
• Protect data with reasonable security safeguards.
• Tell the Data Protection Board and affected people about a personal data breach.
• Erase data when the purpose is served or consent is withdrawn, unless the law requires you to keep it.
• Publish contact details for questions, and run a grievance redressal process.
• For children under 18, obtain verifiable parental consent, and do not track them or target advertising at them.

5. Rights of data principals

People can ask for a summary of the data you process, ask for it to be corrected, completed, updated or erased, seek redress of a grievance, and nominate someone to act for them if they die or become unable to.

6. Penalties

The Schedule to the Act sets monetary penalties. Failing to take reasonable security safeguards can attract a penalty of up to ₹250 crore.

7. Where to start

Map the personal data you hold, write your notices, set up a way to handle requests and breaches, and check your contracts with processors. Our DPDP readiness checklist is a quick first check.

This guide is for general information. It is not legal, tax or financial advice, and laws and rates change. Please check with a qualified adviser for your situation.

Published 3 November 2026

1. What TDS is

Tax deducted at source (TDS) means that a person making certain payments deducts income tax from the payment, deposits it with the government, and reports it. The recipient then gets credit for the tax deducted.

2. Payments it commonly applies to

Payments to contractors, professionals and consultants, and for commission or brokerage, are common examples. Each type falls under its own section of the Income-tax Act, with its own rate and threshold. These change from time to time, so confirm the current position for your payment.

3. The basic steps

• Collect the recipient’s PAN and details.
• Identify the right section and rate for the payment.
• Work out the tax. Where GST is shown separately on the invoice, TDS is generally worked out on the amount without GST.
• Deduct the tax and pay the net amount to the recipient.
• Deposit the tax with the government by the due date.
• File the periodic TDS return, and issue the TDS certificate to the recipient.

4. Common mistakes

• Using the wrong section or rate.
• Not collecting a PAN, which can lead to a higher rate.
• Depositing the tax late, which attracts interest.
• Not matching your records with what the recipient sees in their tax statements.

5. How Ohm Prompt Pay helps

Ohm Prompt Pay manages vendors and pays agents and consultants for all types of businesses, with GST and TDS handled. Try our GST & TDS calculator to see how an invoice breaks down.

This guide is for general information. It is not legal, tax or financial advice, and laws and rates change. Please check with a qualified adviser for your situation.

Published 3 November 2026

1. Why collections go out of sync

• Timing: money reaches your account after the payment was made.
• Partial payments: a customer pays less than the amount due.
• Bundled payments: one payment covers several dues.
• Duplicates: the same payment appears twice.
• Weak references: a payment arrives with no reference, or the wrong one.

2. UPI and mandates

UPI collections arrive one payment at a time and need to be tied to what was due. A mandate is a standing authorisation for recurring debits, so collections follow a schedule and failed debits need follow-up. Both need to end up against the right ledger.

3. What good reconciliation looks like

• Every amount due has a unique reference.
• Every collection and payout is matched to a ledger entry.
• Exceptions go to a queue, so people look only at what needs a decision.
• There is an audit trail for every match.
• It happens daily, not only at month end.

4. How Ohm Recon AI helps

Ohm Recon AI matches and reconciles UPI and mandate collections, and payouts, to each ledger, with Indian compliance and GST built in. See it in action on the Recon AI engine page.

This guide is for general information. It is not legal, tax or financial advice, and laws and rates change. Please check with a qualified adviser for your situation.

Last updated 3 November 2026

Ohm Cloud Infratech Private Limited (“Ohm”, “we”, “us”) provides cloud software products (Ohm Operator Plus, Ohm Prompt Pay, Ohm Recon AI and Ohm Growth Plus) and cloud infrastructure services through ohmmobility.in, our partner platform and our software (together, the “Platform”). This Privacy Policy explains how we handle personal data under Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and, as they come into force, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. By using the Platform you accept this Policy. If you do not agree, please do not use the Platform.

