MGBL Technologies ("we," "our," or "us") operates the KEST mobile application and platform. We are committed to protecting your personal and financial data with bank-grade security. This Privacy Policy explains how we collect, use, process, and protect your information when you use our credit-to-bank transfer services.

1. Information We Collect

To facilitate secure financial transfers, we collect the following categories of information:

• Identity & Contact Data: Name, email address, phone number, and unique Firebase Authentication identifiers.
• Financial Destination Data: Recipient bank account numbers, IFSC codes, and bank names to process IMPS/NEFT payouts.
• Card Tokenization Data: In strict compliance with RBI guidelines, we do not store your raw credit card numbers or CVV. We securely collect and store network-generated tokens (e.g., Razorpay/Cashfree Vault Tokens), card brand, and the last four digits for identification purposes only.
• Transaction Data: Details about payments to and from your accounts, including transfer amounts, fees, GST breakdowns, and categories (e.g., Rent, Education, Business).

2. How We Use Your Information

Your data is utilized strictly to provide and improve the KEST platform:

• To process your credit card charges and execute scheduled payouts to destination bank accounts.
• To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations mandated by the Reserve Bank of India (RBI).
• To prevent fraud, unauthorized transactions, and abuse of the platform.
• To generate transparent transaction receipts and historical analytics for your dashboard.

3. Third-Party Payment Gateways

We do not operate as a standalone bank. To process funds, we integrate with industry-leading, RBI-licensed Payment Aggregators (such as Razorpay and Cashfree). When you initiate a transfer, encrypted payment data is transmitted directly to these partners via secure APIs. Their use of your personal information is governed by their respective privacy policies.

4. Data Security Architecture

We implement enterprise-grade security infrastructure to protect your data:

• No Local Financial Storage: Sensitive data is never stored locally on your mobile device.
• Database Encryption: All user profiles and transfer receipts are stored in Google Firestore, utilizing AES-256 encryption at rest and TLS for data in transit.
• 3D Secure Authentication: All transactions require mandatory OTP verification directly through your issuing bank's portal.

5. Data Retention and Deletion Rights

We retain your transaction history as required by Indian financial laws for tax and auditing purposes. However, you have the right to request the deletion of your account and the removal of your saved bank details and card tokens from our active databases at any time. You can execute this via the "Security" tab in the KEST app or by contacting our support team.

6. Policy Updates

We may update this policy as our platform evolves or as required by financial regulations. Significant changes will be communicated via in-app notifications. Continued use of KEST after updates signifies your acceptance of the revised terms.