Privacy Policy

Last Updated: 04 August 2026

Megaastone Weallth Finserv ("we", "us", "our", "the Company") operates the Megaastone Weallth Finserv mobile application ("the App"), a mutual fund transaction and portfolio-tracking platform offered to our clients as an AMFI-registered Mutual Fund Distributor (ARN-124929). This Privacy Policy explains how we, together with our technology partners, collect, use, store, share, and protect your personal data when you use the App.

This Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and rules thereunder, and applicable SEBI/AMFI regulations governing mutual fund distributors.

By using the App, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please do not use the App.

1. Who We Are

Entity Name: Megaastone Weallth Finserv

MFD Name: Kishor Mhaskar

AMFI Registration Number: ARN-124929

Registered Address: Vasind Thane

Contact Email: megaastonweallth33715@gmail.com

Grievance Officer: Kishor Mhaskar

Grievance Contact: 8390667129

We act as a Data Fiduciary for the personal data you provide through the App. Certain transaction processing is carried out by our technology and infrastructure partners (see Section 4), who may act as Data Processors on our behalf.

2. Information We Collect

a) Information you provide directly

- Full name, date of birth, gender

- PAN, Aadhaar (where applicable for KYC), and other government-issued ID details

- Address and contact details (email, mobile number)

- Bank account details (account number, IFSC, linked bank proofs)

- Nominee details

- Photograph / signature (for KYC and account operations)

- Income details, occupation, and other KYC-mandated declarations

- Investment preferences, financial goals, and risk profile inputs

b) Information generated through your use of the App

- Transaction history (purchases, redemptions, switches, SIP registrations)

- Portfolio holdings and valuation data

- Consolidated Account Statement (CAS) data

- App usage logs, login timestamps, and session data

- Device information (device ID, OS version, IP address)

c) Information from third parties

- KYC verification status from KRAs (KYC Registration Agencies) such as CVLKRA, NDML, CAMS KRA, etc.

- Transaction confirmations and NAV data from Asset Management Companies (AMCs) and Registrar & Transfer Agents (RTAs) such as CAMS/KFintech

- Data routed through the ONDC Financial Services Network via our technology partner Cybrilla / MF Stack

3. How We Use Your Information

We use your personal data to:

- Process your KYC and onboard you as an investor

- Execute mutual fund transactions you initiate (purchase, redemption, switch, SIP, STP, SWP)

- Maintain and display your portfolio and transaction history

- Send transaction confirmations, statements, and regulatory communications

- Provide customer support and respond to your queries or grievances

- Comply with SEBI, AMFI, PMLA (Prevention of Money Laundering Act), and other applicable regulatory requirements

- Improve app performance, security, and user experience

- Communicate updates about your account, new features, or relevant scheme information (with opt-out available for marketing communications)

We do not use your KYC or financial data for advisory recommendations requiring SEBI Investment Adviser registration. Our role is limited to distribution and execution facilitation under our AMFI registration.

4. Sharing of Your Information

We share your data only as necessary to operate the App and process your transactions, including with:

- Cybrilla / MF Stack — our technology partner facilitating transactions through the ONDC Financial Services Network

- BSE StAR MF / NSE NMF II or other exchange platforms, where applicable, for order routing

- KRAs (KYC Registration Agencies) for identity verification

- AMCs and RTAs (CAMS, KFintech) for transaction execution, unit allotment, and statement generation

- Payment gateways / banks for processing payments and redemptions

- Regulators and law enforcement, where legally required (SEBI, AMFI, FIU-IND, courts, or other statutory authorities)

We do not sell your personal data to third parties for marketing purposes.

5. Data Storage and Security

- Your data is stored on secure servers, [located in India / FILL IN region if different], with access restricted to authorized personnel.

- We use encryption (in transit and at rest, where applicable), access controls, and audit logging to protect your data.

- KYC and transaction records are retained for a minimum of [5 years post account closure / FILL IN if different] in line with SEBI/PMLA record-keeping requirements, after which they are securely deleted or anonymized unless a longer retention is legally mandated.

While we take reasonable security measures, no system is completely secure. We encourage you to use strong device security (screen lock, updated OS) and to report any suspicious activity immediately.

6. Your Rights

Under the DPDP Act, 2023, you have the right to:

- Access a summary of the personal data we hold about you

- Request correction or updation of inaccurate or incomplete data

- Request erasure of your data, subject to regulatory retention requirements we are bound by (e.g., KYC records cannot be deleted while your investments remain active or during mandated retention periods)

- Withdraw consent for non-essential processing (e.g., marketing communications) at any time

- Nominate a representative to exercise your rights in the event of your death or incapacity

- File a grievance with our Grievance Officer, and if unresolved, escalate to the Data Protection Board of India

To exercise these rights, contact us at megaastonweallth33715@gmail.com

7. Third-Party Links and Services

The App may route transactions through, or link to, third-party platforms (e.g., payment gateways, AMC websites, ONDC network participants). This Privacy Policy does not cover the practices of those third parties, who maintain their own privacy policies. We encourage you to review them independently.

8. Children's Data

The App is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors, except where a minor is registered as a beneficial investor through a parent/guardian-operated account, in which case the guardian's consent governs such processing.

9. Regulatory Disclosures

- Megaastone Weallth Finserv ( Kishor Mhaskar) is an AMFI-registered Mutual Fund Distributor (ARN-124929) and is not a SEBI-registered Investment Adviser.

- Mutual fund investments are subject to market risk. Please read all scheme-related documents carefully before investing.

- This App facilitates transaction execution and portfolio tracking; it does not constitute investment advice.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes via the App or via email, and the "Last Updated" date will reflect the most recent revision.

11. Contact Us

If you have questions, concerns, or grievances about this Privacy Policy or how your data is handled, please contact:

Grievance Officer: Kishor Mhaskar

Email: megaastonweallth33715@gmail.com

Phone: 8390667129

Address: Vasind. Thane