1. Information we collect

• Account and business information: name, business name, email, phone number and postal address, provided when you register, order or contact us.
• KYC and verification data: the identity and business documents described on our KYC & Details Collection page, used to verify your business and meet payment and regulatory requirements.
• Transaction information: orders, subscriptions, invoices and payment status. For payments you make to us, we do not store full card numbers, CVV, bank account numbers or one-time PINs. Our payment gateway partner handles these.
• Product and usage data: how you use the Platform and our products, such as dashboard activity, settings and support requests.
• Customer data: data that you or your users load into our products, such as vendor, agent, partner, referral and payment records. We handle this data on your behalf, as described in our Data Protection Policy.
• Technical data: device and browser details, IP address and cookies, used to operate and secure the Platform.
• Special categories and minors: we do not knowingly collect health, religious or biometric data, or data from anyone under 18.

2. How we use information

• Register users, operate accounts, and provide the Platform, our products and our services.
• Verify identity and business, directly or through authorised third parties, and complete KYC as required by law and payment partners.
• Process orders, issue GST invoices and enable payments through our gateway partner.
• Operate, maintain, secure and improve the Platform, including troubleshooting, analytics and fraud prevention.
• Communicate about orders, demonstrations, support and service updates, plus relevant offers unless you opt out.
• Meet legal obligations, including tax, accounting and cyber security requirements, and enforce agreements.

3. Consent and lawful use

We process personal data with your consent, or for other purposes the law permits, such as meeting a legal obligation or providing a service you asked for. We tell you what we collect and why when we ask for it. You can withdraw consent at any time, and withdrawing it is as easy as giving it. Withdrawing consent for data we need to provide or secure a service may limit what we can offer you.

4. Cookies and tracking

The Platform uses essential cookies to function and basic analytics cookies to understand usage. Cookies do not give us access to your device or to personally identifying data beyond what you provide. You can remove or reject cookies in your browser settings, though some features may be limited.

5. Disclosure and sharing

We do not sell personal data. We share data only:

• with payment gateway and banking partners, to process payments and meet onboarding requirements;
• with service providers that host, support or analyse the Platform, under written confidentiality and security obligations;
• with affiliates, to provide the services;
• where required by law, court order or a government authority, to protect rights, safety or property, or in a merger, acquisition or business transfer.

Aggregated or de-identified information that does not identify you may be shared.

6. Data storage and security

• Personal data is stored on secure servers located in India.
• We follow reasonable security practices and procedures, including encryption in transit, encrypted storage of KYC files, role-based access and audit logging.
• We report cyber security incidents and maintain system logs as required by the directions of the Indian Computer Emergency Response Team (CERT-In).
• You are responsible for keeping your account credentials confidential.
• No system is perfectly secure, so we cannot guarantee absolute security.

7. Data retention

We retain personal data only as long as needed for the purposes in this Policy or as required by law (for example, tax and accounting records). Data is stored on servers in India, after which it is deleted or anonymised.

Customer data that we process on a customer’s behalf is retained and returned or deleted as described in our Data Protection Policy.

8. Your rights

• You may ask for a summary of the personal data we hold about you and how it is used, and for it to be corrected, completed, updated or erased, subject to applicable law.
• You may withdraw your consent, and opt out of promotional messages, at any time.
• You may nominate another person to exercise your rights if you die or become unable to do so.
• Send requests through our Contact page. We respond within 30 days.
• Withdrawing or erasing data we must keep to meet a legal obligation, such as tax records, may not be possible until the legal retention period ends.
• You may close your account at any time. We may then delete or de-identify your information, subject to section 7.

9. Children

The Platform is intended for businesses and users aged 18 and older. We do not knowingly collect data from anyone under 18. If we find that we hold it, we will delete it.

10. Third-party sites and payment gateways

Third-party sites linked from the Platform follow their own terms and privacy policies, and we are not responsible for them. Payments are processed by an authorised gateway partner, which collects and processes card and banking details under its own terms.

11. Grievances

If you have a concern about this Policy or your data, contact our Grievance Officer through the Contact page. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India in the manner provided by the Digital Personal Data Protection Act, 2023.

12. Changes to this Policy

We may amend this Policy from time to time. The “Last updated” date shows the current version, and we post material changes on this page. Continued use of the Platform after a change means you accept the revised Policy.

