InvestorAi

← Legal & Regulatory

Privacy Policy

InvestorAi is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable SEBI regulations, and other laws.

What information do we collect and use?

We collect, use and process several different types of information in accordance with the Digital Personal Data Protection Act, 2023 and by using our Services and providing your data, you consent to the processing described below. Consent is free, specific, informed, unconditional, and unambiguous. You may withdraw consent at any time.

Personal Data Collected:

  • Identity & KYC Data: Name, address, date of birth, PAN, Aadhaar number, signature, photograph, and other prescribed KYC details/documents.
  • Contact Data: Email address, phone number.
  • Account Data: Password, location data (where relevant).
  • Other: Any additional information you voluntarily provide.

We do not collect sensitive personal data beyond what is required for KYC/regulatory compliance unless necessary and with appropriate safeguards.

How do we use your Personal Data?

We use your Personal Data for various purposes, including but not limited to:

  • comply with the applicable laws and regulations.
  • check the identity and maintain/ update the KYC records.
  • comply with any legal process and to respond to requests from regulatory authorities.
  • provide, maintain and improve our Services.
  • notify you about changes or updates to the Services.
  • provide customer support and administrative purposes.
  • detect, prevent and address technical issues.
  • monitor the usage of the Services and gather diagnostic, technical and related information.
  • provide you with news, special offers and general information about our Services which we offer that may be of interest, unless you have opted not to receive such information.
  • create targeted advertising on social media platforms including lookalike audiences, and to prevent existing customers from being targeted with subscription offerings on social media platforms.

How is your data processed?

We take all appropriate technical and organizational measures to ensure the effective and secure processing of any Personal Data. “Processing” includes storing, transferring, sharing, recording and updating. Your Personal Data will only be processed for the purposes described above.

Data Sharing: We share your Personal Data only when necessary:

  • With regulators and authorities: SEBI, NSE, BSE, CDSL, NSDL, KYC Registration Agencies (KRAs), or other government bodies as mandated by law (for verification, investigation, or compliance).
  • With service providers and processors: Subcontractors, payment processors, and social media platforms (e.g., for advertising). These parties are bound by contracts to protect your data and use it only for the permitted purposes.
  • The Platform (our backend service provider) processes data on our behalf with security commitments.

We do not sell your Personal Data. Any sharing will comply with DPDP Act requirements.

The Platform is connected to and runs the back-end of our website. The Platform is committed to protecting the security of your Personal Data. While the Platform uses reasonable efforts to protect your Personal Data, the Platform cannot guarantee its absolute security.

How do we manage payments data?

We use a third party for payment processing. We will not store or collect your payment card details. That information is provided directly to our third party payment processor whose use of your personal information is governed by their privacy policy, which ensures the secure handling of payment information.

What are your rights?

You have the following rights (subject to applicable exceptions and verification):

  • Access: Request a summary of the Personal Data we hold about you and how it is processed.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your data (where no legal obligation requires retention).
  • Restriction: Request restriction of processing in certain cases.
  • Withdrawal of Consent: Withdraw consent for specific processing activities.
  • Portability: Receive your data in a structured, commonly used format (where processing is by automated means and based on consent).
  • Objection: Object to processing that has a disproportionate impact on your rights.

Updates, retention and deletion

We retain your Personal Data for a minimum of five (5) years after the end of our relationship with you, as required for accounting, regulatory, record-keeping, tax, and SEBI compliance purposes.

Once the purpose is served and retention is no longer required by law, we will delete or irreversibly anonymise your Personal Data.

Questions and complaints

If you wish to raise a question or complaint about how we have used your Personal Data, you can contact us at: dataprivacy@investorai.in

Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on our website with the “Last Updated” date. Continued use of our Services after changes constitutes acceptance of the updated policy.