KYC Consent Notice

Through DigiLocker, with your consent: your name, date of birth and the last four digits of your Aadhaar number. We never receive or store the full Aadhaar number. We use it to confirm your identity and age, and the name becomes the name on your agreements and invoices.

Your PAN, verified against the income tax database. We store it encrypted and show only the last four characters. We use it to confirm your identity and to deduct or collect tax at source as the law requires.

Your bank account number and IFSC, verified by a one rupee UPI request you approve, which returns the account holder name. We store the account number encrypted and show only the last four digits. We use it to confirm that the account is yours and to pay you a payout or refund.

A short live capture that confirms a real person is present. Your picture is also compared with the photo on your Aadhaar by an automated face-comparison service run on UKKI's cloud provider in India. The Aadhaar photo we receive through DigiLocker is kept only until the face check is done, and for no more than 30 days. Both pictures are deleted after the check.

UKKI uses a verification service provider to reach DigiLocker, the income tax database and the banking system on its behalf. The provider processes your data only to perform the check and returns the result to UKKI.

Verification results are kept for eight years for tax and anti-money-laundering record-keeping, and then anonymised, as set out in the Privacy Policy.

You may withdraw your consent at any time through your account settings or by contacting our Grievance Officer. Withdrawing it stops further checks; a result already recorded is kept for as long as the law requires, and you will not be able to start a new deal without a valid verification.

If this notice changes, you will be asked to consent again under the new version before any further check.