← Back

Legal

Privacy Policy

Last updated 17 July 2026

Rytstep Invest Tech Private Limited along with Kytrunner Ventures Private Limited (including its affiliates and associates)(hereinafter collectively referred to as “GoReach”, “we”, “us” or “our”), a company established under the laws of India, having its registered office at 1041, Prestige Jade, Pavilion, No.4 Gear Road, Bellandur, Bangalore South, Bangalore - 560103, Karnataka, India, hereby recognizes the importance of securing the Personal Information (as defined below) that we collect about our clients or Platform users (“you”, “your” etc.).

This Privacy Policy (“Privacy Policy”) sets out GoReach’s practices in relation to the storage, use, processing, and disclosure of your Personal Information that may be accessed by us, or which you may have chosen to share with us. When using our Products and Services, while making any investments in the Products offered by GoReach, sending inquiries (including for the purpose of investor education awareness) or subscribing to our other services, you expressly agree to this Privacy Policy and you have given your consent for the usage/processing of the Personal Information in accordance with the terms of this Privacy Policy. “Personal Information” is information that relates to a natural person which, either directly or indirectly, or in combination with information that is available or likely to be available to us, is capable of identifying such person.

Please note that unless specifically defined in this Privacy Policy, capitalised terms shall have the same meaning ascribed to them in our Terms and Conditions, available here (“Terms”). This Privacy Policy shall be read in conjunction with the Terms.

This Privacy Policy applies to all Personal Information collected and received for and on behalf of GoReach, including on the Website and the Application or through the Platform. By accessing the Platform, you are providing us with consent to process your Personal Information and you acknowledge that we will collect, store, use, and disclose your Personal Information in accordance with this Privacy Policy.

1.sources of personal information

1.1GoReach collects Personal Information about you from a variety of sources, including through:

  1. (a)your online and electronic interactions with us, including via our Platform, via chatbot, including AI Chatbot (namely Reacher or such other name as may be determined by us), online campaigns, Transaction link and other new channels as and when they are introduced, such as WhatsApp;
  2. (b)your offline interactions with GoReach, including via direct marketing campaigns, hard copy registration/application forms, competition entries and contacts through the GoReach investor servicing team;
  3. (c)your interactions with us through your communications and interactions with us through emails, IVR, etc.;
  4. (d)third-parties (including but not limited to analytics providers, Payment Processors, credit information companies, providers of technical and delivery services, advertising networks, third-party software development kits, our distributors, service providers and/or agents); and
  5. (e)our Affiliates.

1.2The information being collected is the basis of our ability to provide you with good, qualitative, timely and efficient service, while also keeping the information and data provided totally secure and confidential.

2.datasets that we collect

2.1We collect, use, store, transfer, or otherwise process Personal Information about you to the extent permissible under Applicable Laws. Such Personal Information includes, but is not limited to:

  1. (a)Your name and contact information, such as your residential address, business/ office address, email address, telephone number, mobile number or fax number;
  2. (b)Information relating to your identity, including your date and place of birth, age, gender, nationality, Permanent Account Number (PAN) Details and country of domicile and/or your nationality, etc.;
  3. (c)Information relating to your work (if self-employed, the nature of the self-employment) and income;
  4. (d)Financial information such as bank account details (including information in relation to changes in bank accounts), beneficiary account number, type of accounts held, bank statements;
  5. (e)Purchase and payment-related information such as payment records, payment method, cardholder data, bank account holder details, amount and date of payments, phone number, fax number, email address;
  6. (f)Generation and storage of passwords (PIN) in encrypted form based on a request from the investor under the online mode of investment;
  7. (g)Photographs and signature;
  8. (h)Device data including your internet protocol (IP) address, the internet service provider, your browsing history, device identity, mobile operator, WiFi connection, service set identifier (SSID), International Mobile Subscriber Identity (IMSI), International Mobile Equipment Identity, etc.);
  9. (i)Location data that describes the precise geographic location of your device;
  10. (j)Behavioural details regarding how you utilise our products, services, offers, etc.;
  11. (k)Marital status, gender, occupation;
  12. (l)Social relationship details such as your father’s name, spouse’s name, mother’s name, anniversary date, nominee details;
  13. (m)Details of your communications and Transactions with us;
  14. (n)Some sensitive Personal Information such as your health information, Covid-19 vaccination status or certificate in case you avail any part of our Services that requires us to process your health records under Applicable Laws;
  15. (o)Any other information that you may share with us or that we collect from you while you visit, access or use our Platform or contact us for query resolution; and
  16. (p)Information that we receive from third parties, such as analytics providers, advertising networks, credit information companies, search information providers, and publicly available sources.