13. Governing law and jurisdiction

This Policy is governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, subject to the arbitration clause in our Terms & Conditions.

14. Contact

Ohm Cloud Infratech Private Limited, First Floor, ScaleX Loop, Embassy Golf Links Road, Challaghatta, Bengaluru, Karnataka 560071, India. Use the Contact page for privacy requests and to reach the Grievance Officer.

Last updated 3 November 2026

These Terms & Conditions apply to your use of ohmmobility.in, our partner platform, our cloud software products (Ohm Operator Plus, Ohm Prompt Pay, Ohm Recon AI and Ohm Growth Plus) and our cloud infrastructure services (cloud infrastructure consulting and server management), provided by Ohm Cloud Infratech Private Limited (“Ohm”, “we”, “us”). Together these are the “Platform” and the “Services”. These Terms include our Privacy Policy, Data Protection Policy, Refund & Cancellation Policy and any published guidelines. By using the Services you confirm that you have read and accept them, have authority to bind any business you register, are at least 18, and are an Indian resident or an Indian-established business. If you do not agree, please do not use the Services.

This is an electronic record under the Information Technology Act, 2000 and the rules made under it. It does not need a physical or digital signature.

1. Eligibility

You must be 18 or older and provide accurate, complete and current information, updating it promptly when it changes.

2. Account registration and KYC

• Paid Services require registration and completion of the KYC process described on our KYC & Details Collection page.
• You are responsible for keeping your credentials confidential and for all activity under your account, and you must report unauthorised use immediately.
• We may verify submitted information and suspend or terminate accounts that contain fraudulent or misleading information.

3. Description of services

• Ohm Operator Plus: software as a service for rental management companies, covering rent and EMI collection per rental, deposits, penalties and downtime, and the split of each payment between the operator, the owner or investor, and fees.
• Ohm Prompt Pay: cloud software for vendor management and for payments to agents and consultants, with GST and TDS handled.
• Ohm Recon AI: cloud software that matches and reconciles UPI and mandate collections and payouts to each ledger, with Indian compliance and GST built in.
• Ohm Growth Plus: cloud software for paying referral partners, agencies and influencers on verified sign-ups and activations, with a dashboard, referral management and analysis.
• Cloud infrastructure consulting and server management: advice and hands-on help to set up cloud infrastructure on AWS, Azure and other providers, and management of your servers.

Ohm provides software and technology. Payment processing and settlement are carried out by authorised payment gateway and banking partners under their own terms and the regulations that apply to them.

4. Orders, payment and invoicing

• An order is a purchase request. After we confirm it, our team contacts you with the commercial terms and a secure payment link from our authorised gateway partner.
• Prices exclude GST, which is added at invoicing at the prevailing rates under the Central Goods and Services Tax Act, 2017 and the related state laws.
• We issue a GST tax invoice after payment is received.
• We do not store card or bank credentials for payments you make to us. The gateway partner handles them under its own terms.
• Subscriptions are billed for the selected period and renew only on your instruction.
• Consulting and server management are billed under the quotation or statement of work we agree with you. Cloud provider charges incurred on your behalf are billed at actual cost.

5. Your data and responsibilities

• Data that you or your users load into the Services remains yours. You license us to process it only to provide the Services to you.
• You are responsible for having a lawful basis, including any consent or notice the law requires, for the personal data you load into the Services, such as data about vendors, agents, customers, referral partners and their sign-ups.
• For that data, we act on your instructions as described in our Data Protection Policy.
• You must verify order, payment and payout details before authorising them.

6. Acceptable use

You must comply with applicable laws, and you must not:

• use the Services for unlawful, fraudulent or malicious purposes, including money laundering or fraudulent referral activity;
• transmit viruses or harmful code;
• use bots, scrapers or automated access to the Platform, other than through interfaces we provide;
• systematically retrieve content to build a database or directory;
• resell the Services without our written consent;
• attempt unauthorised access to the Platform or connected systems, or interfere with its security.

7. Third-party services

The Services may include or link to third-party services, including payment gateways, banks and cloud providers. Third parties are responsible for their own services and fees, and your use of them is subject to their terms. We make no representations about third-party services and exclude related warranties and liabilities to the extent the law permits.

