Privacy & Data Protection Policy

1. Information We Collect

NOVEMAX collects necessary membership information including User ID, Mobile Number, Name, Email (optional), KYC verification documents, and payout bank account details.

2. Private Document Isolation

All identity proofs, address documents, and banking proofs submitted during KYC verification are stored on private, protected storage disks outside the public web root. Direct public URLs to sensitive files do not exist. Access requires authenticated and authorized role-based sessions.

3. Bank Account Encryption & Masking

Member bank account numbers are encrypted at rest using strong AES-256 application encryption. In regular user interfaces, receipts, and statement exports, account numbers are masked (e.g. XXXXXX1234) to prevent visual or shoulder-surfing exposure.

4. Internal Fund Confidentiality

Core Fund records, administrative reserve allocations, and system maintenance ledgers are strictly internal and inaccessible to general members.