Privacy Policy - General

Last Updated: 4th November, 2026

1. Scope

We ask that You read this Privacy Policy (“Privacy Policy”) carefully as it contains important information about who Billionbrains Garage Ventures Limited (hereinafter referred to as “Groww”, “Company”, “We”, “Us” or “Our” which expression shall include its affiliates, subsidiaries, successors and assigns) is, how and why We collect, use, store, transfer and share Personal Information, Your rights in relation to Your Personal Information, and how to contact Us. This Privacy Policy should be read alongside, and in addition to the Terms of Service (“Terms”) along with any other documentation or agreements shared on the Platform (as defined hereinafter).

The Company is the developer and owns and operates the website www.groww.in and the mobile application ‘Groww’ (collectively referred to as the “Platform”). “You” and “Your” shall mean anyone who visits, accesses, or uses the Platform or obtains Services (defined below) from Us through the Platform.

We may also allow Our group companies, affiliates and subsidiary companies to use Our Platform to offer their products and services to You, under applicable terms and conditions as may be specified on Our Platform from time to time.

Where We have used but have not explained the meaning of a capitalised term in this Privacy Policy, that capitalised term has the same meaning as mentioned under the Terms. Whenever We refer to ‘information’ or ‘data’ under this Privacy Policy, We refer to Your Personal Information (described in the section titled ‘Personal and Non-Personal Information’). Whenever We refer to the ‘law’ under this Privacy Policy, We are referring to the applicable law as amended from time to time.

Please read the Privacy Policy carefully prior to using or registering on the Platform or accessing/availing the Services made available on the Platform including inter alia in relation to mutual fund distribution, stock broking services, financial services including but not limited to disbursement and distribution of loans, payment services through the Unified Payments Interface (UPI), etc. (“Services”).

For the purpose of providing You the Services, We collect, process, store and are responsible for certain Personal Information about You. When We do so, We are regulated by the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and other applicable laws. Personal Information does not mean information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force; Personal Information includes “Sensitive Personal Data”, which relates to password; financial information such as bank account or credit card or debit card or other payment instrument details; physical, physiological and mental health condition; sexual orientation; medical records and history; biometrics or any other data categorised as sensitive under the aforesaid 2011 Rules and/or any other applicable law in India.

By accessing Our Services or using the Platform, You consent to Us using Your Personal Information in the way described in this Privacy Policy.

IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT USE OR ACCESS OUR SERVICES.

2. How to contact Us - Grievance Officer

If You have any questions, concerns or suggestions about how We collect, store or use Your information, You can reach out to Our Grievance Officer. Our Grievance Officer is designated under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Name: Shakshi Khandelwal

Email: [email protected]

3. Personal and Non-Personal Information

Personal Information means any information of a natural person which can assist in identification of that person. Below is a list of types of information that We may collect when You use the Platform or Services.