8. Service availability

We aim for high availability but do not guarantee uninterrupted or error-free service. We announce planned maintenance in advance where practical. We may add, change, suspend or discontinue any part of the Services, and we will give reasonable notice of changes that materially reduce what you have paid for.

9. Intellectual property

We own or license the Platform, software, brand and content. You receive a limited, non-exclusive, non-transferable, revocable licence to use the Services for your own business. Feedback you give us may be used freely, without obligation.

10. Limitation of liability

To the fullest extent permitted by law, Ohm and its affiliates, officers, employees and agents are not liable for indirect, incidental, consequential, special or punitive damages, or for lost profits or revenue, including losses caused by third parties such as payment gateways, banks and cloud providers. Our aggregate liability in any 12-month period is capped at the amounts you paid for the Services in that period. Nothing in these Terms limits liability that cannot be limited under Indian law, or any right you have under the Consumer Protection Act, 2019.

11. Disclaimers and warranties

You use the Services at your own risk. To the extent permitted by law, the Services are provided “as is” and “as available”, and we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Services will be uninterrupted, error-free or meet your requirements. We are a technology and infrastructure provider, and we do not provide legal, tax or financial advice.

12. Indemnification

You indemnify and hold harmless Ohm, its affiliates and their personnel against claims, losses, liabilities, damages and reasonable costs (including legal fees) arising from your use of the Services in breach of these Terms, from the personal data you load without a lawful basis, or from your breach of applicable law.

13. Term and termination

• These Terms apply while you use the Services. You may stop using them at any time, and refunds for unused amounts follow the Refund & Cancellation Policy.
• We may suspend or terminate access for material breach, with notice where practical.
• On termination, we provide an export of your business data on request for 30 days, after which we delete it as described in our Data Protection Policy.
• Clauses meant to survive termination remain in effect.

14. Governing law, jurisdiction and arbitration

These Terms are governed by the laws of India. The parties will first try to resolve any dispute in good faith. A dispute that is not resolved within 30 days of written notice is referred to arbitration under the Arbitration and Conciliation Act, 1996, before a sole arbitrator agreed by both parties or, failing agreement, appointed as that Act provides. The seat and venue of arbitration is Bengaluru, the language is English, and the proceedings are confidential. Subject to that, the courts at Bengaluru, Karnataka have exclusive jurisdiction.

15. General provisions

• Amendments: we may change these Terms at any time and post the new version here. Continued use after posting means acceptance.
• Severability: an unenforceable provision does not affect the rest of the Terms.
• Assignment: you may not assign your rights without our written consent. We may assign ours to an affiliate or successor.
• Notices: send notices through our Contact page. We may send notices to the email address on your account.
• Force majeure: we are not liable for delays or failures beyond our reasonable control.
• Entire agreement: these Terms, with any order form or statement of work, are the entire agreement about the Services.

16. Contact and grievances

Ohm Cloud Infratech Private Limited, First Floor, ScaleX Loop, Embassy Golf Links Road, Challaghatta, Bengaluru, Karnataka 560071, India. Contact our Grievance Officer through the Contact page. We acknowledge grievances within 48 hours and resolve them within 30 days.

Last updated 3 November 2026

This policy explains cancellations and refunds for purchases made from Ohm Cloud Infratech Private Limited (“Ohm”, “we”). It does not limit any right you have under the Consumer Protection Act, 2019 or other Indian law.

1. Overview

This policy applies to subscriptions to Ohm Operator Plus, Ohm Prompt Pay, Ohm Recon AI and Ohm Growth Plus, and to our cloud infrastructure consulting and server management services. All refunds go back to the original payment method.

2. Software subscriptions

• Cancellation: cancel at any time by emailing support from your registered email address, with your order reference. Your subscription does not renew after you cancel.
• Partial refund: full unused months in the current billing period are refunded. The month in progress is not.
• Termination by Ohm: if we end the service for reasons other than your breach, the unused period is refunded in full.

