1. LEGAL FRAMEWORK

This Policy is governed by, and shall be interpreted in strict accordance with, the prevailing data protection and information technology laws of India. The primary legislation underpinning this Policy is the Information Technology Act, 2000, which establishes the foundational legal framework for electronic governance, digital signatures, and cybersecurity in India. Section 43A of the IT Act specifically imposes civil liability on body corporates that fail to implement and maintain reasonable security practices and procedures while handling sensitive personal data or information, thereby making it obligatory for platforms such as Silvra to adhere to rigorous data protection standards.

In addition to the IT Act, this Policy strictly adheres to the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, commonly referred to as the SPDI Rules. These Rules require body corporates to publish a comprehensive privacy policy, obtain informed consent before collecting sensitive personal data, implement security standards aligned with ISO/IEC 27001 or equivalent frameworks approved by the Central Government, and ensure that data is retained only for as long as it is reasonably necessary for the purpose for which it was collected.

This Policy further anticipates and aligns with the obligations set forth under the Digital Personal Data Protection Act, 2023 (DPDP Act), which represents India's most comprehensive privacy legislation to date. The DPDP Act introduces the concepts of Data Fiduciaries and Data Principals, mandates explicit consent for data processing, establishes the Data Protection Board of India as the enforcement authority, and provides for penalties of up to ₹250 crore per instance of non-compliance. Silvra, in its capacity as a Data Fiduciary under the DPDP Act, is committed to ensuring that all processing of your personal data is conducted in a manner that is lawful, fair, and transparent, with clearly defined and specific purposes, and supported by free, specific, informed, unconditional, and unambiguous consent from you as the Data Principal.

Where applicable, we also comply with the guidelines and directives issued by the Reserve Bank of India (RBI) regarding data localisation for payment-related information, cybersecurity frameworks issued by SEBI for entities operating within financial markets, and the Prevention of Money Laundering Act, 2002 (PMLA) as it pertains to the retention and reporting of customer data for anti-money laundering (AML) and countering the financing of terrorism (CFT) purposes.

2. DEFINITIONS

Personal Data refers to any data about an individual who is identifiable by or in relation to such data. This includes, but is not limited to, your full name, mobile number, email address, date of birth, residential address, and any other information that, either on its own or in combination with other available information, can be used to identify you as a natural person. Under the DPDP Act, 2023, this term specifically encompasses digital personal data — that is, personal data that exists in, or is collected in, a digital format, or that has been digitised from a non-digital format.

Sensitive Personal Data or Information (SPDI), as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, includes categories of information that require heightened protection due to their nature. In the context of the Silvra Platform, this encompasses financial information such as bank account numbers, UPI IDs, payment instrument details, credit and debit card information, and your complete transaction history. It also includes KYC documents such as your Permanent Account Number (PAN), Aadhaar number (collected only where expressly permitted by law and with your explicit consent), passport details, voter identification, and driving licence. Additionally, SPDI encompasses identity verification data including selfie and video verification captures, liveness detection results, and any biometric-like data processed during the identity authentication process. Passwords, authentication tokens, and device-bound security credentials used to access your account are also treated as SPDI and are accorded the highest level of protection within our systems.

Data Fiduciary refers to the entity that determines the purpose and means of processing personal data. In the context of this Policy, Silvra Gold Silver Digital Pvt Ltd acts as the Data Fiduciary for all personal data collected and processed through the Platform. Data Principal refers to the individual to whom the personal data relates — in this case, you, the User. Consent Manager, as introduced under the DPDP Act, refers to a person registered with the Data Protection Board of India who acts as a single point of contact, enabling you to give, manage, review, and withdraw your consent through an accessible, transparent, and interoperable platform. Silvra will integrate with authorised Consent Managers as and when they become operationally available.

3. INFORMATION WE COLLECT

When you create an account on the Silvra Platform, we collect your full legal name, mobile phone number (verified through a one-time password sent via SMS), email address, date of birth, gender, and your current residential and correspondence addresses. This personal information is essential for establishing your identity, creating your user profile, enabling communications related to your account and transactions, and fulfilling our regulatory obligations under the Know Your Customer (KYC) framework. We may also collect your nominee details and emergency contact information where required by applicable regulations or for the purposes of facilitating account succession in accordance with Indian succession laws.