1. Information You provide Us: You may provide certain information to Us voluntarily while registering on Our Platform or for using Our Services. Such information includes any identification/ correspondence details including Name, Mobile number, Email ID, Age, Date of Birth, Gender, Marital status, Occupation, Address, Profile image, Photograph, Signature, Nominee details, Communication logs, Support logs, PAN, data from officially valid documents, records pertaining to KYC process and identity verification data. We may also ask You to provide certain additional information about You or any person acting on Your behalf on a case-to-case basis (collectively “Personal Information”). Further, You hereby acknowledge and agree that Our affiliates or group or subsidiary companies registered with financial services regulators may retrieve from Your records available with a third party including from Know Your Customer (KYC) Registration Agency (KRA) such as name, KYC details, KYC status, and related documents.
2. Transactional Information: We may also ask You for certain financial information, including bank account details, transaction details, investment information, pledged securities details, financial information received through account aggregators, SMS data, credit information, loans related data, and derived scores (collectively “Transaction Information”).
3. Non-Personal Information and Cookies: We may also collect certain non-personal information, such as Your internet protocol (IP) address, web request, operating system, browser type, URL, internet service provider, aggregate user data, software and hardware attributes, pages You request, and cookie information, etc. which will not identify You specifically (“Non-Personal Information”), while You browse, access or use the Platform. When and if You download and/or use the Platform through Your mobile device, We may receive information about Your location, Your IP address, and/or Your mobile device, including a unique identifier number for Your device. You can withdraw Your consent at any time by disabling the location-tracking functions on Your mobile. However, this may affect Your use/ enjoyment of certain features on Our Platform. You acknowledge and agree that when You browse the Platform without being a registered member or without providing Your Personal Information, We may still collect and store Your Non-Personal Information.
4. User Communications: If You choose to post messages on Our message boards, chat rooms or other message areas or leave feedback or if You send Us correspondence, such as emails or letters, or if other users or third parties send Us correspondence about Your activities or postings on the Platform (“User Communications”), We will collect and store such information You provide to Us. We retain this information as necessary to resolve disputes, provide customer support, respond to queries and inquiries, and troubleshoot problems and improve the Services. Any communication, post, comment or correspondence made by You while making use of Our Platform or availing the Services including but not limited to providing any general feedback or any communication with Our customer service executive including any integrated artificial intelligence feature offered by the Platform/ chatbot may be collected by Us and retained as per the terms of this Privacy Policy.
   All information disclosed by You including but not limited to Your Personal Information, Non-Personal Information, User Communications and Transaction Information shall be deemed to be disclosed willingly and without any coercion. No liability pertaining to the authenticity/ genuineness/misrepresentation etc. of Your Personal Information provided to Us or with regard to any fraud or negligence thereof shall lie on the Company nor will the Company be in any way responsible to verify any information obtained from You. All information disclosed by You including all Personal Information collected by the Company shall be stored on servers, log files and any other storage system owned by the Company or by third parties in India. Our primary goal in doing so is to provide You a safe, efficient, smooth and customised experience on the Platform. The information collected by Us allows Us to provide the Services and features on the Platform that most likely meet Your needs, and to customise the Platform to make Your experience safer and easier.

4. Sources of Personal Information

Apart from the information that You may provide to Us, We may collect Personal Information about You from third parties such as CKYCR, KRAs, Our subsidiaries and affiliates, and other such third parties that may be authorised to share Your information with Us. 

5. How We use Your Personal Information

We use Your information only for the purposes set out below:

1. Provision of Services including but not limited to allowing You to access, invest, and trade in securities.
2. Managing Our relationship with You or Your business, including to provide Services to You, to conclude transactions, to generate and maintain user profiles, and to provide personalised features/content of interest to You.
3. Communicating with You about Our products and Services, and responding to Your requests/queries, through calls, SMS messages, emails, Platform notifications or other means.
4. Developing and carrying out marketing activities.
5. Studying how customers use Our Platform and Services.
6. Delivering promotional offers including contacting You through calls, SMS messages, emails, Platform notifications or other means.
7. Testing new products.
8. Analytics and research and otherwise improving Our products and Services.
9. Managing how We work with other businesses that provide services to Us and Our customers.
10. Developing new ways to meet Our customers' needs and to grow Our business.
    BY USING THE PLATFORM/ AVAILING OUR SERVICES, YOU AUTHORISE US, OUR AFFILIATES & OUR ASSOCIATE PARTNERS TO CONTACT YOU VIA EMAIL OR PHONE CALL OR SMS (INCLUDING WHATSAPP) AND OFFER YOU THEIR SERVICES/ PRODUCT(S) AND MAKE PROMOTIONAL OFFERS IN RELATION THERETO. THE FOREGOING CONSENT AND AUTHORISATION IS IRRESPECTIVE OF THE FACT THAT YOU HAVE REGISTERED YOURSELF UNDER DND OR DNC OR NCPR.
    
11. Identifying, investigating, reporting and preventing fraud, money laundering and other crime.
12. Managing risk for Us and Our customers.
13. Managing and protecting Our information technology infrastructure.
14. Complying with Our legal obligations.
15. Investigating and responding to complaints and feedback.
16. Sharing information with government agencies, regulatory bodies, and law enforcement agencies, or such other authorities, authorised to seek data from Us in accordance with applicable law or any judicial pronouncements.
17. Operating Our business in an efficient way, including managing Our financial position, business capability, planning, adding and testing systems and processes, managing communications, corporate governance, and audit.
18. Carrying out Our obligations arising from and exercising Our rights set out in Our contracts.
    