3. Cloud infrastructure consulting and server management

• Before work begins: if you cancel an engagement before work starts, we refund the fees you paid for it in full.
• After work begins: you pay for work already done. We refund the balance of any fees paid in advance for work not yet done.
• Recurring server management: full unused months of a prepaid period are refunded when you end the service, as the agreed notice period allows.
• Third-party charges: charges that we have already paid to cloud providers or other third parties on your behalf are billed at actual cost and are not refundable.

4. Failed or duplicate transactions

If a payment fails or is debited twice, the payment gateway automatically refunds the excess, typically within 5 to 7 business days. If the refund does not appear in that window, contact us with the transaction reference.

5. How to request a refund

• Email us from your registered email address with your order reference (format OHM-XXXXXX) and the reason for the request.
• We acknowledge requests within 48 hours.
• Approved refunds are processed within 7 to 10 business days of approval. How long the money takes to appear in your account depends on your bank.

6. Taxes and credit notes

Where a refund relates to an invoice that included GST, we issue a credit note as the Central Goods and Services Tax Act, 2017 requires, and the refund includes the GST on the refunded amount.

7. Grievances

If you are unhappy with how we handled a refund or cancellation, contact our Grievance Officer through the Contact page. We acknowledge grievances within 48 hours and resolve them within one month, as the Consumer Protection (E-Commerce) Rules, 2020 provide. Ohm Cloud Infratech Private Limited, First Floor, ScaleX Loop, Embassy Golf Links Road, Challaghatta, Bengaluru, Karnataka 560071, India.

Last updated 3 November 2026

This Data Protection Policy sets out how Ohm Cloud Infratech Private Limited (“Ohm”, “we”) protects personal data in line with Indian law. It sits alongside our Privacy Policy, which describes the personal data we collect about our own users and customers.

1. Purpose and scope

This Policy applies to personal data that we handle through ohmmobility.in, our partner platform, our cloud software products (Ohm Operator Plus, Ohm Prompt Pay, Ohm Recon AI and Ohm Growth Plus) and our cloud infrastructure services. It applies to our staff and to the service providers who handle personal data for us.

2. Legal framework

We handle personal data in line with the laws that apply in India, including:

• the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which apply until they are replaced;
• the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, whose provisions are being brought into force in phases;
• the directions issued by the Indian Computer Emergency Response Team (CERT-In) on cyber security and incident reporting;
• the tax and accounting laws that require us to keep certain records, including the Central Goods and Services Tax Act, 2017.

As each provision of the Digital Personal Data Protection Act and Rules takes effect, we apply it to our practices.

3. Our roles

• As a data fiduciary: for personal data of our own users and customers, such as account, KYC and billing details, we decide why and how it is processed, and we are responsible for it.
• As a data processor: for personal data that our customers load into our products, such as vendor, agent, partner, referral and payment records, the customer decides why and how it is processed, and we process it only on the customer’s instructions to provide the Services.

4. Data protection principles

• Lawful and transparent: we process personal data with consent or for another purpose the law permits, and we tell people what we collect and why.
• Limited to the purpose: we use personal data only for the purposes we have told people about.
• Minimal: we collect only what we need for those purposes.
• Accurate: we keep data accurate and up to date, and we correct it when asked.
• Kept no longer than needed: we retain data only for the period set out in section 9.
• Secure: we protect data with reasonable safeguards, as set out in section 7.
• Accountable: we can show how we handle personal data, and we make our staff aware of their duties.

5. Notice and consent

When we ask for personal data, we give a clear notice in plain language that says what data we collect, why we use it, how a person can exercise their rights and how to complain. Consent is a free, specific, informed and unambiguous action. A person can withdraw consent at any time, and withdrawing is as easy as giving it. Where the law allows people to manage consent through a registered consent manager, we will work with them.

6. Rights of data principals

A person whose data we process can ask us to:

• give a summary of the personal data we process about them and the processing we carry out;
• correct, complete or update their personal data;
• erase their personal data, unless we must keep it to meet a legal obligation;
• redress a grievance; and
• nominate another person to exercise these rights if they die or become unable to do so.

We respond to requests within 30 days. When a request concerns data we process for a customer, we pass it to that customer and help them respond.