2.2We may also collect, use, and share aggregated data such as statistical or demographic data, including your interests, age, general location, language preferences, and gender, for any purpose. Aggregated data could be derived from your Personal Information, but is not considered Personal Information under Applicable Laws. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific feature of the Platform. All rights, title, and interest in and to such aggregated data, including all intellectual property rights therein, shall belong to and with GoReach.

2.3GoReach shall not be responsible for verifying the accuracy or completeness of the Personal Information provided by you.

3.purpose of collection

3.1We will only use your Personal Information in accordance with Applicable Laws. Most commonly, we will use your Personal Information to provide you with access to the Platform, or where we need to comply with a legal obligation. However, we may also collect and process Personal Information about you for one or more of the following purposes:

  1. (a)to fulfil your requests in relation to the Services provided to you, and to contact you either through GoReach or our Third Party Services Providers through any channel of communication, including but not limited to email, telephone, SMS, etc.;
  2. (b)to deliver to you any administrative notices, alerts, advice and communications relevant to your use of the Services;
  3. (c)where permitted by Applicable Law, to coordinate with GoReach group companies and its authorised agents and Third Party Services Providers for the purpose of providing you information about Products/ Services or offering you various value-added services and information;
  4. (d)to share your Personal Information with Affiliates, only to the extent permitted under Applicable Law and if you express interest and provide consent to receiving information about other Affiliate entities’ offerings;
  5. (e)for market research, project planning, and troubleshooting problems;
  6. (f)to automatically populate any information related to you in any required fields or Documents on the Platform;
  7. (g)to deliver the Services or any Content to you or for any other lawful purposes;
  8. (h)to monitor trends so we can improve the Platform, including through surveys;
  9. (i)to improve our business and delivery models, including the training and development of our AI systems;
  10. (j)to investigate, prevent, and take action against illegal or suspected fraud or money laundering activities and conduct forensic audits;
  11. (k)to address your grievances, Feedback, or inquiries;
  12. (l)to detect, respond to and recover from cybersecurity incidents;
  13. (m)to carry out a merger, acquisition, or any other corporate structuring or Transaction;
  14. (n)to comply with Applicable Laws;
  15. (o)to enforce the Terms; and
  16. (p)to use tools to evaluate your device’s signals and generate insights about you to increase customer engagement and improve our marketing efforts.

3.2In certain cases, we may collect Personal Information to comply with our obligations under law, or under the Terms. If you fail to provide us with such Personal Information as and when requested by us, we may not be able to perform our obligations under the arrangement we have with you or are trying to enter into with you (for example, to provide you with features of the Platform). In this case, we may have to limit your access to or use of the Platform (or part thereof).

4.update your personal information

4.1GoReach and Third Party Services Providers encourage you to Update your Personal Information on a regular basis and as and when required. You are also entitled to review the information provided to us. In case any of the data/information is found to be inaccurate or incorrect, please intimate us of the same for immediate amendment. GoReach and any person acting on its behalf shall not be responsible for the authenticity of the Personal Information or sensitive personal data or information supplied by you.

4.2Subject to Applicable Laws, you may:

  1. (a)request access to information regarding the Personal Information processed by us;
  2. (b)request correction, completion, updating or erasure of your Personal Information;
  3. (c)withdraw any consent previously provided for processing of your Personal Information;
  4. (d)seek redressal of grievances relating to the processing of your Personal Information; and
  5. (e)nominate another individual who shall, in accordance with Applicable Laws, exercise your rights on your behalf in the event of your death or incapacity.

4.3Requests relating to the foregoing rights may be submitted using the contact details specified in Clause 15 of this Privacy Policy.

5.sharing/transfer/disclosure of personal information

5.1We may share or disclose your Personal Information with our other corporate entities, Affiliates, lending partners, technology partners, business partners (such as UPI platforms), merchants and other third parties (credit bureau, recovery teams) as permitted by Applicable Laws. This disclosure may be required for us to provide you access to our Services, use of the Platform, for checking your eligibility for the Products and Services offered on Platform, for enhancing your experience, to comply with our legal obligations, to enforce our agreement(s) with you, to facilitate our marketing and advertising activities, to prevent, detect, mitigate, and investigate fraudulent or illegal activities related to our services, for providing credit defaults and credit information, for communicating with you, for enhancing your pre-qualified offers if applicable, for data enrichment, to authenticate your KYC information with the relevant Authorities such as KYC Registration Agencies, NSDL, CDSL, UIDAI, and CKYCR, and also to register you for the Products or Services that you would be opting for.