You hereby specifically agree and provide Your consent thereby enabling Us and/or Our group companies, subsidiaries and affiliates to collect, store, transfer, process and share information (including Personal Information) related to You with third parties such as banks, financial institutions, credit information companies, entities registered under applicable laws with Securities and Exchange Board of India, National Stock Exchange of India Limited/BSE Limited/Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI)/payment gateways/ collecting banks/KRAs/CKYCR, Artificial Intelligence (AI) assistants, etc., solely for the purpose of reviewing Your profile and processing Your transaction requests for the Services or for other products/services offered by Us or Our group companies, affiliates and subsidiary companies.

We may occasionally ask You to complete optional online surveys. These surveys may ask You for Your contact information and demographic information (like zip code, age, or income level). We use this information to tailor Your experience at the Platform, providing You with content that We think You might be interested in and to display content according to Your preferences. We use Your Personal Information to send You promotional emails; however, We will provide You the ability to opt out of receiving such emails from Us. If You opt out, the Company may still send You non-promotional emails, such as emails about the Services and Your account on the Platform.

Use of information received by the Company and/or its affiliates or subsidiary companies from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You hereby specifically agree and provide Your consent thereby enabling Us and/ or Our group/associate/affiliate companies to access, store, transfer, process Your SMS data for the purpose of reviewing Your profile or doing internal evaluation and analysis. Further, We and/ or Our group/associate/affiliate companies may also share Your SMS data with third parties such as banks and non-banking financial companies, etc., in connection with the Services offered, and You hereby give Your consent for the same.

You hereby choose to provide Your explicit consent to connect/integrate Your email account(s) with Your account on the Platform by clicking on the authentication email sent by the Company on Your registered email address. You will be expressly asked in each case whether You want to connect Your email address with Your account on the Platform. You can also choose to enable Our access to one or more of Your email accounts by connecting such account(s) with Your account on the Platform. We may upload Your image on the Platform for app functionality and You hereby give Your consent for the same.

Such data obtained by this integration will be used by the Company solely for providing the Services and improving Your experience of the features of the Platform and to consolidate Your investment details and history. The Company hereby agrees and acknowledges that it shall not use or transfer any data or information received from the integration of the email addresses with the account on the Platform to third parties for serving ads, including retargeting, personalised, or interest-based advertising.

We encourage You to review the information prior to giving Your consent for integration of the email addresses with the account on the Platform. You may at any time opt to de-link Your email addresses connected with the account opened on the Platform, by managing these connections with the options provided on the Platform.

6. Who We share Your Personal Information with

We may make Your Personal Information, Non-Personal Information, Transaction Information, User Communications and/or other information available to group companies, affiliates and subsidiary companies including but not limited to Groww Invest Tech Private Limited (“Groww Invest Tech”) and Groww Creditserv Technology Private Limited (“Groww Credit”) to enable Us to provide You the Services through the Platform. Please note that all information shared with, or made available to, such group companies, affiliates and subsidiary companies will be governed by this Privacy Policy and any policies of such group companies, affiliates, and subsidiaries. In addition to the Personal Information and in order to provide Services to You, Our subsidiaries may also collect the proof of possession of Your Aadhaar number (for the purpose of undertaking KYC, etc.), biometric details (for the purpose of enabling biometric authentication on UPI, etc.), and signature solely for completing the account opening procedures and authenticating Your transactions on the Platform. The act of providing Your data is voluntary in nature and the Company hereby agrees and acknowledges that its group companies, affiliates, and subsidiaries will collect, use and store such details in compliance with applicable laws and this Privacy Policy.

We do not share any Personal Information (including sensitive personal data) about You with any third parties unless necessary. We will only disclose Personal Information to third parties for the reasons explained in this Privacy Policy or otherwise in the Terms. Below is a list of the types of third parties that We may share Your Personal Information with.

1. Groww Group: We may share Your Personal Information with Our group companies if that helps Us with any of the purposes noted above or otherwise in the Terms.
2. Groww Partners: We may share Your information with businesses that We partner with to provide You Our Services. These include but are not limited to Our partners who enable the provision of Services, custodians, payment aggregators, etc. The Platform may host links to third party websites. We are not responsible for the content, activities or services related to such linked websites.
3. Authorities: We may share Your information with any government authority, regulatory body or law enforcement agency which seeks such information if We believe the disclosure is required or appropriate under applicable laws.
4. Service providers: We may share Your information with KRAs, CKYCR, and third party service providers that help Us provide Services to You. This includes vendors, agents, sub-contractors, suppliers, consultants, advisers and other service providers.
5. General business: We may share Your information with third parties to grow and improve Our business. This includes:

