KYC & Identity Verification Policy

Identity verification is what gives Aucemo records their weight. It deters fraud and impersonation, ties each asset to a real, accountable owner, and helps records stand up with insurers, banks, buyers and courts. No anonymous accounts can mint or transfer assets.

• Aadhaar & PAN data received through DigiLocker (Government of India) — name, date of birth, masked identifiers and verification status.
• Mobile number, verified by OTP.
• A short selfie video in which you state your name and a brief introduction.

We do not ask you to upload raw Aadhaar/PAN documents; verified data flows through DigiLocker with your consent.

We use DigiLocker, a Government of India service, to obtain verified identity data. You authorise the share at the time of verification, and you can review DigiLocker's own terms and consent screens during the flow. We receive only the verified fields needed to confirm your identity.

The selfie video is captured and stored as a record of intent and presence; it is not, by itself, run through third-party biometric verification. It exists to add a human, accountable layer to your profile and may be reviewed by our team in case of a dispute or suspected misuse.

• To confirm you are a real, unique person and to enable minting and transfers.
• To investigate fraud, disputes and breaches of our Acceptable Use Policy.
• We do not save your sensitive data for any purpose beyond verifying you — so we cannot and never will sell it or use it for advertising.

Identity data and the video are encrypted in transit and at rest, access is restricted on a need-to-know basis, and retention follows our Data Retention & Deletion Policy. We apply reasonable security practices consistent with the DPDP Act, 2023 and the SPDI Rules, 2011.

Subject to law, you may request access to or correction of your identity data and may withdraw consent or seek deletion. Note that certain records anchored on the blockchain (such as certificate hashes) cannot be altered or erased; we can unlink or redact associated off-chain data as described in the Data Retention & Deletion Policy.

We may ask you to re-verify if information appears outdated or compromised. Because your identity is verified, we can offer a secure recovery process if you lose access to your private passkey, without exposing control of your assets to anyone else.