To comply with mandatory Anti-Money Laundering (AML) and KYC requirements under the Prevention of Money Laundering Act, 2002, and related RBI directives, we collect your Permanent Account Number (PAN) for tax identification and reporting purposes, your Aadhaar number where expressly permitted by applicable law and only with your explicit, informed consent as per the Supreme Court of India's ruling in the Puttaswamy judgement, and copies of government-issued identity documents such as your passport, voter ID, or driving licence. Additionally, we may require you to undergo selfie-based or video-based identity verification, which involves liveness detection technology to confirm that you are a real, live person and not an impersonator. The biometric-like data generated during this process is processed solely for verification purposes and is handled with the highest standards of security.

To enable the execution of buy, sell, and withdrawal transactions on the Platform, we collect your bank account details including account number, IFSC code, and bank name, your UPI IDs, and details of other payment instruments you choose to link with your Silvra account. We also maintain a comprehensive record of your transaction history, including the date, time, amount, type, and status of every order you place, as well as your portfolio holdings showing the quantity and current valuation of your digital gold and silver assets. This financial data is essential for processing your instructions, maintaining accurate ledger records, generating transaction receipts and statements, and complying with tax reporting obligations under the Income Tax Act, 1961, and the Goods and Services Tax Act, 2017.

For security monitoring, fraud detection, and platform analytics, we automatically collect certain technical and device-related information each time you access the Platform. This includes your Internet Protocol (IP) address, unique device identifiers (such as device ID, IMEI, and advertising ID), MAC address, device manufacturer and model, operating system type and version, browser type and version (for web access), screen resolution, approximate geographic location derived from your IP address or GPS data (with your permission), time zone settings, language preferences, network carrier information, and server log files that record the pages you visit, the duration of your sessions, referring URLs, and system crash reports. This data is collected through industry-standard automated mechanisms and is used to enhance the security posture of the Platform, detect anomalous behaviour indicative of fraud or unauthorised access, optimise performance and user experience, and generate aggregated, non-personally identifiable analytics that inform our product development decisions.

We retain records of all communications between you and Silvra, including SMS and OTP delivery logs, customer support emails and ticket histories, in-app chat interactions, voice call recordings (where permitted by applicable law and after providing appropriate notice), and feedback and survey responses. This communication data enables us to provide effective customer support, resolve disputes and complaints, train our support team, and maintain a comprehensive audit trail for regulatory compliance.

4. PURPOSE OF DATA PROCESSING

The primary purpose for which we process your personal data is the delivery of our core services. This encompasses the entire lifecycle of your engagement with the Platform, from account creation and identity verification through the Central KYC (CKYC) registry, to the processing and execution of your buy and sell instructions for 24-karat gold and 99.9% purity silver, real-time portfolio valuation reflecting live market prices, facilitation of physical delivery requests, management of your UPI Autopay mandates for systematic investment plans, and generation of transaction receipts, account statements, and tax-related documentation. Without processing this data, we would be unable to provide the services you have signed up for.

We process your data to fulfil our statutory and regulatory obligations as a technology company operating in the financial services space in India. This includes conducting AML and KYC verification as mandated by the Prevention of Money Laundering Act, 2002, and the rules thereunder, performing ongoing transaction monitoring and generating Suspicious Transaction Reports (STRs) for submission to the Financial Intelligence Unit – India (FIU-IND), complying with tax deduction at source (TDS) requirements under the Income Tax Act, 1961, responding to lawful requests for information from regulatory authorities such as the RBI, SEBI, the Income Tax Department, and the Enforcement Directorate, and maintaining records and audit trails for the periods stipulated by applicable laws.

We utilise aggregated and anonymised data derived from your usage of the Platform to conduct performance analytics, identify system bottlenecks, optimise page load times and transaction processing speeds, enhance the user interface and user experience design, conduct A/B testing of new features and product iterations, and develop predictive models that help us better understand user behaviour and preferences. Where we use your personal data for these purposes, we do so only after applying robust anonymisation and pseudonymisation techniques to ensure that the data cannot be linked back to you as an individual.

