Your privacy matters.

Bulliance operates a business-to-business gold and silver trading platform. To provide secure account access, compliance checks, pricing, order management, and customer support, we collect and process certain information about registered customers and visitors who interact with our platform.

We process information only for legitimate business, operational, security, and compliance purposes connected to the services we provide. We do not sell your personal information.

The information we collect depends on how you use Bulliance. This may include:

• Account and profile information (such as name, email address, and mobile number)
• Business information (such as firm name, business address, and city)
• Identity and compliance information (such as PAN, GSTIN, BIS details, and KYC status)
• KYC document metadata and uploaded document files
• Gold and silver order, allocation, and execution-related records
• Gram-based wallet and quantity limit information
• Authentication, session, and device-related technical information
• Push notification registration information
• Communications and support inquiries
• Theme and interface preferences stored on your device

When you register for an Bulliance customer account, we collect information needed to create and maintain your account, including your name, mobile number, email address (where provided), password credentials, and optional business details such as firm name and business address.

We also maintain account identifiers and lifecycle status information, such as customer code, account status, and account closure or reopening timestamps where applicable.

Bulliance uses a know-your-customer (KYC) process to verify customer identity and support compliance requirements connected to trading access. Depending on your account and document submissions, this may include:

• PAN and GSTIN information
• BIS-related information where applicable
• KYC case status, review notes, and approval or rejection outcomes
• Document numbers associated with submitted KYC document types
• Uploaded KYC files such as PAN, GST, and supporting documents

KYC review is performed through Bulliance’s internal verification workflow. We do not use a third-party automated KYC identity vendor in the current customer platform implementation.

PAN and GSTIN may be collected during registration, profile maintenance, or KYC submission. Approved KYC information may be reflected on your customer profile for operational and compliance purposes.

Uploaded KYC documents are stored using Bulliance’s document storage infrastructure, which may use secure object storage or equivalent controlled storage systems configured for the platform environment.

When you use Bulliance trading features, we collect and maintain information connected to gold and silver pricing, order placement, order status, order history, allocations, distributor or broker execution records, and gram-based wallet or quantity limit information.

This includes order quantities in grams, pricing snapshots associated with orders, product and margin information, GST-related product charge details where applicable, reserved and used gram quantities, and related operational records needed to administer trading activity.

When you access Bulliance, we may collect technical information needed to operate, secure, and support the platform. This may include browser type, operating system, device type, user-agent string, and related session metadata derived from your connection.

The current Bulliance customer platform does not persist customer IP addresses or geolocation coordinates as part of the standard customer session records described in this policy.

To protect your account, Bulliance uses authentication and session controls, including password credentials, access tokens, and active session records associated with your login activity.

When you sign in, we create session records that may include portal type, device and browser details, user-agent information, session creation time, and last activity time. These records help us manage account security and allow you to review active sessions where supported.

When your account is closed, active sessions are revoked as part of the account access restriction process.

Bulliance uses cookies and browser storage technologies needed to operate the platform securely and consistently.

• HttpOnly authentication cookies used to maintain secure refresh-session functionality
• Local storage preferences such as theme selection
• Session or local storage used for non-sensitive UI state, session hints, market display cache, and limited post-closure UI safeguards

We do not use third-party advertising or analytics cookies such as Google Analytics or Mixpanel on the current Bulliance customer platform.

We use collected information to:

• Create, authenticate, and manage customer accounts
• Provide live and reference gold and silver pricing
• Enable order placement, modification, cancellation, and status tracking
• Administer gram-based wallet limits and reservations
• Conduct KYC review and maintain compliance-related records
• Operate distributor or broker execution workflows connected to orders
• Send service, security, and account-related communications
• Deliver push notifications where you have registered a notification device
• Respond to support requests and contact inquiries
• Detect misuse, enforce platform restrictions, and protect system integrity
• Maintain audit, operational, and record-keeping records
• Comply with applicable legal, regulatory, audit, and security obligations

We use identity and KYC information to verify customers, administer trading eligibility, maintain compliance records, prevent misuse of identity credentials, and support legitimate operational and regulatory requirements connected to bullion trading activity.

Trading access may be restricted until required KYC steps are completed and approved in accordance with platform rules.

We apply administrative, technical, and operational safeguards designed to protect customer information, including access controls, permission-based administration, authentication protections, rate limiting in applicable flows, and monitoring of abnormal or unauthorized activity.

We may restrict, suspend, or close accounts where misuse, false information, security risk, or policy violations are identified, subject to applicable platform rules and operational requirements.

Order and trading information is used to calculate and display pricing, validate order eligibility, reserve gram quantities where applicable, route execution through distributor or broker workflows, maintain order history, and provide customers with accurate status information about their trading activity.

Bulliance does not sell personal information. We may share information only where necessary to operate the platform, deliver services, maintain security, or meet legal obligations.

This may include sharing with:

• Authorized Bulliance administrators and support personnel with role-based access
• Infrastructure and service providers that host, store, transmit, or support platform operations
• Distributor or broker execution partners involved in order routing or market execution workflows
• Email delivery providers used to send account and service communications
• Push notification infrastructure used to deliver registered device notifications
• Regulators, courts, or authorities where disclosure is required by applicable law

Bulliance relies on controlled infrastructure and service providers to operate the platform. Depending on configuration and environment, this may include cloud or object storage providers for KYC and export documents, email delivery services, market data or execution connectivity providers, and notification delivery infrastructure.

These providers process information on Bulliance’s behalf for defined operational purposes and are expected to apply appropriate safeguards consistent with the nature of the services provided.

We may disclose information where we believe disclosure is necessary to comply with applicable law, regulation, legal process, governmental request, audit requirement, or to protect the rights, safety, and security of Bulliance, our customers, or others.

We retain information for as long as necessary to provide services, maintain accurate business and trading records, meet legal and regulatory obligations, resolve disputes, enforce agreements, and protect Bulliance and its customers.

Certain records may be retained even after account access is restricted or an account reaches a permanently closed lifecycle status, where retention is required or permitted for legal, regulatory, audit, security, fraud-prevention, or record-keeping purposes.

When you close your Bulliance account, your login access is revoked and normal customer features become unavailable. However, Bulliance may continue to retain historical customer identity, KYC, order, wallet, and related records in accordance with applicable retention requirements.

In some cases, an account may be reopened within the applicable reopening window through Bulliance support or administrative review. After the reopening window ends, the account may be marked permanently closed while historical records remain retained as described in this policy.

We use commercially reasonable safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encrypted transport where appropriate, hashed credential storage, permission-based administration, and controlled document storage.

No method of transmission or electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

Depending on applicable law and your account status, you may request access to or correction of certain personal information associated with your Bulliance account.

You may update certain profile details directly through your account where the platform allows self-service changes. Other information, such as certain compliance fields or closed-account records, may require support review or may not be editable while an account is restricted.

Requests relating to account closure, reopening, or questions about retained records should be directed to Bulliance support using the contact details below.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. When we make material changes, we will update the “Last updated” date at the top of this page.

Your continued use of Bulliance after an updated policy is posted constitutes your acknowledgment of the revised policy, unless applicable law requires a different form of notice or consent.