7. Security safeguards

• Personal data is stored on secure servers located in India.
• We use encryption in transit, encrypted storage of KYC files, role-based access limited to staff who need it, and audit logging.
• Our staff and service providers who can access personal data are bound by confidentiality obligations.
• We keep system logs for the period CERT-In requires, within India.
• We take reasonable steps to prevent unauthorised access, loss and misuse, and we review our safeguards as our services change.

8. Personal data breaches

If we become aware of a personal data breach, we act quickly to contain it and find its cause. We report cyber security incidents to CERT-In within six hours of noticing them, as its directions require. Where the Digital Personal Data Protection Act and Rules apply, we notify the Data Protection Board of India and each affected person as they require. If the breach affects data we process for a customer, we tell that customer without undue delay so they can meet their own duties.

9. Retention and deletion

• We retain personal data only as long as needed for the purposes in our Privacy Policy or as required by law, such as tax and accounting records. Data is stored on servers in India, after which it is deleted or anonymised.
• When a customer’s agreement ends, we export their business data on request for 30 days. After that, we delete it unless the law requires us to keep it.
• We keep a minimal record of deletion requests so that we can show we acted on them.

10. Service providers and transfers

We share personal data only with payment gateway and banking partners, hosting and support providers, and affiliates, as our Privacy Policy describes, and only under written contracts that require confidentiality and appropriate security. Our primary storage is on servers in India. If we transfer personal data outside India, we do so only as the Digital Personal Data Protection Act allows and subject to any restriction the Central Government notifies.

11. Children

Our Services are for businesses and for users aged 18 and older. We do not knowingly process the personal data of a child. If we find that we hold it, we delete it.

12. Accountability and oversight

Our management is responsible for this Policy. If the Central Government notifies us as a Significant Data Fiduciary, we will appoint a Data Protection Officer based in India, carry out the audits and impact assessments the law requires, and meet the other duties that apply to us.

13. Grievances and complaints

Contact our Grievance Officer through the Contact page with any concern about how we handle personal data. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may approach the Data Protection Board of India in the manner the Digital Personal Data Protection Act provides.

14. Governing law

This Policy is governed by the laws of India. Disputes are subject to the jurisdiction of the courts at Bengaluru, Karnataka, subject to the arbitration clause in our Terms & Conditions.

15. Review and contact

We review this Policy regularly and when the law or our Services change. The “Last updated” date shows the current version. Ohm Cloud Infratech Private Limited, First Floor, ScaleX Loop, Embassy Golf Links Road, Challaghatta, Bengaluru, Karnataka 560071, India.

Last updated 17 July 2026

1. Why we collect KYC

We verify the identity of your business and its authorised signatory before activating paid services and processing payments. The checks are required by our payment gateway, banking partners and Indian regulations, and they protect both parties against fraud.

2. Business documents

• Certificate of incorporation, partnership deed, or proprietorship proof, as applicable
• Business PAN and GST registration (GSTIN)
• Proof of registered business address
• A cancelled cheque or the header of a bank statement for the settlement account

3. Authorised signatory documents

• PAN card
• One government-issued address proof: Aadhaar, passport, voter ID or driving licence
• Contact details (phone and email) for verification

4. Collection and storage

• Documents are collected through a secure upload link or encrypted email after your order is confirmed. Our team guides you through the process.
• Files are stored encrypted, and access is limited to staff handling verification.
• Data is shared only with the payment gateway or banking partner for onboarding, or with authorities when the law requires it.

5. Verification timeline

Verification is typically completed within 2 business days of receiving complete documents. We will promptly tell you if anything is missing or unclear.

6. Data use, retention and rights

• KYC data is used only for verification and compliance, and never for marketing.
• Data is kept for the period required by law after the relationship ends, then securely deleted.
• You can request details of what we hold about you, as described in the Privacy Policy.

7. Contact and grievances

Ohm Cloud Infratech Private Limited, First Floor, ScaleX Loop, Embassy Golf Links Road, Challaghatta, Bengaluru, Karnataka 560071. Grievances are acknowledged within 48 hours and resolved within 30 days.