Legal · Draft for launch · Last updated 16 Sep 2026
Privacy policy
What we collect, why, who sees it, and how long we keep it. Written to comply with the Digital Personal Data Protection Act, 2023 and the rules under it.
1. What we collect
| Data | From whom | Why |
|---|---|---|
| Mobile number, name | Everyone | To identify you and notify you about your deals |
| PAN | Sellers; buyers above ₹25,000 (full KYC above ₹2 lakh) | Identity and tax law (KYC / PMLA) |
| Government ID via DigiLocker | Sellers | Identity verification. We receive the verified fields, not your DigiLocker password |
| Bank account and IFSC | Sellers; buyers for refunds | To pay out or refund. Verified by a ₹1 penny-drop and name match |
| Deal contents | Both parties | Contract, checklist, messages, delivery proof, dispute decisions |
| Device and usage data | Everyone | Security, fraud prevention, fixing bugs |
We do not collect your selfie, location history, contacts or SMS.
2. Who sees it
- The other party to your deal sees your name, verified status and the deal contents — not your PAN or bank details.
- Our bank and payment partners receive what they need to open the escrow account, verify you and move money. They are regulated entities with their own obligations.
- Verification providers receive your PAN / ID to check it against government registries.
- Authorities when the law requires it (for example a court order, or reporting under the Prevention of Money Laundering Act).
We do not sell personal data and do not use it for advertising.
3. How long we keep it
Deal records and KYC data: five years after the deal completes, as required by law. Account data: until you close your account, then deleted within 30 days except what the law requires us to keep.
4. Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete what we are not legally required to keep, and withdraw consent for anything optional. Write to help@lockerpe.com. If you are not satisfied, use the grievance process; you may also approach the Data Protection Board of India.
5. Security
Data is encrypted in transit and at rest and stored in India. Access is limited to staff who need it, and every access is logged. Money is never stored with us — it is at the bank.
6. Changes
We will notify you in the app before any material change to this policy takes effect.