Data Security & Privacy Commitment

At Glovgen, safeguarding your data and privacy is at the core of our values. We take extensive steps to ensure that your personal information is secure, responsibly processed, and used only for its intended purposes.

All KYC documents and sensitive information are protected through End-to-End Encryption, ensuring that only you and the intended verified service provider can access this data—not even Glovgen has access to your decrypted documents. This prevents unauthorized access during transmission or storage and guarantees that your identity data remains private, confidential, and tamper-proof.

We are committed to maintaining robust security and compliance across every layer of our infrastructure and processes.

Purpose of Data Collection

We collect and process limited user data—including, but not limited to, mobile numbers and optional email IDs—exclusively to facilitate the verification of government documents and IDs, and to enable their submission to authorized service providers. Your data is never used for promotional, marketing, or commercial gain, nor do we sell, trade, or rent user data under any circumstances.

Legal Basis for Processing

Our data processing activities are carried out in full compliance with the Information Technology Act, 2000 (India), the General Data Protection Regulation (GDPR) (where applicable), and other relevant laws. We obtain explicit user consent for all data processing during document verification, and such processing is strictly limited to fulfilling legitimate service purposes.

Scope of Usage

Collected data is used only for authentication, verification, and communication related to the services offered on the Glovgen platform. No profiling or automated decision-making is performed using your personal data.

Data Accuracy, Minimization & Retention

We make every effort to keep your data accurate, complete, and up-to-date. You may request changes or corrections by contacting our support team.

We follow the principle of data minimization, collecting only what is necessary. Your data is retained only for as long as needed to fulfill the intended purpose or as required by law. After completion of services, users may request data deletion, unless retention is mandated by applicable regulations.

Security Measures

We implement multi-layered security controls including:

• End to end Encryption at rest and in transit
• Application-level encryption for sensitive data
• Role-based access controls and environment segregation
  
• Key management systems with restricted access to authorized data teams
  Regular backup and restore tests, replication, and snapshotting for data durability

In the event of a security breach, affected users and regulatory authorities will be notified promptly, in compliance with legal requirements.

Best Practices for Your Security

To help protect your information, we recommend the following:

• Never share your card number, CVV, PIN, or OTP with anyone. Glovgen will never request such details.
  
• Do not install any remote access tools (e.g., AnyDesk, TeamViewer) when asked by unknown persons. These are never required for using Glovgen services.
  
• Avoid responding to unsolicited emails, calls, or messages that seek personal or financial information. Glovgen’s support is available only through the official app.
  
• Always reach out directly through the Glovgen app for assistance or queries.
  

Your vigilance helps us keep the community safe.

Cloud Infrastructure

Glovgen runs on a private cloud hosted within Amazon Web Services (AWS), providing a secure, scalable, and resilient infrastructure. This setup ensures reliable service delivery and strong technical safeguards.

Commitment to Responsible Disclosure

We welcome security researchers and enthusiasts to help us enhance our platform. If you discover a potential vulnerability:

• Please report it responsibly by emailing us at support@glovgen.com
• Share detailed steps to reproduce the issue
  
• Avoid public disclosure during our investigation

We are committed to promptly evaluating and addressing verified concerns in a responsible timeframe.

At Glovgen, your security is our responsibility—and we’re committed to maintaining the highest standards of data protection, privacy, and trust.