We use your contact information to send you essential transactional communications such as order confirmations, payment receipts, delivery status updates, and account security alerts. With your explicit and separately obtained consent, we may also send you promotional communications including information about new features, investment opportunities, educational content about precious metals markets, and special offers. You have the right to opt out of promotional communications at any time by using the unsubscribe mechanism provided in each communication or by contacting us at info@silvras.com. Please note that you cannot opt out of transactional and security-related communications, as these are essential for the safe operation of your account.

5. LEGAL BASIS

We process your personal data only where we have a valid and lawful basis to do so under applicable Indian law. The legal bases upon which we rely are as follows. First, we rely on your explicit, free, specific, informed, and unambiguous consent for non-essential processing activities such as the use of your data for marketing communications, personalised recommendations, and analytics-driven product improvements. Under the DPDP Act, 2023, consent must be given through a clear affirmative action and may be withdrawn by you at any time with the same ease with which it was given. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

Second, we process your data where it is necessary for the performance of the contract between you and Silvra — that is, to execute your buy, sell, and delivery instructions, manage your account, process payments, and provide the services you have requested. Without processing your personal and financial data for these purposes, we would be unable to honour our contractual commitments to you. Third, we process your data where it is necessary to comply with a legal obligation to which we are subject, including AML/KYC verification under the Prevention of Money Laundering Act, tax reporting under the Income Tax Act, and data localisation requirements issued by the RBI. Fourth, we process certain data on the basis of our legitimate business interests, including fraud detection and prevention, maintaining the security and integrity of the Platform, defending against legal claims, and conducting internal audits. In each case, we have conducted a balancing assessment to ensure that our legitimate interests are not overridden by your fundamental rights and freedoms.

6. DATA SHARING

Silvra may share your personal data with carefully selected categories of third-party service providers who assist us in delivering the Platform's services. These include payment gateway operators such as Razorpay, who process your UPI, card, and net banking payments and are themselves regulated by the RBI as payment aggregators subject to their own stringent data protection obligations. We also share relevant data with KYC and identity verification providers who conduct document verification, liveness checks, and Central KYC (CKYC) registry lookups on our behalf. Our cloud infrastructure providers, including Amazon Web Services (AWS) and Google Cloud Platform (GCP), host the Platform's servers and databases within India-based data centres in compliance with RBI data localisation requirements. Additionally, we share necessary data with our precious metal custodians and vault operators, including MMTC-PAMP India Pvt Ltd (a joint venture between MMTC Limited and PAMP SA, one of the world's leading refiners), Augmont Gold for All, and Sequel Vaults, who are responsible for the storage, insurance, and physical custody of the gold and silver backing your digital holdings.

We are required by law to disclose your personal data to regulatory and law enforcement authorities in certain circumstances. These include the Reserve Bank of India (RBI), the Securities and Exchange Board of India (SEBI), the Financial Intelligence Unit – India (FIU-IND), the Income Tax Department, the Enforcement Directorate, the Central Bureau of Investigation, state police authorities, and any other government or quasi-government body that has the legal authority to request such information. Such disclosures are made only in response to lawful orders, statutory demands, court directions, or as otherwise required under applicable Indian law. We will not voluntarily disclose your personal data to government authorities except where we are legally compelled to do so.

In the event of a merger, acquisition, restructuring, amalgamation, or sale of all or substantially all of Silvra's assets, your personal data may be transferred to the acquiring or successor entity as part of the transaction. In such circumstances, we will make commercially reasonable efforts to notify you in advance via email or in-app notification, and the successor entity will be bound by the same privacy obligations as set forth in this Policy. We unequivocally confirm that we do not sell, rent, trade, or otherwise commercially monetise your personal data to any third party for their independent marketing or other purposes.

7. DATA LOCALIZATION & STORAGE

All personal data collected through the Silvra Platform is stored on secure servers located exclusively within the territory of India, hosted within enterprise-grade, Tier III+ data centres operated by our cloud infrastructure partners. This approach ensures full compliance with the data localisation directives issued by the Reserve Bank of India, which mandate that all payment-related data (including the full end-to-end transaction details, card data, and any data processed as part of the payment chain) must be stored in a system only in India. Our data centres employ physical security controls including 24/7 surveillance, biometric access controls, fire suppression systems, redundant power supply, and environmental monitoring, supplemented by logical security controls including network segmentation, intrusion detection and prevention systems (IDS/IPS), and continuous vulnerability scanning.