1. Companies We have a joint venture or agreement to co-operate with.
2. Organisations that introduce You to Us.
3. Market researchers.
4. Advisers who help Us to come up with new ways of doing business.
5. Advertisers and technology providers that You use (such as third-party websites You visit, social networks, and providers of apps and smart devices).
6. While negotiating or in relation to a change of corporate control such as a restructuring, merger or sale of Our assets, We may have to disclose Our databases and information We have stored in the course of Our operations.
7. Other financial institutions to help prevent, detect and prosecute unlawful acts, money laundering or fraudulent behaviour.

f. Sharing anonymised data: We may share anonymised data with other companies, but only after scrubbing all personally identifiable details and converting it into a format where it is no longer considered Personal Information under the law (as it is anonymised).

7. How long We keep Your Personal Information

Unless otherwise mentioned in the Terms, We will keep Your Personal Information as long as it is necessary to provide You the Services on the Platform. We will retain and use the information collected as necessary to comply with Our obligations under applicable laws or contracts, resolve disputes or for other business purposes. Generally, We will not retain Your Personal Information and other information for longer than the periods required to provide You with the Services. However, the provisions of various laws require Your transaction logs to be stored for longer periods post the deletion of an account. Further, in the event of the pendency of any legal, regulatory and/or statutory proceeding or receipt of any legal and/or regulatory direction to that effect, We may be required by applicable law to retain Your Personal Information for longer periods.

To ensure compliance with applicable laws, We may need to retain information even after You have terminated Your account with Us or stopped using the Platform. We may also keep Your contact information and other details for fraud prevention and for the exercise/defence of a legal claim or for providing evidence in legal proceedings.

Post termination, We may continue to use Your anonymised data which is aggregated or combined with anonymised data of other users. We use this for analytics, research and other business purposes.

8. Cookies and similar technologies

We may use cookies to distinguish You from other users of Our Services. This helps Us provide You with a good experience, and also allows Us to improve Our Services. A cookie is a small file of letters and numbers that We store on Your browser or the hard drive of Your device when You visit Our Platform. Cookies send information back to the originating website on each subsequent visit, or to another website which recognises that cookie. Cookies also make it easier for You to log in and use Our Platform.

We may use the following cookies:

1. Strictly necessary cookies required for the operation of Our Platform (including, for example, cookies that enable You to log into secure accounts and use interactive features).
2. Analytical/performance cookies that allow Us to recognise and count the number of visitors and users and see how they use the Platform to (for instance, without limitation) help Us improve the way Our Platform works or ensure that users can find what they are looking for easily.
3. Functionality cookies to help Us recognise You when You return to Our Platform to (for instance, without limitation) personalise Our content for You, greet You by name and remember Your preferences, such as choice of language or region.
4. Targeting cookies to record Your visit to Our Platform, the pages You have visited and the links You have followed. We may use this information to make Our Platform and the information displayed on it, more relevant to Your interests. We may also share the information with third parties for this purpose.

9. Your rights

You will have the following rights with regard to Your data and You can exercise these rights by writing to Our Grievance Officer.

1. Confirmation: You can ask Us to confirm if We are processing Your Personal Information.
2. Review: You can ask Us for a copy of Your Personal Information held by Us.
3. Rectification: You can inform Us about changes to Your Personal Information, and ask that We correct any incorrect Personal Information held by Us. We are not responsible for the authenticity of the data You provide Us. Please ensure You notify Us without undue delay of any changes to the Personal Information that You have provided to Us by updating Your details on the Platform or by contacting Our Grievance Officer at the details provided in this Privacy Policy.
4. Erasure and Restrictions on Processing: You can ask Us to erase Your Personal Information, block or restrict the processing of Your Personal Information, or object to specific ways in which We use Your Personal Information, and deny consent for use of any specific data. You may also in line with this right, restrict disclosure of Your data to third parties.
5. Right to Opt Out: We or Our service providers may communicate with You through voice calls, text messages, emails, Platform notifications, or other means. The communication may relate to (i) the Services, (ii) promotional offers, or (iii) any other information that We may want to share with You. You may opt out of receiving information about promotional offers by writing to Us. But even if You opt out of receiving information from Us, We may still send You non-promotional communication. 
6. Withdrawal of Consent: You have the option to withdraw consent given to Us for collection and processing of Your Personal Information. In such cases, We reserve the right to stop providing Services for which Your Personal Information was sought. Your withdrawal will become effective when You receive an acknowledgment from Us. You understand that despite Your request to withdraw consent, We may still need to retain some data about You to comply with applicable law.