5.2We may disclose Personal Information if required to do so by law or in good faith belief that such disclosure is reasonably necessary to respond to notices, court orders, or other legal process. We may disclose Personal Information to law enforcement offices, third-party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to enforce our Terms or Privacy Policy, respond to claims that an advertisement, posting or other Content violates the rights of a third party, or protect the rights, property or personal safety of our users or the general public.

5.3We and our Affiliates will share some or all of your Personal Information with another business entity should we plan to merge with, or be acquired by, that business entity, or undergo re-organisation, amalgamation, or restructuring of business. Should such a Transaction occur, such other business entity (or the new combined entity) will be required to follow this Privacy Policy with respect to your Personal Information.

5.4Availing your credit information through GoReach is subject to your passing of appropriate identity authentication for security and privacy purposes.

6.marketing communications

To the extent permitted under Applicable Law, we may send you marketing communications about our Products, Services, or Updates, either electronically or physically, from time to time. You can withdraw your consent or opt out of receiving such communications at any time by following the instructions provided in our communications or by contacting us directly. Please note that even if you opt out of marketing communications, we may still send you service-related or transactional messages that are necessary for the performance of our Services.

Where processing of Personal Information is based on your consent, you may withdraw such consent at any time through the mechanisms made available on the Platform or by contacting us using the details provided in this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal. However, withdrawal of consent may result in our inability to provide certain Products, Services or functionalities that require such processing.

7.retention of personal information

GoReach shall not retain your Personal Information for longer than necessary to serve the purpose for which it is sought, or is otherwise required to be retained under any Applicable Law or our data retention policies, if any.

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and requirements under Applicable Laws.

8.use of cookies

Cookies are small data files that are stored on your device. We use cookies and other tracking technologies to distinguish you from other users on the Platform and to remember your preferences. This helps us provide you with a good experience when you use the Platform, and allows us to improve the Platform.

We identify you by way of using cookies. The data collected by way of cookies will allow us to provide you with a tailored and user-friendly experience. They also enable you to access certain features of the Platform. Most devices can be set to notify you when you receive a cookie or prevent cookies from being sent. If you prevent cookies from being sent, it may limit the functionality that we can provide when you visit the Platform.

Additionally, you may encounter cookies or other similar technologies on certain pages of the Platform that are placed by third parties. We do not control the use of cookies by such third parties.

9.cross-border transfers

Please note that all your Personal Information is only stored on systems located within India, as per the Products and Services availed by you. We do not transfer your Personal Information to any third country.

10.use of mobile applications

In case you use any facilities/products/services through the Application, any Additional Terms and Conditions governing the manner of usage of the Application, including collection and disclosure of Personal Information, shall be applicable and the same shall be read in conjunction with this Privacy Policy.

11.third party services and links to other sites

The Platform may contain services provided by or links to and from the websites of Third Party Service Providers. Please note that the Third Party Services that may be accessible through the Platform are governed by their own privacy policies. We do not accept any responsibility or liability for the policies or for any Personal Information that may be collected by providers of such Third Party Services. Please check their policies before you submit any Personal Information to their websites or use their services.

12.children’s data

The Platform is not intended for use by children and minors as defined under Applicable Law. Parents and legal guardians are requested to ensure that Personal Information is not provided by minors.

13.security of data

To protect your Personal Information from unauthorised access or disclosure, loss or misuse, we have adopted reasonable security practices and procedures in line with industry standards. The transmission of information is not completely secure for reasons beyond our control. We adopt industry-standard security measures and keep updating our systems from time to time to protect your Personal Information against any hacking or virus dissemination.

In the event of a personal data breach affecting Personal Information processed by GoReach, we shall take reasonable measures to contain, assess, investigate, mitigate and remediate the incident and shall provide notifications to affected individuals and competent authorities, where required under Applicable Laws.

14.change in privacy policy

GoReach reserves the right to change the Privacy Policy at any time. Please note that any such changes to the Privacy Policy will be effective from the date of posting the updated version of the Privacy Policy on the Platform.

15.grievance redressal

In case of any grievances, you may contact our investor services centres or our office situated at 1041, Prestige Jade, Pavilion, No.4 Gear Road, Bellandur, Bangalore South, Bangalore - 560103, Karnataka, India, or write to us at cs@goreach.finance. If any complaint remains unresolved or in case of escalations, you may write to our Grievance Officer:

If you believe your complaint is not redressed by us satisfactorily, you may lodge a complaint with SEBI’s SCORES portal: https://scores.sebi.gov.in/

Name
Prashant Kumar Tiwari

Start your GoReach journeyand build wealth.

Join our newsletter to stay up to date on features and releases.

By subscribing you agree to with our Privacy Policy and provide consent to receive updates from our company.