Within our infrastructure, personal data is logically segregated by sensitivity level. SPDI and financial data are stored in isolated, encrypted storage volumes with restricted access policies that limit data availability on a strict need-to-know basis. Access to production databases containing personal data is controlled through multi-factor authentication, privileged access management (PAM) systems, and time-bound access grants that automatically expire after a defined period. All access events are logged and audited on a continuous basis.

8. DATA RETENTION POLICY

We retain your personal data for as long as your account remains active on the Platform and for such additional periods as may be required or permitted under applicable Indian law. Under the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, we are required to maintain records of all transactions and customer identification data for a minimum period of five years from the date of the transaction. Additionally, under AML and KYC regulations, customer records must typically be maintained for up to ten years following the closure of the account or the termination of the business relationship, whichever is later. Tax-related records, including transaction statements and TDS certificates, are retained for the periods required under the Income Tax Act, 1961, and the GST Act, 2017.

Upon expiry of the applicable retention period, or upon receipt of a valid data erasure request from you (subject to our legal retention obligations), your personal data will be irreversibly deleted or anonymised such that it can no longer be associated with you as an identifiable individual. Where complete deletion is not technically feasible due to backup systems or archival infrastructure, we will ensure that the data is securely isolated, encrypted, and marked for deletion at the earliest technically practicable time. You should note that certain categories of data — particularly those required for regulatory compliance, ongoing dispute resolution, or legal proceedings — may be retained beyond the standard retention period as permitted by law.

9. DATA SECURITY MEASURES

Silvra implements enterprise-grade, multi-layered security controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data at rest is encrypted using Advanced Encryption Standard (AES) with 256-bit keys, which is the same encryption standard used by government agencies and financial institutions worldwide to protect classified information. All data in transit between your device and our servers is protected using HTTPS with TLS 1.2 or higher, ensuring end-to-end encrypted communication that prevents interception or tampering during transmission. Sensitive fields such as PAN numbers, bank account details, and Aadhaar numbers are additionally protected through field-level encryption and tokenisation, ensuring that even in the unlikely event of a database breach, the exposed data would be rendered unintelligible without the corresponding decryption keys, which are stored in separate, hardware-secured key management systems.

Access to systems containing personal data is governed by Role-Based Access Control (RBAC) policies that ensure employees and contractors can access only the data necessary for their specific job functions. All privileged access requires multi-factor authentication (MFA) combining something you know (password), something you have (time-based OTP or hardware security key), and in some cases, something you are (biometric verification). We maintain comprehensive audit logs of all data access events, which are continuously monitored by our security operations team and analysed using security information and event management (SIEM) tools to detect potential threats in real time. We conduct regular independent security audits, penetration testing exercises, and vulnerability assessments carried out by reputable, third-party cybersecurity firms. Our security practices are aligned with the ISO/IEC 27001 standard, as referenced in the SPDI Rules, 2011, as the benchmark for reasonable security practices and procedures.

10. USER RIGHTS

Under the DPDP Act, 2023, and the SPDI Rules, 2011, you are entitled to exercise several important rights with respect to your personal data. You have the Right to Access, which entitles you to obtain a summary of the personal data being processed by Silvra, the purposes for which it is being processed, and the identities of the entities with whom it has been shared. You have the Right to Correction and Completion, which allows you to request that any inaccurate, incomplete, or outdated personal data held by us be corrected, completed, or updated to reflect the current factual position. You have the Right to Erasure, which enables you to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under AML, KYC, and tax laws.

You have the Right to Withdraw Consent, which permits you to revoke any consent you have previously given for data processing, with the same level of ease with which the consent was originally provided. Withdrawal of consent shall be effective prospectively and shall not affect the lawfulness of processing carried out prior to the withdrawal. You also have the Right to Grievance Redressal, which provides you with readily available and accessible means to file complaints regarding the processing of your personal data by Silvra or the exercise of your rights. Furthermore, under the DPDP Act, you have the Right to Nominate, which allows you to designate a nominee who may exercise your data rights in the event of your death or incapacity. To exercise any of these rights, please submit a written request to our Data Protection team at privacy@silvras.com. We will acknowledge your request within 48 hours and endeavour to respond substantively within 30 days of receipt.