Please note that You may, in Your sole and absolute discretion, choose either: (i) not to provide the information or specific data requisitioned by Us from You in connection with Our Services from time to time or (ii) cancel/revoke Your consent so granted to collect Your Personal Information and/or communication that You have elected to receive from Us in relation to the information You have already shared with Us. However, in the event that You do not provide Your consent or later withdraw Your consent, We request You not to access the Platform and/or use the Services and We also reserve the right to not provide You any Services through the Platform. In such a scenario, the Company may delete Your information (personal or otherwise) or de-identify it so that it is anonymous and not attributable to You.

PLEASE NOTE THAT NOTWITHSTANDING ANYTHING CONTAINED IN THIS PRIVACY POLICY, WE MAY RETAIN YOUR DATA IN OUR RECORDS FOR SUCH TIME PERIOD AS PRESCRIBED IN LINE WITH REGULATORY REQUIREMENTS.

You may choose to delete Your account on the Platform and any information associated with it, at any point in time. Such a request for deletion must be sent in writing to [email protected]. In the event that You make a request for deletion of Your account or data, You will no longer be able to access the Platform and/or use the Services, and We reserve the right to not provide You any Services through the Platform. In the event of Your request, We may delete Your information (personal or otherwise) or de-identify it so that it is anonymous and no longer attributable to You. Notwithstanding anything contained herein, We may retain some or all of Your information in accordance with Our policies and/or requirements under applicable law.

10. Security Practices

We deploy adequate technical and organisational security measures to protect Your Personal Information. Some of these include: firewalls, encryption, and access controls. However, We do not guarantee that Personal Information will be completely protected. Any transmission of Personal Information by You is at Your own risk. We are not responsible for circumvention of any privacy settings or security measures contained in the Platform, including through the illegal acts of third parties.

We request You to please ensure that You do not share Your account’s login, password, and OTP details with anybody.

We wish to mention that in case of non-compliance and/or breach of this Privacy Policy pertaining to access or usage of the computer resource, We shall have the right to terminate the access or usage rights to the computer resource immediately or remove non-compliant information or both, as the case may be.

Please also note that while We observe reasonable security measures to protect Your Personal Information on Our Platform, security risks may still arise for reasons outside of Our control such as hacking, virus dissemination, force majeure events, breach of firewall etc. It is further clarified that as long as You access and/or use the Platform (directly or indirectly), You shall at all times be responsible for taking adequate physical, managerial, and technical safeguards, at Your end, to preserve the integrity and security of Your data, which shall include, without limitation, Your Personal Information.

This Privacy Policy and the security controls and practices implemented by Us to protect Your Personal Information shall be the reasonable security practices and procedures under Section 43A of the Information Technology Act, 2000. Further, while providing the Services to You, We shall also ensure compliance with various technology standards/requirements on cybersecurity stipulated under applicable laws including but not limited to reporting of any security breach or incident to authorities designated under any applicable law.

11. Updates to this Privacy Policy 

We may update this Privacy Policy from time to time at Our discretion. This Privacy Policy may be subject to continuous review and modification. While We will make reasonable efforts to keep You posted on any updates to this Privacy Policy, We recommend that You review this Privacy Policy periodically.

We reserve the right to change/modify the information provided on or via the Platform, including the terms of this Privacy Policy, at any time; however, We will obtain Your consent for any material changes to the Privacy Policy. You can determine when this Privacy Policy was last modified by referring to the “Last Updated” legend above. You are obliged to exercise Your independent diligence on the information provided on or via the Platform before arriving at any decision and You will be solely responsible for Your actions. We shall not be held responsible for all or any actions that may subsequently result in any loss, damage and/or liability on account of such a change in the information on the Platform. Your continued use of the Platform following the posting of changes shall mean that You accept and agree to the changes and shall be legally bound by the same.

Please feel free to contact Us at [email protected] regarding any questions on the Privacy Policy.

12. Governing Law and Jurisdiction

This Privacy Policy will be governed by and construed in accordance with the laws of India and subject to the exclusive jurisdiction of the courts at Bengaluru.