11. COOKIES & TRACKING

When you access the Silvra Platform through a web browser, we deploy cookies and similar tracking technologies to enhance your experience, maintain your session state, and gather analytical insights about Platform usage. Essential cookies are strictly necessary for the Platform to function correctly and enable core features such as user authentication, session management, security protections including CSRF token validation, and load balancing. These cookies cannot be disabled without impeding the basic functionality of the Platform. Performance and analytics cookies collect aggregated, anonymised data about how users interact with the Platform, including pages visited, features used, time spent on each page, and error rates. This information helps us identify areas for improvement and optimise the Platform's performance. We may utilise third-party analytics services such as Google Analytics for this purpose, and we ensure that any data shared with such providers is anonymised and processed in accordance with their respective privacy policies.

Preference cookies remember your settings and choices, such as language preferences and display configurations, to provide a personalised browsing experience. Marketing cookies, which are deployed only with your explicit prior consent, track your browsing activity to deliver relevant advertisements and measure the effectiveness of our marketing campaigns. You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies, and you can configure your browser to alert you each time a cookie is set. Please note, however, that blocking essential cookies may prevent you from accessing certain features of the Platform. For mobile applications, we use device identifiers and SDK-based analytics tools that perform functionally equivalent roles. Our mobile SDK partners are contractually obligated to process your data in accordance with this Policy and applicable law.

12. CHILDREN'S PRIVACY

The Silvra Platform is designed and intended exclusively for use by individuals who are at least eighteen (18) years of age and who are legally competent to enter into binding contracts under the Indian Contract Act, 1872. We do not knowingly collect, process, or store the personal data of children under the age of eighteen. The DPDP Act, 2023, imposes specific and stringent obligations on Data Fiduciaries with respect to the processing of children's data, including the requirement to obtain verifiable parental consent before processing any personal data of a child. Should we discover, or be informed, that we have inadvertently collected personal data from a minor, we will take immediate steps to deactivate the associated account, cease all processing of the data, and permanently delete all personal data associated with that account from our systems and backup archives within a commercially reasonable timeframe. If you are a parent or guardian and believe that your child has provided personal information to us without your knowledge or consent, please contact us immediately at privacy@silvras.com.

13. THIRD-PARTY LINKS

The Silvra Platform may contain hyperlinks, banners, or other navigational elements that direct you to websites, applications, or services operated by third parties. These include, but are not limited to, the websites of our vault partners (MMTC-PAMP, Augmont, Sequel Vaults), payment gateway partners (Razorpay), regulatory bodies (RBI, SEBI), and educational or informational resources about precious metals markets. These third-party properties operate independently of Silvra and are governed by their own privacy policies, terms of service, and data handling practices over which Silvra has no control and assumes no responsibility. We strongly recommend that you read and understand the privacy policies of any third-party website or service before providing any personal information to them. Silvra shall not be liable for any loss, damage, or privacy violation arising from your interaction with or disclosure of information to any third-party website or service, even if you accessed it through a link on the Silvra Platform.

14. GRIEVANCE REDRESSAL

In accordance with the requirements of the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, 2023, Silvra has designated a Grievance Officer to address your concerns regarding the handling of your personal data. The Grievance Officer is responsible for receiving and processing complaints related to data privacy, investigating reported incidents, and taking corrective action to ensure compliance with this Policy and applicable law. You may direct your complaints, queries, or data access requests to the Grievance Officer using the contact details provided below.

Upon receipt of a complaint, the Grievance Officer shall issue an acknowledgement within twenty-four (24) hours and shall make every reasonable effort to investigate and resolve the complaint within a period of fifteen (15) days from the date of receipt. In cases involving complex investigations or coordination with third-party service providers, we may require additional time, in which case you will be kept informed of the progress. If you are not satisfied with the resolution provided by our Grievance Officer, you have the right to lodge a complaint with the Data Protection Board of India (once it is fully operational) or seek redress through the consumer courts or civil courts in Hyderabad, Telangana, which shall have exclusive jurisdiction over all disputes arising under this Policy.

15. DATA BREACH NOTIFICATION

In the event of a personal data breach — defined as any unauthorised acquisition, access, use, disclosure, alteration, or destruction of personal data — Silvra shall take immediate corrective action to contain the breach, assess the scope and severity of the impact, and mitigate any potential harm to affected Data Principals. In accordance with the DPDP Act, 2023, we shall notify the Data Protection Board of India of the breach within the timeframe prescribed by the Board, providing full details of the nature and extent of the breach, the categories and approximate number of Data Principals affected, the likely consequences of the breach, and the measures taken or proposed to be taken to address the breach and mitigate its adverse effects.

We shall simultaneously notify all affected Data Principals — that is, you and other impacted users — through email, SMS, in-app notifications, or such other means as are reasonably calculated to reach you promptly. The notification shall include a clear, plain-language description of the breach, the types of data potentially compromised, the steps we have taken or are taking to address the situation, and practical recommendations for steps you can take to protect yourself, such as changing your passwords, monitoring your bank statements, or placing fraud alerts with your financial institutions. Where required under applicable RBI or SEBI guidelines, we shall also report the incident to the relevant sectoral regulator and the Indian Computer Emergency Response Team (CERT-In) within the mandated timeframes.

16. INTERNATIONAL TRANSFER

Silvra prioritises India-centric data processing and stores all personal data within the territory of India in compliance with RBI data localisation mandates. However, in limited circumstances, certain categories of data may be processed by our technology partners or sub-processors in jurisdictions outside India — for example, where we utilise global cloud services for non-payment-related analytics, machine learning model training on anonymised datasets, or customer relationship management tools. In all such cases, we ensure that appropriate safeguards are in place to protect your personal data, including the execution of data processing agreements that incorporate standard contractual clauses, verification that the recipient jurisdiction provides an adequate level of data protection as determined by the Central Government under the DPDP Act, and implementation of additional technical measures such as encryption, pseudonymisation, and access controls. We shall never transfer your payment-related data outside India, in strict compliance with RBI directives on data localisation. A copy of the original data shall always be retained within India for all categories of data that are transferred internationally.

17. POLICY UPDATES

Silvra reserves the right to amend, update, or modify this Privacy Policy at any time to reflect changes in our data practices, the introduction of new features or services, evolving regulatory requirements, or changes in applicable law. The effective date at the top of this Policy, together with the version number, will always indicate the date of the most recent revision. For material changes — defined as changes that significantly alter the manner in which we collect, process, or share your personal data, or that affect your rights under this Policy — we will provide you with advance notice of at least thirty (30) days through email notification, prominent in-app banners, or push notifications on your registered mobile device. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any changes, you have the right to discontinue use of the Platform, request account closure, and exercise your right to data erasure as described in Section 10 of this Policy. We maintain an archive of all prior versions of this Policy, which you may request at any time by contacting us at privacy@silvras.com.

18. FINTECH DISCLAIMER

Silvra Gold Silver Digital Pvt Ltd operates as a technology platform and digital marketplace facilitator. It is not a bank, a Non-Banking Financial Company (NBFC), a Registered Investment Advisor (RIA) under SEBI regulations, a portfolio management service provider, a depository participant, or a financial intermediary registered under any financial regulatory framework in India. The Company does not directly hold, store, or insure precious metals — all physical gold and silver assets are held in custody by empanelled, third-party vault operators including MMTC-PAMP India Pvt Ltd (a joint venture with PAMP SA Switzerland, a London Bullion Market Association accredited refiner), Augmont Gold for All, and Sequel Vaults. Digital gold and silver products offered on the Platform are not classified as securities or commodity derivatives and therefore fall outside the direct regulatory purview of SEBI and the RBI. Consequently, these products do not carry the same statutory investor protections as SEBI-regulated instruments such as Gold Exchange-Traded Funds (ETFs), Electronic Gold Receipts (EGRs), or Sovereign Gold Bonds (SGBs). Silvra does not guarantee the returns, price performance, purity, or liquidity of any asset purchased through the Platform. Investments in precious metals are inherently subject to market risk, and you should carefully evaluate your financial situation and risk tolerance before making any investment decisions. Nothing on the Platform constitutes financial, investment, tax, or legal advice.

19. CONTACT

If you have any questions, comments, or concerns about this Privacy Policy, or if you wish to exercise any of your rights as a Data Principal, please do not hesitate to contact us using the details provided below. Our dedicated Privacy and Data Protection team is committed to addressing your inquiries and resolving your concerns in a timely and transparent manner.